Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143962.roa
File: AS143962.roa (raw, json)
Hash identifier: c+mXJGWc2UeisG9XpQSla0khcE0qXM1d3Cux2PfXDBw=
Subject key identifier: 10:B6:BE:E6:91:44:F5:AC:83:D2:0B:47:5A:67:80:8F:C7:D3:48:68
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 73368EAD7A683621D9095DC77275D76FB8B2CA7F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143962.roa
Signing time: Fri 22 May 2026 01:50:12 +0000
ROA not before: Fri 22 May 2026 01:45:12 +0000
ROA not after: Fri 21 May 2027 01:50:12 +0000
asID: 143962
IP address blocks: 240a:a520::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:36:8e:ad:7a:68:36:21:d9:09:5d:c7:72:75:d7:6f:b8:b2:ca:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:12 2026 GMT
Not After : May 21 01:50:12 2027 GMT
Subject: CN=10B6BEE69144F5AC83D20B475A67808FC7D34868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:44:20:d6:95:ea:c7:86:57:e4:3e:e5:89:93:
0e:d2:34:be:ac:35:91:ce:3e:5a:9e:90:35:f3:5f:
12:fa:17:66:1a:d3:3b:7e:cd:09:2d:f8:93:b3:87:
67:7a:48:32:fe:72:43:73:18:1b:fd:4e:13:0f:6f:
b4:77:a4:0a:49:7b:a6:0a:7f:17:b9:31:ae:4a:8b:
99:40:0d:8d:1b:4d:ef:34:88:d0:09:3f:c7:12:e7:
bd:c8:67:00:72:d2:cb:ba:e5:e0:d2:92:1c:3b:6f:
af:ba:91:12:75:0f:f1:6b:c5:f5:f8:64:5d:5b:5c:
c3:ef:bd:ec:72:fe:62:70:de:9c:89:fa:df:01:57:
5c:c1:78:6f:96:b5:ac:51:c8:36:b4:94:f5:c3:73:
14:c5:f4:fa:b8:18:3e:9d:a7:d7:18:c5:e6:bc:96:
47:67:63:07:b6:fb:6f:c8:33:e1:91:8b:46:ab:c4:
0b:1f:00:7f:1a:fe:f6:f1:5d:bc:02:33:48:55:b5:
5c:bd:21:5d:bb:de:7e:f3:16:23:71:58:2b:ca:43:
d6:b0:ed:52:04:ae:7c:2f:34:fd:de:b8:db:55:d3:
61:37:f9:18:94:28:01:52:ba:4b:4f:a2:78:e0:ec:
f6:ef:bd:9a:c6:0d:2e:3a:22:44:19:ce:4d:a3:ac:
56:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B6:BE:E6:91:44:F5:AC:83:D2:0B:47:5A:67:80:8F:C7:D3:48:68
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143962.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a520::/32
Signature Algorithm: sha256WithRSAEncryption
2f:1f:ec:fa:ed:69:a0:dc:77:94:c5:a8:77:cb:61:bb:1c:58:
39:db:7f:5b:21:36:48:40:bc:fa:67:18:b5:76:76:ee:9e:b7:
c9:c7:72:10:cd:05:82:19:f8:e4:db:6e:da:ba:7b:ff:59:dc:
09:84:6d:20:20:32:44:5b:26:cb:7a:a8:d3:61:5f:cc:23:b8:
01:f5:d3:23:f0:be:37:13:17:99:80:f7:d7:d1:ea:58:d5:03:
31:c5:87:0e:7f:41:fb:2b:26:68:43:90:d2:d6:8a:3f:b2:d5:
78:39:de:79:4f:a4:b5:69:58:9a:d2:ca:7b:70:e9:d0:49:3f:
40:21:36:3c:8a:14:0b:ed:f9:b2:07:0b:67:14:3d:23:35:87:
18:c0:95:9c:8c:ae:fe:84:4c:90:43:36:f0:18:ed:30:94:ac:
86:7a:1f:05:8c:5e:5b:6d:d2:18:75:0f:34:c6:58:29:35:96:
0e:7c:f9:0d:26:6e:0d:13:c9:4c:b7:dc:e6:22:34:6e:7f:b3:
99:3b:ce:d1:64:d3:47:31:13:c7:2e:a2:32:02:a6:75:1d:b0:
f1:92:13:fb:9b:92:1a:4f:84:bb:5d:bf:d8:c6:d6:02:b0:89:
84:b4:54:97:a3:7a:17:d6:db:b5:8c:18:55:5a:8a:29:72:6b:
06:45:e1:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:39 2026 by rpki-client