Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143947.roa
File: AS143947.roa (raw, json)
Hash identifier: BbcPeu4i18Q+X3UQADj/VD1Sp8YCdMYf0avzejogaJg=
Subject key identifier: 75:54:19:80:60:02:4B:D1:4B:7F:EB:9A:D3:8D:95:33:8A:9E:F1:CD
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3B8EEEA26D19A3E9624C1E4F6E97E3202D901E2F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143947.roa
Signing time: Mon 25 May 2026 01:19:53 +0000
ROA not before: Mon 25 May 2026 01:14:53 +0000
ROA not after: Mon 24 May 2027 01:19:53 +0000
asID: 143947
IP address blocks: 240a:a511::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:8e:ee:a2:6d:19:a3:e9:62:4c:1e:4f:6e:97:e3:20:2d:90:1e:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:14:53 2026 GMT
Not After : May 24 01:19:53 2027 GMT
Subject: CN=7554198060024BD14B7FEB9AD38D95338A9EF1CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:0a:43:62:89:c6:6f:a7:d0:86:8d:f4:70:18:
54:70:8a:49:f0:db:fb:a9:bf:fe:72:fb:f1:3d:c8:
3d:d4:2d:51:c1:14:30:f4:d3:46:a9:1d:24:5d:57:
45:77:31:1f:47:f4:ba:e6:70:25:f9:9f:b5:ed:7f:
c6:0d:02:f3:69:65:01:f8:aa:d5:56:54:64:b5:b3:
b9:c7:83:28:5e:54:5d:07:2e:ba:76:6d:f0:dd:75:
8b:18:a0:d0:60:85:d5:71:ef:80:b2:9a:4f:bf:60:
48:56:1c:8a:52:a6:d4:c2:ed:ee:a6:bc:59:f0:fd:
d2:5b:07:af:f1:a9:d8:5d:09:d0:a6:9b:75:3f:41:
f7:df:98:9d:ec:f2:09:11:5b:dd:68:cd:04:54:fe:
98:d5:84:b8:a2:a1:09:c5:db:2f:83:e6:6c:6b:18:
87:85:ce:19:ba:89:17:a7:79:e3:ea:bc:2c:dc:59:
16:14:50:12:28:cf:c2:9a:b9:4a:85:c5:26:19:eb:
46:94:9b:64:75:4a:a9:3d:35:1e:6d:ef:95:26:72:
6d:20:9a:25:ab:75:3e:cd:ec:90:5a:dd:10:06:54:
9b:be:51:48:6a:83:7f:27:c9:ea:7a:da:57:7c:73:
7b:2b:94:01:d1:19:4f:5a:30:61:f0:f4:68:6e:8f:
fc:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:54:19:80:60:02:4B:D1:4B:7F:EB:9A:D3:8D:95:33:8A:9E:F1:CD
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143947.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a511::/32
Signature Algorithm: sha256WithRSAEncryption
a5:10:8d:ec:d0:61:ee:91:fb:e5:d4:9d:df:f0:46:51:7b:7f:
21:f6:32:06:04:d7:d6:ba:96:98:00:71:40:f2:43:8d:ee:1d:
a3:5e:c3:34:0b:2a:1f:14:98:1e:84:f9:98:d9:81:90:1d:27:
46:c7:f0:ae:15:21:75:09:fe:83:1b:77:95:f7:a8:ed:ee:a9:
a9:84:1d:92:2d:36:49:56:a0:2e:19:fa:f1:dc:50:0e:5c:6f:
32:52:68:ee:6d:76:b9:a1:a8:23:79:4f:fd:8a:13:f9:6b:c8:
fc:4a:db:2d:fa:5b:ff:ff:2c:d8:35:2a:e6:b5:b8:b7:8e:7d:
db:37:4a:e7:2f:15:6e:23:db:dd:42:24:fb:46:03:96:13:5c:
6b:76:46:c0:c6:42:8c:04:94:26:b6:99:25:5a:3a:4b:64:75:
9e:1d:55:f2:0f:5e:f6:b7:06:97:2d:5c:2a:75:8b:ae:c3:c6:
6d:73:a9:63:78:70:fc:4f:8d:ee:61:d5:69:35:73:c1:fd:42:
41:28:15:d3:13:2a:f0:94:0d:64:39:c0:32:b5:99:0f:c3:bd:
b4:d1:66:1c:4f:ac:9c:20:c2:d0:51:82:6f:cc:2a:d1:ac:df:
ce:28:09:8a:d1:05:cd:b3:f2:54:5d:e1:16:b1:ca:be:1b:11:
ec:3d:62:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:23 2026 by rpki-client