Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143961.roa
File: AS143961.roa (raw, json)
Hash identifier: zfehFlJq9R6dyeTxaPcKVEb3Spij0OjOXvD33sf0vcY=
Subject key identifier: 65:C4:9F:F1:66:41:1C:F0:61:56:F8:8E:95:00:71:70:E7:AF:D6:2C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 434C77F19978A318AA1BDA636715BF14B59FFD3B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143961.roa
Signing time: Tue 26 May 2026 06:30:48 +0000
ROA not before: Tue 26 May 2026 06:25:48 +0000
ROA not after: Tue 25 May 2027 06:30:48 +0000
asID: 143961
IP address blocks: 240a:a51f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:4c:77:f1:99:78:a3:18:aa:1b:da:63:67:15:bf:14:b5:9f:fd:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:25:48 2026 GMT
Not After : May 25 06:30:48 2027 GMT
Subject: CN=65C49FF166411CF06156F88E95007170E7AFD62C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:54:b1:43:e2:e7:f6:29:e8:82:67:45:a2:8c:
cf:be:df:82:7c:bd:e8:e0:c3:0f:cd:7a:c3:3a:34:
66:9d:c5:34:4a:f1:2e:ce:a0:a6:70:84:33:b5:c5:
12:1f:8d:2a:bd:78:07:d7:45:a0:f0:33:e3:60:ee:
49:c4:57:ac:9c:5a:ca:1b:f9:76:71:43:32:a6:21:
e7:2c:d5:b4:d3:aa:3e:87:e8:86:3e:ad:12:d4:2a:
fc:90:9e:1d:3d:a7:8c:60:aa:7d:4f:79:66:80:6c:
22:e8:fa:77:e3:7b:fa:b7:df:27:8b:77:6a:67:20:
fd:24:e4:9b:16:dd:67:1a:07:f4:37:bc:fa:17:5d:
1c:37:5f:44:ae:cc:49:64:6f:50:93:ea:21:a6:b0:
22:26:b3:cd:42:47:72:66:51:5c:f6:eb:d6:36:fd:
cd:c6:64:f2:a8:06:f8:12:f4:4d:47:28:d9:95:51:
75:b2:3d:78:a4:56:82:ea:38:3e:cb:54:6c:a5:ad:
ae:66:8c:2b:37:fb:1b:a1:34:07:59:ba:c3:df:11:
ed:4f:b8:79:51:6b:26:f2:80:6e:40:01:4f:53:99:
53:14:27:d9:99:8a:58:33:3c:72:16:b7:57:63:aa:
a3:67:5f:67:90:94:7a:32:7e:08:87:a5:19:11:b6:
52:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C4:9F:F1:66:41:1C:F0:61:56:F8:8E:95:00:71:70:E7:AF:D6:2C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143961.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a51f::/32
Signature Algorithm: sha256WithRSAEncryption
60:86:53:56:4b:d2:a8:06:44:42:e7:81:57:32:3d:1a:47:51:
f1:20:39:ee:76:34:c2:4d:b4:80:84:b9:fc:87:0f:32:a2:20:
6c:85:a9:e0:ee:8a:18:87:0b:c6:e5:09:fa:36:02:91:04:78:
87:d5:9d:d8:fe:67:6e:b4:8f:a3:b2:63:eb:c9:c2:c4:2c:c9:
0f:3b:16:6b:30:f4:26:22:09:f9:23:95:76:ef:a1:00:40:3e:
fa:cf:86:d6:ea:2a:32:92:8d:e3:e0:c9:4f:3b:ba:71:80:87:
ba:39:2f:94:96:d0:e9:1e:88:b2:dc:e0:9b:53:ac:d6:aa:f5:
5f:e7:78:72:c5:ac:9a:7d:c1:a8:37:bd:fd:78:84:25:d7:79:
cb:7b:06:ba:31:d3:6e:b9:f3:fe:4d:af:d1:37:fe:86:bc:4a:
d1:99:6e:7d:76:f2:13:44:02:91:b9:ab:35:4f:98:04:5d:ed:
91:39:cf:ae:8b:4b:24:69:5c:d9:44:32:f9:11:ca:e5:20:7a:
90:57:71:f3:bd:80:79:7b:8d:6b:33:18:4a:65:6c:8c:6a:c0:
15:e2:2c:51:82:51:e5:df:e3:4c:12:bc:ad:cc:6b:e4:5e:11:
d5:a9:0a:bc:b6:38:85:7d:46:b7:7d:d1:e2:db:c0:03:06:8d:
de:3e:0a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:04 2026 by rpki-client