Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143939.roa
File: AS143939.roa (raw, json)
Hash identifier: /LzkwS1pT/UZhWvQ0jJzF8RWi+KTrOglPPem+rUXNaw=
Subject key identifier: A3:14:BD:90:29:02:8B:A7:C5:D3:97:33:BD:B7:4B:89:D7:C3:6D:A4
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6DA9165B6E62822EC598E5985718E785DEA62C1D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143939.roa
Signing time: Mon 25 May 2026 01:51:12 +0000
ROA not before: Mon 25 May 2026 01:46:12 +0000
ROA not after: Mon 24 May 2027 01:51:12 +0000
asID: 143939
IP address blocks: 240a:a509::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:a9:16:5b:6e:62:82:2e:c5:98:e5:98:57:18:e7:85:de:a6:2c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:12 2026 GMT
Not After : May 24 01:51:12 2027 GMT
Subject: CN=A314BD9029028BA7C5D39733BDB74B89D7C36DA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7e:63:8c:04:1e:d5:bb:44:fd:63:86:d6:09:
83:d8:9a:6a:b2:19:f6:ae:b9:b8:04:62:5d:b3:86:
62:91:4d:6c:e7:b0:21:33:a9:b2:c6:f1:7d:05:74:
fe:28:cb:8b:a4:b0:b2:e3:0b:03:be:50:03:4c:15:
4c:13:22:41:8e:51:90:5c:35:0c:e5:43:25:5c:c4:
96:53:5c:0b:cf:7e:bb:dd:46:f2:d7:8a:d7:d7:51:
cd:4d:3f:fe:03:2a:12:f1:10:b5:a6:47:18:35:8e:
e3:e4:97:e1:be:1c:a2:84:ab:d7:fd:14:2f:60:1d:
50:ce:9b:98:18:41:2d:0f:49:6e:08:b9:b5:f8:1e:
83:85:1a:b7:c2:5d:a2:7e:e4:4c:e1:c8:21:b8:97:
23:ea:d2:3e:f4:33:78:9c:2c:70:c2:4c:73:a1:e5:
c6:a1:ea:59:43:03:c0:98:81:15:d5:d4:25:cf:f7:
a1:53:4d:c3:46:90:4a:f6:25:17:7a:02:17:ee:06:
76:ca:99:8d:ce:bf:46:d8:6c:a4:a3:5e:ff:37:2e:
66:26:a2:26:f4:44:e0:7e:10:fa:34:60:66:69:4d:
32:f7:52:95:f1:b7:fc:03:7d:26:6e:6b:ab:44:ee:
60:25:36:f9:cd:36:3a:b7:ab:14:d2:77:5d:a8:00:
b1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:14:BD:90:29:02:8B:A7:C5:D3:97:33:BD:B7:4B:89:D7:C3:6D:A4
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a509::/32
Signature Algorithm: sha256WithRSAEncryption
13:ae:bf:38:c2:af:62:e2:9a:46:ab:e4:28:07:fa:ce:24:f8:
ed:13:d7:0e:97:71:3e:6b:a0:b9:9f:0d:bb:85:4a:43:d3:de:
00:5d:51:68:8b:8d:5e:42:92:87:b7:b6:f5:ee:f9:6b:12:55:
a3:36:37:72:f1:4d:da:52:64:0e:bd:42:57:c1:21:95:aa:71:
f6:b8:f0:0f:09:ce:ef:81:cd:04:56:f7:f5:17:e1:72:4a:2b:
9a:5c:0b:9c:dc:68:72:1a:46:f0:3f:5f:68:a1:31:18:a5:44:
80:9c:c8:c1:03:0c:3e:3d:a7:14:ad:9f:f1:19:f9:f0:40:04:
89:48:a9:c9:18:64:4d:40:be:e1:e3:09:a3:88:19:87:bb:17:
31:84:45:a1:8e:c3:e0:7b:58:49:70:23:3c:bb:ee:ab:78:4b:
3a:0f:66:87:cc:eb:ed:bc:a1:4d:36:f1:51:fc:d1:72:47:81:
80:45:e5:f2:f6:71:1b:a8:01:f3:25:7e:48:23:ef:10:87:98:
d7:b3:79:42:25:c5:22:01:ea:7d:c3:2f:c2:02:b4:c8:54:8d:
d6:75:f7:26:39:9f:df:cf:1f:b9:79:b5:a3:4e:f6:75:c9:82:
e0:d3:03:b6:14:bd:d2:09:22:31:5b:50:1f:c8:82:17:18:53:
4e:02:9a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:39:00 2026 by rpki-client