Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143945.roa
File: AS143945.roa (raw, json)
Hash identifier: 3rc6zDOogfeEBGG+SFaD7voWPyjtYTQrNHSNFM1YTj8=
Subject key identifier: 84:C2:45:A1:9D:57:CF:A3:3F:EC:2D:E7:F8:60:EE:14:0A:55:61:19
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7113DB6E8F7AC20E68290BE3B92A9A612176468A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143945.roa
Signing time: Fri 22 May 2026 07:08:45 +0000
ROA not before: Fri 22 May 2026 07:03:45 +0000
ROA not after: Fri 21 May 2027 07:08:45 +0000
asID: 143945
IP address blocks: 240a:a50f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:13:db:6e:8f:7a:c2:0e:68:29:0b:e3:b9:2a:9a:61:21:76:46:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:03:45 2026 GMT
Not After : May 21 07:08:45 2027 GMT
Subject: CN=84C245A19D57CFA33FEC2DE7F860EE140A556119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:de:89:d1:3c:79:8d:af:f3:54:81:3a:ea:f6:
99:cf:3c:e1:42:f5:6c:6c:6f:ed:36:94:09:8b:2f:
fe:64:35:da:d3:45:82:b2:09:f2:2a:49:fe:0d:9a:
41:bc:79:15:3d:c0:ff:73:e7:46:a6:b1:01:cc:33:
cc:4e:ef:fb:9f:11:76:c6:4b:80:10:a2:93:58:28:
e5:79:d5:47:d1:61:19:39:88:9e:7c:a1:0c:1d:24:
70:86:f2:ab:d3:76:1a:41:41:ff:f3:e4:10:35:e3:
cf:11:3f:38:9a:92:74:71:d3:4f:59:20:c1:a1:fe:
a9:26:eb:ad:5c:01:82:db:c3:49:11:70:d2:90:6f:
e5:a4:0f:b3:d7:4b:9b:69:d0:01:82:95:2d:25:c4:
b4:be:ce:ac:e3:4c:2d:56:a2:b3:51:4a:6b:e6:4f:
38:34:42:7f:41:17:b3:5f:27:5a:61:b3:a4:83:3f:
11:c6:83:3c:9e:68:11:10:77:5d:61:05:cb:b7:23:
93:a0:9c:a8:a0:95:80:68:ab:34:62:77:aa:5a:a3:
b2:9f:04:d3:56:3b:45:8d:23:9c:c1:31:43:38:ca:
11:4b:55:87:db:f5:56:11:71:ab:73:4b:78:08:d6:
a6:4e:37:77:13:62:9e:b6:a4:77:87:c9:f8:68:a7:
c0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C2:45:A1:9D:57:CF:A3:3F:EC:2D:E7:F8:60:EE:14:0A:55:61:19
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143945.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a50f::/32
Signature Algorithm: sha256WithRSAEncryption
95:ac:b3:61:2f:c4:21:c7:2f:0b:0b:76:69:30:e4:ce:94:52:
1f:31:ba:d1:4c:87:48:4b:0f:69:9b:63:50:6b:10:dc:be:45:
57:c1:7c:b4:af:02:41:19:99:8c:c4:8f:5a:58:8b:b3:a9:54:
ef:60:8b:6f:fd:c9:86:a1:47:a8:d7:c4:48:9e:0e:cf:33:88:
ac:e0:af:96:92:09:e9:e5:58:62:25:a2:98:9b:62:7d:f0:7e:
a6:76:f3:42:53:fe:41:df:68:29:4d:9f:f3:95:a0:ba:e1:6c:
26:28:83:7f:d4:01:4f:8f:2f:43:e8:e8:77:44:b2:0c:89:b5:
65:c2:e0:21:e6:a4:00:8e:29:39:36:e7:c7:f2:9a:5f:46:1b:
e0:2c:ff:12:71:f1:c0:97:a8:3e:00:da:73:a6:28:6d:4c:41:
04:f0:71:3f:36:34:b7:f6:2a:3c:06:96:e0:20:bb:ee:ae:27:
1a:88:17:08:f2:0b:49:11:b3:87:95:e6:69:52:66:f1:5f:76:
7a:97:08:6d:f1:15:82:8f:12:c7:62:bb:24:01:55:25:f2:54:
11:95:21:07:a7:f6:69:99:6b:4e:0f:09:78:3a:5e:42:c0:5c:
4c:5c:23:9b:c6:ee:38:87:9f:db:c2:aa:cb:e2:eb:c7:a1:61:
4c:f6:ff:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:30 2026 by rpki-client