Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143955.roa
File: AS143955.roa (raw, json)
Hash identifier: ezlBgzFp/rp/esBtsAu47vNSd7ohv4qdsj8MI7LtNQU=
Subject key identifier: B0:8E:F9:52:F2:67:59:9A:6C:8A:67:14:6D:34:D7:06:AD:05:10:0B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 43FCD1DDE38E548E9107670047A5AC094198BF13
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143955.roa
Signing time: Tue 26 May 2026 01:13:18 +0000
ROA not before: Tue 26 May 2026 01:08:18 +0000
ROA not after: Tue 25 May 2027 01:13:18 +0000
asID: 143955
IP address blocks: 240a:a519::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:fc:d1:dd:e3:8e:54:8e:91:07:67:00:47:a5:ac:09:41:98:bf:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:18 2026 GMT
Not After : May 25 01:13:18 2027 GMT
Subject: CN=B08EF952F267599A6C8A67146D34D706AD05100B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:68:c0:c4:cb:ea:fd:a6:b8:6f:56:b3:82:b3:
3b:89:f8:1a:35:44:8a:68:6c:b8:43:63:3a:9f:1f:
f4:1f:ff:a6:5e:3f:8d:bb:17:cc:5b:bb:5a:a6:78:
4b:80:3d:6e:a4:80:47:16:ef:b1:3f:cf:cd:82:7e:
1b:7e:ab:76:c7:74:4e:f0:8d:25:d0:b9:6b:85:d7:
63:4d:a4:87:ed:d6:6f:ad:93:b3:38:bf:fb:b2:7d:
9f:bd:7a:95:7d:ed:ae:30:e5:ab:51:9c:22:27:d8:
fe:9b:08:ef:c9:2c:a5:3c:05:83:a0:b8:9e:a1:03:
7a:a1:40:ae:89:92:ff:e6:4a:0b:aa:42:1d:58:ec:
d1:7e:1b:5e:57:65:57:d9:a2:39:7a:af:ca:91:ac:
1a:77:d9:a4:5f:8a:71:5f:5a:8b:1b:08:3c:40:41:
4e:29:03:39:51:c7:8a:75:96:da:08:c6:d7:09:19:
7e:e4:11:36:6c:3a:19:46:95:c8:8f:bf:85:76:38:
a5:26:aa:6a:93:1c:85:33:12:3d:56:da:b8:20:01:
6f:68:30:da:7a:38:c8:69:55:71:93:56:38:05:18:
9e:9c:6f:93:a6:79:89:4d:6c:7a:ce:52:24:99:d9:
9f:97:23:53:81:de:35:cb:82:66:54:e8:f2:5a:9e:
85:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:8E:F9:52:F2:67:59:9A:6C:8A:67:14:6D:34:D7:06:AD:05:10:0B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143955.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a519::/32
Signature Algorithm: sha256WithRSAEncryption
05:e4:7f:66:eb:0e:6b:ae:0a:44:ee:9c:8e:36:e6:82:f4:19:
5f:46:5f:33:d2:8c:18:8c:ad:60:07:1e:27:db:22:b6:13:39:
b7:c0:c3:54:a6:cb:a9:c5:2b:55:3c:38:b4:d5:3d:fb:35:08:
1f:b0:06:8a:32:05:4a:6e:3a:a5:15:d9:9a:c6:c6:af:33:9f:
03:48:db:22:15:b4:5f:dc:92:2b:d0:15:7f:4f:dd:bd:8f:1d:
20:e7:ad:ed:57:a8:1c:e1:4f:74:fe:9a:43:4f:05:7a:93:10:
a7:48:1f:5c:e2:0d:d0:d9:50:47:74:95:dd:23:a8:ad:9b:a9:
71:81:ed:37:87:cf:14:e8:62:ac:75:79:66:d2:4e:9a:13:6a:
57:a4:2c:3b:35:b7:9c:0b:28:12:0e:a7:a7:d6:60:16:f1:34:
c3:2a:d9:57:80:a4:91:f2:a5:9a:96:79:70:03:a1:7a:b9:db:
b5:44:78:9c:37:39:10:07:bf:c9:d7:d9:c9:35:3d:ad:24:e7:
c8:82:bc:d0:3a:bd:40:b1:fa:7c:8e:2b:41:b9:1b:8f:ce:68:
2d:bf:e2:e0:e6:f2:a3:c9:ef:59:34:19:71:95:92:cb:33:22:
59:f8:3f:45:af:eb:cb:29:cf:39:24:ef:c4:2b:b0:31:a0:77:
aa:aa:1f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:15 2026 by rpki-client