Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143935.roa
File: AS143935.roa (raw, json)
Hash identifier: +RdwBYF5GIQugNkiqIciyFtLDWQGRO3rM7wa+yrsoEo=
Subject key identifier: 3F:34:81:B2:7F:22:E0:96:E5:59:CF:CB:E0:A9:7F:D0:8E:1E:E2:80
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3F7DA56DEAF6487699A1903036101A17B046DE28
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143935.roa
Signing time: Mon 25 May 2026 01:51:21 +0000
ROA not before: Mon 25 May 2026 01:46:21 +0000
ROA not after: Mon 24 May 2027 01:51:21 +0000
asID: 143935
IP address blocks: 240a:a505::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:7d:a5:6d:ea:f6:48:76:99:a1:90:30:36:10:1a:17:b0:46:de:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:21 2026 GMT
Not After : May 24 01:51:21 2027 GMT
Subject: CN=3F3481B27F22E096E559CFCBE0A97FD08E1EE280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:15:64:f8:05:6c:d2:2d:96:eb:9c:22:d7:e3:
43:92:92:19:ee:3a:bd:1c:d0:1a:a6:de:ae:38:a0:
17:9a:51:72:ba:cd:81:3b:96:f0:bb:69:e0:0d:03:
80:80:79:5d:63:5c:34:a7:21:7c:13:1d:d5:54:8b:
d8:e6:c6:f0:9a:2d:86:ea:5c:82:f1:77:00:03:dd:
0f:a3:31:c2:6f:c8:89:0c:bf:b5:93:95:77:d8:4b:
8b:2e:01:75:63:5a:4a:dc:24:b3:3a:d4:9b:61:41:
d8:1f:5d:69:b2:bb:6c:ec:b9:3a:8d:0a:4e:9f:33:
b5:be:03:34:0b:2b:e5:47:0d:5f:45:cf:f6:ba:64:
e0:43:ef:9f:f4:67:ef:f7:63:02:74:d6:14:8f:04:
89:01:2b:d9:42:76:93:a1:f3:06:c9:de:ee:71:ef:
69:10:58:23:5c:32:77:d9:17:ad:ef:3f:c7:24:dd:
df:1c:2a:f7:a7:7f:6c:7e:58:db:97:3a:fa:6f:1b:
f3:8d:e7:6b:36:bb:ac:67:4f:11:63:4d:d6:4f:ab:
71:e3:4d:75:6c:0f:12:3a:05:0f:58:9b:32:9d:f9:
e3:71:4e:3e:9a:21:4a:2a:ca:31:ab:88:d5:1c:9f:
fc:c8:67:25:78:ea:12:7f:51:0e:c2:63:06:65:00:
9e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:34:81:B2:7F:22:E0:96:E5:59:CF:CB:E0:A9:7F:D0:8E:1E:E2:80
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a505::/32
Signature Algorithm: sha256WithRSAEncryption
54:62:a9:e3:8a:83:72:81:e4:ae:5b:6f:66:17:fe:fc:8a:fc:
c5:f3:fd:38:a2:65:36:e0:63:b0:9e:17:26:05:16:26:d4:82:
7c:54:a9:30:4c:4c:a1:cd:a8:b5:33:eb:66:77:49:7c:ea:58:
ae:2c:20:f1:db:48:65:61:4b:4e:a0:95:22:89:be:2c:b6:cd:
af:2a:2e:16:af:d5:c6:c4:4c:f9:39:98:af:09:dc:83:a2:cf:
7e:07:99:d9:11:77:90:f6:c7:80:23:e7:31:a2:50:07:0d:8b:
44:8d:44:e7:87:93:d8:72:97:a9:5e:5f:9a:19:5a:ae:1d:46:
e5:28:ec:71:e1:c0:7a:12:f6:fd:4a:4b:46:72:8e:91:36:1e:
22:a4:43:5f:45:3b:e5:06:3a:6c:a5:0b:8a:64:eb:30:e5:7b:
7e:98:7e:bd:15:42:48:35:fd:7d:f9:09:62:7f:1f:67:0c:e8:
78:f1:d5:3d:7c:55:2b:56:0b:b4:1f:0e:83:1f:8a:d2:af:3a:
8f:93:b4:1c:9f:ca:9e:83:db:3e:60:81:49:16:aa:ff:f7:47:
d4:cc:bd:34:2f:9e:5e:b6:d8:a7:c0:bb:1a:d4:c2:1c:a2:47:
c2:0f:c8:8d:71:37:3c:ff:4c:67:4f:80:16:78:dd:59:98:46:
77:17:3b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:39 2026 by rpki-client