Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143956.roa
File: AS143956.roa (raw, json)
Hash identifier: uDgyxtLxy/5I/3qtanIy7m8wVkE5ijM6KtI4N0hP4a8=
Subject key identifier: BA:7E:52:7A:2F:7C:A8:65:F3:80:68:2D:2A:CA:70:5B:B5:17:C4:78
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2B6F26A7F0A53A0097F7E20BFE847EA0D61B2144
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143956.roa
Signing time: Mon 25 May 2026 06:48:49 +0000
ROA not before: Mon 25 May 2026 06:43:49 +0000
ROA not after: Mon 24 May 2027 06:48:49 +0000
asID: 143956
IP address blocks: 240a:a51a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:6f:26:a7:f0:a5:3a:00:97:f7:e2:0b:fe:84:7e:a0:d6:1b:21:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:43:49 2026 GMT
Not After : May 24 06:48:49 2027 GMT
Subject: CN=BA7E527A2F7CA865F380682D2ACA705BB517C478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ed:f5:90:64:db:ec:d0:de:24:45:8c:fd:9b:
dd:ee:6d:79:6f:6e:74:b3:62:3e:8d:4b:c7:60:39:
92:fa:1c:bb:80:ae:d5:92:9f:19:a9:a2:75:8b:27:
ab:a6:8e:29:57:b9:24:17:68:e0:85:fc:53:cc:a1:
a0:bf:46:14:78:02:25:29:86:47:5d:f0:eb:dc:9b:
bf:c8:11:14:04:35:a4:81:fd:a2:5e:c8:92:9c:3e:
c6:63:71:05:e9:f1:b9:b4:4c:89:a7:f7:fa:13:22:
c7:d8:60:0b:11:fe:f9:95:3a:d1:48:1d:37:eb:cf:
fd:06:f5:8b:c3:0f:49:79:94:62:80:a1:a2:81:76:
9f:ef:92:46:c4:38:52:ee:83:1d:91:ee:cb:82:46:
d1:37:eb:59:3a:5e:cf:74:00:2e:5e:88:9b:77:61:
c9:91:16:4f:fb:36:d5:1f:9d:35:6a:e9:4f:68:86:
9c:64:12:1f:88:06:c5:02:62:6b:9e:ac:12:24:70:
c4:62:b0:46:93:2b:47:b2:17:2e:57:a5:df:9e:c7:
31:3d:86:d2:55:fe:a6:43:27:20:77:35:76:54:e0:
63:38:fc:a0:f5:66:81:06:dd:54:bc:91:92:11:e9:
5a:00:fd:8f:0d:5c:ce:93:3c:5d:a3:99:5b:e5:24:
57:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:7E:52:7A:2F:7C:A8:65:F3:80:68:2D:2A:CA:70:5B:B5:17:C4:78
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143956.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a51a::/32
Signature Algorithm: sha256WithRSAEncryption
4b:89:41:52:1b:7e:0e:9d:e6:f9:96:65:97:b1:94:d6:88:2e:
78:13:0f:96:19:a8:ad:c9:f2:40:d6:56:d2:1c:86:95:7f:f0:
89:60:f9:7e:e2:fc:e7:b0:5b:5e:b7:98:77:ad:f9:46:da:28:
ca:c4:b5:65:9e:4a:89:d9:7b:a4:52:4d:29:21:7e:17:4c:5e:
48:ec:a4:31:d5:d3:13:b3:9e:a6:ad:51:9c:ff:1a:6a:92:46:
37:06:48:08:bf:7e:41:34:06:c3:8d:82:57:94:18:85:7b:93:
f7:ec:00:ab:f1:c7:a1:9e:09:bb:f9:cc:3b:92:e1:22:ec:f0:
65:ff:13:71:db:d3:f0:38:55:17:c2:ff:49:46:68:e9:ef:fc:
14:4c:2c:f1:5b:8c:11:8b:49:25:ac:27:f0:ea:62:61:88:88:
bd:31:0d:72:8b:f1:25:0b:2a:c9:c3:d6:ca:94:25:fd:b6:49:
8d:57:70:68:09:91:1c:fe:32:5c:db:63:ae:24:23:f4:f7:0f:
2e:18:47:07:82:58:e7:1d:6f:88:fd:8b:05:ea:03:ec:81:24:
35:8b:e2:f0:36:cf:0e:cc:ee:1e:e6:8a:1f:75:76:16:39:53:
4f:47:89:1d:41:50:b2:48:d5:0f:67:85:c1:5f:70:0e:27:3e:
40:bc:9b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:12 2026 by rpki-client