Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143943.roa
File: AS143943.roa (raw, json)
Hash identifier: i3WnMiD6eUF46fWcGCzV8NdM73fxL8cgyYC72oErJGY=
Subject key identifier: 56:26:EE:C9:55:47:C3:27:52:7F:01:12:AC:7E:C1:57:6D:3C:38:74
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 087EFCFD6D0439E270A00A65632459B00729A091
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143943.roa
Signing time: Mon 25 May 2026 01:38:14 +0000
ROA not before: Mon 25 May 2026 01:33:14 +0000
ROA not after: Mon 24 May 2027 01:38:14 +0000
asID: 143943
IP address blocks: 240a:a50d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:7e:fc:fd:6d:04:39:e2:70:a0:0a:65:63:24:59:b0:07:29:a0:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:14 2026 GMT
Not After : May 24 01:38:14 2027 GMT
Subject: CN=5626EEC95547C327527F0112AC7EC1576D3C3874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:92:42:76:36:3f:f3:cb:22:63:4b:49:fa:c6:
95:f5:d2:8f:b4:48:4c:e8:23:88:00:8b:2c:ae:19:
1a:b1:08:e6:a2:9f:e7:27:64:0c:0d:51:ca:21:86:
55:ae:22:1a:cc:30:08:5e:ba:df:be:e6:fb:52:55:
90:7d:52:ee:5f:d3:79:4b:8e:fb:85:9c:42:a4:cb:
d7:f6:3e:8a:9c:31:87:ac:bb:ca:70:f8:b0:6d:3c:
e7:c5:73:26:f4:ac:fb:ee:75:7e:83:f0:13:7f:90:
d4:31:5e:0c:b7:70:f6:03:70:be:2b:4b:68:e4:ab:
1b:9d:16:ca:77:00:6d:a7:0d:18:46:80:1f:af:41:
5a:db:ae:fb:6c:cb:b1:df:cd:56:74:58:27:f4:ce:
43:17:71:a4:a7:cc:8a:38:1a:ff:e0:fb:d0:96:4a:
6b:14:c0:8d:7f:d9:36:bc:66:66:2f:c2:ab:f7:9a:
90:21:f5:9e:02:b2:4b:39:32:63:81:20:72:02:90:
ab:1b:ac:e0:72:91:1e:50:6c:33:e7:3c:25:42:9a:
5c:7b:ec:15:63:ce:41:09:28:40:bb:fc:44:4b:9c:
6e:af:e9:44:5e:6c:90:94:44:75:7a:25:05:24:74:
3f:dc:32:44:20:c6:1a:bb:dd:1b:dc:3e:23:be:61:
b8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:26:EE:C9:55:47:C3:27:52:7F:01:12:AC:7E:C1:57:6D:3C:38:74
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143943.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a50d::/32
Signature Algorithm: sha256WithRSAEncryption
50:66:b6:fb:77:34:2c:75:c2:32:8b:dc:b9:57:f9:7b:58:c0:
fd:16:d1:9a:a3:7d:fe:86:73:c4:0c:f4:36:25:aa:a3:00:f7:
3c:39:6e:a6:6a:a4:18:d7:7d:84:6b:e6:f4:37:de:78:49:b7:
49:02:88:4d:11:29:ef:a3:dc:7c:46:aa:83:19:41:ab:f8:cf:
29:22:be:98:3a:e5:5d:0e:42:82:3e:bd:5e:18:43:93:3d:01:
7a:f2:0f:e0:55:fc:12:4a:ac:fb:e1:81:4c:59:05:aa:a7:f4:
9f:05:7d:0e:b9:1e:c5:f9:72:4f:bf:8d:85:e5:5b:6f:07:43:
9e:25:6e:52:1f:32:62:79:a7:17:66:3b:3e:74:1e:2c:3f:97:
a8:33:3e:d1:e6:70:12:45:35:d7:06:c7:98:0f:08:53:c0:11:
40:27:3f:15:c0:ef:2e:82:26:b7:3e:60:b2:cc:b2:99:e2:87:
ab:e5:f7:51:81:cd:97:b4:f7:77:70:2b:00:d4:49:69:39:84:
ff:c2:3a:5b:e4:b0:57:13:4f:e3:86:da:54:81:5a:f5:e2:1b:
c3:3e:e1:92:68:e1:ee:81:28:7a:f2:cf:a9:28:b1:5d:02:72:
8e:90:64:6b:45:af:6c:35:73:d3:fd:a5:13:82:b7:53:68:ff:
40:58:e5:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:30 2026 by rpki-client