Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143934.roa
File: AS143934.roa (raw, json)
Hash identifier: jYTSqcd6WTQm13IQLLQyFBDT6MnQUluQMnJMfihwNoc=
Subject key identifier: C1:D4:14:C4:2B:22:AA:86:8D:3A:A2:08:58:32:8C:4A:89:0E:99:E1
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 44DF8105F0064689A75AA25E5FC6A42A2AF82655
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143934.roa
Signing time: Fri 22 May 2026 04:26:47 +0000
ROA not before: Fri 22 May 2026 04:21:47 +0000
ROA not after: Fri 21 May 2027 04:26:47 +0000
asID: 143934
IP address blocks: 240a:a504::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:df:81:05:f0:06:46:89:a7:5a:a2:5e:5f:c6:a4:2a:2a:f8:26:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:21:47 2026 GMT
Not After : May 21 04:26:47 2027 GMT
Subject: CN=C1D414C42B22AA868D3AA20858328C4A890E99E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b0:93:b1:38:21:b3:84:fc:33:fa:6f:ac:e0:
0d:dc:a9:4a:d1:93:d2:bd:6d:3a:69:a4:f4:85:a7:
2c:c9:8e:c7:a4:d5:4c:4e:77:d9:7c:bd:3a:cc:c7:
1c:76:cc:09:c8:f7:24:6c:73:53:0e:c4:46:52:46:
19:8f:c4:da:9f:64:00:c0:e2:73:02:34:a8:b7:5b:
d6:53:7b:14:d6:40:a3:1d:ed:a4:84:90:a7:6f:0e:
f9:b5:06:d2:b9:a6:a0:96:2b:e1:83:b2:5c:4a:a0:
b9:03:d9:c7:fd:e4:24:3a:a1:03:43:e3:cb:7c:a4:
60:9d:1d:7f:17:3b:cf:1f:79:d0:88:20:19:6e:a5:
ad:72:14:19:61:3f:3b:6e:cd:e6:7b:4e:6a:57:a1:
cd:c7:df:79:c2:b9:65:f7:45:dd:d2:f1:63:af:26:
7c:8b:0c:dc:54:10:dc:28:3a:3c:81:eb:91:0d:3b:
55:61:86:9f:60:b5:41:2f:e6:d1:5d:a8:1e:90:4f:
6f:f4:de:1f:ff:b6:f8:9c:c1:16:ce:71:33:43:4c:
23:a3:2f:8f:6e:68:2d:f7:ac:16:2e:13:dc:5c:b3:
a4:2f:b8:ef:41:67:52:55:99:32:0d:ad:33:d2:2f:
80:65:ad:f6:5c:f4:e2:cb:73:8d:a8:ee:12:76:5e:
34:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:D4:14:C4:2B:22:AA:86:8D:3A:A2:08:58:32:8C:4A:89:0E:99:E1
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a504::/32
Signature Algorithm: sha256WithRSAEncryption
a8:2e:77:00:ac:00:d8:08:06:be:7f:8d:69:52:de:b4:5e:41:
ff:d8:1d:7c:fe:b3:ed:2b:30:bd:7a:a9:9c:06:73:0d:85:e4:
6a:3d:df:5d:86:bd:41:73:5d:e3:cf:47:0b:da:00:d3:75:2f:
68:fe:43:20:24:b3:36:71:43:eb:26:e2:94:ed:2f:75:8f:01:
a5:aa:a8:1a:60:93:52:00:69:80:05:aa:f9:61:a0:88:93:4f:
c9:e8:7b:f8:31:91:d0:cf:6e:26:4f:da:c6:71:55:3f:ee:f7:
a7:55:8f:7d:a3:28:11:d4:c3:ad:7d:1a:00:95:3a:ea:47:73:
fa:66:49:c1:f1:a4:1c:30:81:09:51:f0:8a:51:c2:ea:e0:07:
9d:cb:c0:67:3d:01:82:31:02:1a:42:25:ad:e3:a7:09:6a:dc:
38:3a:65:2b:9e:6f:96:66:93:81:52:a7:10:a2:9c:97:72:6a:
38:79:13:f3:53:9a:89:6c:00:01:34:f5:69:04:91:e0:f1:ba:
b4:66:8c:5b:46:e7:88:4d:ab:a2:a7:ce:49:63:8e:17:8f:95:
a3:c0:f8:15:32:ff:c8:25:c8:f1:d6:8a:0e:a6:0c:8d:d8:bf:
ea:c1:66:27:0e:94:14:7e:11:ee:ed:ed:8e:e4:d8:18:60:df:
2c:63:f3:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:31 2026 by rpki-client