Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143949.roa
File: AS143949.roa (raw, json)
Hash identifier: 9OtNwQkSrL56pvv5QQtFMW4DBPC3+uutI6GqjRvItu8=
Subject key identifier: 4C:6A:54:6E:6C:30:6B:6C:16:BD:C4:8F:E1:F8:19:E5:2A:6D:15:69
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 31DF78C17B4C6D1AD1B3579786AAA82027B6714A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143949.roa
Signing time: Fri 22 May 2026 06:46:30 +0000
ROA not before: Fri 22 May 2026 06:41:30 +0000
ROA not after: Fri 21 May 2027 06:46:30 +0000
asID: 143949
IP address blocks: 240a:a513::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:df:78:c1:7b:4c:6d:1a:d1:b3:57:97:86:aa:a8:20:27:b6:71:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:30 2026 GMT
Not After : May 21 06:46:30 2027 GMT
Subject: CN=4C6A546E6C306B6C16BDC48FE1F819E52A6D1569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1f:d7:7f:f7:49:27:e5:39:f1:f4:e6:ed:b2:
05:61:a6:e2:23:cc:45:76:d3:a7:34:b0:60:78:24:
93:3a:f1:f6:7a:7d:e9:ee:bf:dc:a2:e6:30:bf:dd:
5f:34:4e:fb:95:1d:d8:4b:43:37:3f:a5:a3:d3:68:
d3:c2:63:62:ad:4f:98:54:9a:ab:0a:ac:49:3e:c6:
5f:bf:45:4a:d2:79:ad:59:de:33:64:92:45:11:48:
6d:d3:d9:50:96:6c:3a:19:4d:c9:29:d1:da:a2:51:
66:ff:da:4d:94:dd:13:11:bc:07:76:7b:ce:17:89:
f8:1e:d1:ad:39:41:49:20:29:f5:63:70:12:fa:a3:
c9:e4:c3:c5:d3:ef:c2:64:e9:3c:40:fb:78:7d:a9:
44:66:b5:cd:26:77:76:40:06:fc:7c:d9:6e:20:cd:
25:0b:44:33:7b:3c:52:e3:1f:f5:2f:67:5d:6f:11:
73:bf:b0:fb:0b:26:94:c5:f0:ca:28:a3:30:93:4a:
18:17:ba:f4:c9:be:bc:26:f1:fa:98:5f:61:10:a3:
e9:9e:25:8d:31:0a:28:d2:29:fb:85:37:1e:f2:63:
f1:06:f6:36:11:ca:ec:f5:ed:b8:af:65:3b:23:59:
1c:51:14:14:1c:b0:b5:d3:71:1f:60:2b:25:35:12:
c4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:6A:54:6E:6C:30:6B:6C:16:BD:C4:8F:E1:F8:19:E5:2A:6D:15:69
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143949.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a513::/32
Signature Algorithm: sha256WithRSAEncryption
63:5c:55:58:c0:04:3b:1b:52:7c:e2:f6:95:9b:75:b3:25:4d:
9d:7a:b2:3a:b2:cd:78:2c:eb:c5:17:3a:ca:0c:c8:00:52:fb:
83:86:ca:1d:11:29:06:25:96:21:64:6c:00:95:7b:f6:0f:e1:
ed:7d:25:1d:a6:18:79:7e:5b:21:53:75:5b:d9:28:26:d7:17:
d3:d7:41:ad:38:43:ec:0d:63:a4:22:a8:fb:aa:e4:3f:d0:ed:
62:e2:35:ef:d4:52:a3:8e:42:11:b8:bc:73:0f:90:4e:91:e1:
33:31:9f:36:40:1e:53:c4:25:54:cd:da:5e:97:45:3c:84:a8:
28:96:73:17:9a:61:85:d7:0c:c5:98:c0:35:c6:7f:ce:79:bd:
fa:3f:33:f8:a0:6c:7e:70:e0:6e:d7:94:89:3a:e8:0d:34:0b:
63:b8:dc:fe:3c:c9:06:9c:54:48:ba:95:95:c1:ef:b0:c5:a0:
5f:15:19:90:47:38:60:1b:03:58:08:1a:02:07:fe:eb:12:96:
3c:e0:30:4d:f3:20:6e:44:62:d1:56:45:b8:38:ea:7b:6a:4d:
3a:46:91:5c:b3:0c:be:8c:5e:fb:1e:51:80:b9:0d:69:4e:4f:
54:f1:4b:fa:2b:76:fd:ba:ca:eb:bf:fa:f9:a6:93:85:44:85:
17:80:ab:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:15 2026 by rpki-client