Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143960.roa
File: AS143960.roa (raw, json)
Hash identifier: AML7QzwrGm47xuyap6PT6jhbbcTBkcbD9bUsJK3VPJc=
Subject key identifier: 11:71:B2:9C:DF:4D:E0:17:6A:FA:FE:A8:7E:EB:FE:1D:A1:05:CF:B9
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 434C5136916DBE37F22B5A0C894053642EF5BA0D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143960.roa
Signing time: Tue 26 May 2026 06:12:38 +0000
ROA not before: Tue 26 May 2026 06:07:38 +0000
ROA not after: Tue 25 May 2027 06:12:38 +0000
asID: 143960
IP address blocks: 240a:a51e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:4c:51:36:91:6d:be:37:f2:2b:5a:0c:89:40:53:64:2e:f5:ba:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:07:38 2026 GMT
Not After : May 25 06:12:38 2027 GMT
Subject: CN=1171B29CDF4DE0176AFAFEA87EEBFE1DA105CFB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7c:97:00:ba:62:5c:ad:eb:78:09:b0:82:2d:
b5:03:7f:ac:0d:68:db:b5:a0:75:b9:4a:6a:72:3a:
51:14:c4:f1:c3:71:db:5c:7a:f6:48:af:56:2e:3b:
47:7b:ee:c8:ee:ee:15:f6:38:51:8f:3a:f1:59:15:
1a:82:a4:f2:9b:ce:c0:09:c3:f0:23:db:51:c9:3c:
da:15:d2:43:50:91:03:34:16:a1:9e:25:ef:76:4b:
c2:e1:f9:84:5e:13:71:62:f0:fe:5d:04:f3:6d:44:
68:69:44:c1:f9:6b:ed:1b:6b:3d:ae:6b:6c:e3:b0:
2b:b6:c2:8a:31:3d:30:57:53:44:3e:96:93:af:5a:
82:f8:95:08:bb:af:03:b7:8c:6d:da:73:df:a9:7f:
04:22:76:1f:2d:a6:64:cf:4d:e0:83:c8:14:e7:a5:
a7:fb:6a:62:53:f2:01:d6:c1:a4:84:b9:6e:c6:6c:
5f:e1:d0:46:26:79:e5:cd:6c:c5:34:76:70:2f:09:
dc:b2:75:45:a4:c4:75:22:d8:d6:7e:18:c8:79:b0:
fb:7f:1f:8e:5b:29:d0:c2:da:ae:04:58:7c:0b:76:
81:26:0e:97:f7:37:69:d6:e8:31:f2:12:e0:7b:19:
a0:1f:39:c7:0f:67:41:3a:a3:64:1d:1f:1c:7f:3d:
a0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:71:B2:9C:DF:4D:E0:17:6A:FA:FE:A8:7E:EB:FE:1D:A1:05:CF:B9
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143960.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a51e::/32
Signature Algorithm: sha256WithRSAEncryption
ac:aa:02:c7:01:ab:bd:3f:ef:24:c5:0d:68:a9:27:57:9f:4e:
d7:d8:61:9d:9d:1b:1f:24:7b:08:70:f0:dc:9f:e0:cb:43:f8:
b3:97:b4:cd:ae:fb:50:c5:37:cf:af:9f:5c:fb:f2:aa:ab:5e:
e2:65:ad:5f:98:64:e9:df:23:36:19:8a:3d:e2:7d:70:3c:8c:
3e:ce:df:85:e8:3d:ea:a5:60:db:09:20:0f:d5:a3:5f:bd:d1:
fc:a7:89:ee:94:0b:85:97:8f:e5:b4:f3:84:5d:62:c5:f3:b6:
95:9e:b5:4b:8c:20:21:55:a6:68:4e:bd:4b:ea:3e:92:25:f8:
70:45:e6:f6:72:d5:30:e1:b4:f2:64:68:94:d3:05:0d:a9:ed:
77:a5:fd:c2:51:02:32:30:7a:4f:00:d4:61:7b:24:9f:e1:54:
fa:62:ab:78:48:fc:71:98:19:8a:46:2e:18:ee:c8:d1:bb:74:
70:fa:88:f7:77:6e:55:90:66:90:9a:c9:e7:dd:a7:db:bb:8b:
4f:36:0b:a8:5a:b0:7c:25:4c:a9:f7:43:57:bf:12:f5:ab:e1:
ec:5c:80:b1:44:54:98:87:15:fe:0e:f2:e1:58:20:36:22:7c:
fa:6b:9b:bf:54:dc:8f:d1:3c:2e:45:5a:21:d6:99:b4:60:69:
72:bb:04:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:23 2026 by rpki-client