Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143959.roa
File: AS143959.roa (raw, json)
Hash identifier: nCkxIJ3UVay6hbL7Jp/h/XH2QiQ0hSmLXavR+iPYGSU=
Subject key identifier: 31:77:F0:67:94:20:47:BF:26:E6:57:72:E6:28:28:14:11:72:E0:AC
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 197259562D0CDB5180B05FAFD92FAB694CC9C593
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143959.roa
Signing time: Fri 22 May 2026 04:27:12 +0000
ROA not before: Fri 22 May 2026 04:22:12 +0000
ROA not after: Fri 21 May 2027 04:27:12 +0000
asID: 143959
IP address blocks: 240a:a51d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:72:59:56:2d:0c:db:51:80:b0:5f:af:d9:2f:ab:69:4c:c9:c5:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:22:12 2026 GMT
Not After : May 21 04:27:12 2027 GMT
Subject: CN=3177F067942047BF26E65772E62828141172E0AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:04:15:32:06:e8:19:d8:4e:72:b6:e7:b4:86:
e5:46:42:70:ed:89:4a:63:59:ca:e3:fa:b1:71:43:
38:b8:1d:52:2c:0b:a1:80:6c:ee:d2:91:4c:16:92:
b7:a3:e4:d5:74:08:28:28:a2:70:4c:a7:2c:af:28:
02:a2:f1:25:7c:85:9c:3f:0c:86:21:37:fd:c3:71:
5a:03:46:3c:80:de:6d:2f:ed:89:08:e9:fb:bd:0d:
d9:74:de:55:d0:c2:b8:01:27:fd:27:d2:4f:01:e8:
1e:9d:06:48:7d:3c:d4:10:32:a4:cd:4c:14:bc:1d:
89:80:11:0a:97:16:d0:6b:df:3d:3a:db:77:4a:d5:
b3:0a:e9:52:0b:7d:23:86:ff:90:75:fd:e6:2b:b3:
1d:c5:ad:b8:98:6b:a1:42:17:f9:d0:aa:90:ad:aa:
1b:b5:ce:f9:a6:68:ce:0b:62:f8:fb:2b:06:73:d3:
0f:13:f8:ca:83:ae:99:6a:02:98:4c:ab:02:b6:74:
84:5d:bb:3c:9d:78:5b:56:96:97:db:5c:23:4b:94:
58:8c:22:99:e7:bd:59:da:76:af:96:33:d7:a3:af:
2c:1b:3a:83:1c:b6:23:ed:c4:58:4a:b2:2b:55:98:
75:cd:ec:5b:ee:cb:58:5a:30:51:a8:f6:26:0e:a8:
56:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:77:F0:67:94:20:47:BF:26:E6:57:72:E6:28:28:14:11:72:E0:AC
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143959.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a51d::/32
Signature Algorithm: sha256WithRSAEncryption
bb:13:aa:15:78:db:81:5b:86:78:53:9d:16:6e:00:cc:fc:97:
e5:18:a8:4f:5c:48:5c:16:48:47:fd:3f:2b:63:67:86:48:6e:
80:d5:84:7f:6a:56:bc:a5:3c:7c:d3:f7:71:fd:01:62:8a:18:
bb:61:84:5f:a8:dd:a6:c4:7c:06:eb:f8:b2:a1:c7:da:96:aa:
fd:d2:ea:f5:13:63:9b:fc:56:8a:de:9b:02:d8:fa:28:89:f3:
b4:16:25:37:de:f7:6f:49:b8:b9:ca:22:2e:4f:f0:7e:a9:e6:
3b:74:6c:57:b6:ba:4a:59:4b:ed:30:0a:f0:0e:6e:75:39:ca:
0e:a2:ef:82:ce:93:5a:70:0d:73:50:17:f4:ef:28:c4:fb:db:
24:8b:8a:37:54:35:8a:97:e3:11:ca:fb:82:79:d9:3b:de:31:
35:fc:98:7a:c4:35:5c:48:24:a5:c4:c1:b8:54:13:e7:84:c6:
ef:eb:18:95:eb:ef:2f:7b:31:be:79:43:ee:7f:4b:4c:dd:fe:
16:04:cc:4c:5f:97:fe:ef:b8:0a:5f:7e:bc:25:c1:d0:ea:0a:
81:34:39:14:63:f6:9f:88:a0:2c:c8:63:2a:10:6b:04:ba:00:
0d:01:a1:54:cf:f4:fe:55:a4:56:a4:69:1c:28:d8:97:90:a0:
13:60:13:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:30 2026 by rpki-client