Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143938.roa
File: AS143938.roa (raw, json)
Hash identifier: DT79RaFNW9cqxB06/3BM7dfJHqJIDLMtGVD3Xk1vTIQ=
Subject key identifier: C3:38:0F:01:94:09:A1:4F:D6:AC:26:24:91:9C:FC:90:68:25:BD:11
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 41E47E5583BA19C8C6EC2DD3E7AC4B24C476D376
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143938.roa
Signing time: Tue 26 May 2026 08:52:54 +0000
ROA not before: Tue 26 May 2026 08:47:54 +0000
ROA not after: Tue 25 May 2027 08:52:54 +0000
asID: 143938
IP address blocks: 240a:a508::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:e4:7e:55:83:ba:19:c8:c6:ec:2d:d3:e7:ac:4b:24:c4:76:d3:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 08:47:54 2026 GMT
Not After : May 25 08:52:54 2027 GMT
Subject: CN=C3380F019409A14FD6AC2624919CFC906825BD11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:52:1e:1c:23:51:bc:a8:ef:c2:52:a9:8d:75:
10:1b:79:63:97:43:9b:5a:52:ec:d4:ee:b5:90:ae:
c6:ae:0c:75:2d:a4:e5:f7:dc:fe:60:37:3f:a8:b0:
6a:30:76:f4:a7:6e:82:c4:a7:88:0d:92:a0:0d:df:
b1:4e:bc:71:49:10:16:82:02:70:e7:8e:56:9f:e5:
51:94:d1:02:49:a2:10:44:5e:03:13:ef:bf:ca:b9:
ee:07:9c:4b:65:4a:93:43:06:a1:43:30:df:80:f8:
30:d5:c7:ed:5b:41:3f:c4:6c:bc:8f:81:43:9d:40:
34:6f:f3:36:28:14:5f:2a:a6:7d:eb:79:71:04:55:
ca:df:5f:55:2e:af:dc:1a:0e:61:ad:56:b0:a3:54:
8d:82:b7:bd:76:c6:ad:32:2a:4a:cb:ee:5b:4a:bb:
f5:95:dd:9d:5e:3e:f7:2b:da:d9:89:b7:9a:94:7d:
c6:d7:be:7c:d8:62:52:f9:5a:3f:c9:22:f9:e9:27:
5c:26:f8:91:86:3a:c9:6b:1a:58:a0:5a:7a:71:77:
64:b1:93:2a:82:a3:55:75:1f:30:48:b3:ae:bb:3c:
fb:a8:e0:1a:29:9c:62:21:b5:f2:cb:ec:8b:37:d4:
b3:5a:25:57:39:5b:86:3a:08:46:bb:c3:86:ea:d6:
43:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:38:0F:01:94:09:A1:4F:D6:AC:26:24:91:9C:FC:90:68:25:BD:11
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a508::/32
Signature Algorithm: sha256WithRSAEncryption
8f:37:08:3c:a0:d1:dc:ee:af:a8:4e:29:4a:22:fd:1d:cf:49:
35:9a:f8:f1:d5:e6:91:f5:98:78:53:2c:f7:d6:9f:39:51:94:
e3:c9:ef:58:81:6c:52:b5:ab:b5:e4:6c:9d:2d:d3:39:a3:dd:
2a:f6:fc:94:f2:c0:8a:53:8c:57:e7:3a:b3:52:dd:6b:7d:e4:
d3:ef:30:91:59:c3:dc:54:e9:dc:36:95:2a:95:11:02:9b:9c:
b0:01:af:1b:c1:6d:2f:aa:b6:a9:19:4f:a5:a2:95:e4:88:de:
48:a1:d6:d9:07:07:6f:ff:ef:2a:e6:0c:2f:89:96:ba:17:c0:
b4:f8:c1:60:23:f6:54:a2:c7:b2:57:fb:ae:1b:f4:9d:3c:83:
de:6b:59:d8:f1:57:8d:74:a7:39:7b:28:ce:2e:b5:b6:d2:f0:
c1:0e:84:12:9a:12:5b:cf:14:25:87:e2:8d:8e:82:7a:bf:2b:
5b:b2:e1:0d:2d:a1:6e:5a:75:db:94:9f:ec:0e:00:8c:6b:19:
bd:32:04:d0:1a:d1:b7:d3:4b:63:08:dc:1e:6b:16:95:b1:ec:
46:b4:e0:7d:ef:ba:54:81:fd:39:28:a1:73:5d:39:f9:af:32:
59:d6:2a:27:27:d6:af:21:d7:21:50:b6:a2:5b:44:fe:77:19:
92:db:ae:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:50:01 2026 by rpki-client