Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143963.roa
File: AS143963.roa (raw, json)
Hash identifier: DcFmBl7IKrcw/YRzvG/hZgf/KFjKEWuA/QxLv0wLKy8=
Subject key identifier: AC:8A:1E:09:2A:10:94:04:00:EA:51:0F:B9:AA:5F:F3:E4:25:C7:1E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2F7BFFDBAE44B3AD276229D85E9007D8FC42018A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143963.roa
Signing time: Mon 25 May 2026 03:19:49 +0000
ROA not before: Mon 25 May 2026 03:14:49 +0000
ROA not after: Mon 24 May 2027 03:19:49 +0000
asID: 143963
IP address blocks: 240a:a521::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:7b:ff:db:ae:44:b3:ad:27:62:29:d8:5e:90:07:d8:fc:42:01:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:49 2026 GMT
Not After : May 24 03:19:49 2027 GMT
Subject: CN=AC8A1E092A10940400EA510FB9AA5FF3E425C71E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c0:47:f6:7c:55:6e:04:1c:bf:9d:e2:2e:ce:
f6:0b:df:bd:2b:9c:1e:f5:0f:06:20:35:fa:16:cb:
e5:07:01:88:a7:85:44:85:b1:33:6c:02:49:77:fa:
de:fb:de:1e:d3:f4:e7:80:86:de:a6:1a:39:c3:8a:
f9:40:cc:f2:fb:06:d2:17:bc:cb:30:24:eb:3a:0e:
5c:76:0e:2e:34:77:64:e3:92:9a:0b:da:d7:40:a8:
01:b4:8e:0d:8f:77:2a:26:59:6e:09:12:06:65:f3:
9c:5a:69:98:a7:b3:02:0c:67:83:69:a4:fb:c4:4a:
40:5c:88:cd:80:4a:f0:a1:71:16:2a:de:f5:b9:84:
39:5b:8b:e4:9d:20:45:ed:ef:17:6c:2c:ab:7e:2e:
70:67:f4:08:d9:88:e9:bf:1c:ed:c3:5d:6b:75:29:
16:a3:0e:1d:25:7c:01:f8:cb:a6:54:99:d4:ce:08:
84:26:5a:1c:fb:40:0e:c3:c1:8e:0c:0c:03:3b:41:
25:c2:7d:19:53:8d:4a:b9:c7:5e:57:fe:06:78:c8:
5e:eb:80:c6:34:13:a8:2e:2d:f9:cd:e4:f6:7d:4f:
55:0e:b7:08:62:d0:4b:e3:05:59:5e:85:29:a6:e4:
e9:6e:a7:26:71:08:55:6a:1c:e0:90:4c:46:94:c9:
f4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:8A:1E:09:2A:10:94:04:00:EA:51:0F:B9:AA:5F:F3:E4:25:C7:1E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143963.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a521::/32
Signature Algorithm: sha256WithRSAEncryption
82:c5:db:5b:3f:cc:14:57:5d:45:26:73:56:87:d5:bb:9f:cd:
7c:c9:2e:31:42:00:00:ac:00:03:63:7c:c1:df:71:36:fb:75:
8f:62:3e:ae:7b:41:98:4c:e0:78:4c:2e:26:5c:7c:f7:55:d8:
d1:b6:42:ac:b4:94:a9:6b:04:7a:24:51:b6:d3:9d:26:8e:6a:
b7:55:29:54:72:01:6a:99:f7:51:83:9d:40:f8:ec:4e:7f:90:
c6:a1:86:26:51:75:a1:0d:20:56:2a:a1:a3:89:1b:b3:e8:56:
e7:e7:53:a9:cb:18:66:39:39:78:34:cb:a9:34:ee:0b:4d:0a:
7b:1a:be:9a:e5:40:21:d0:50:dc:fd:26:42:e6:b1:82:92:0f:
ae:6e:f0:84:15:ec:a8:86:c0:05:cc:0b:e7:09:2c:e3:e1:1e:
1c:57:8a:8c:fe:3b:f3:93:4d:f2:61:c4:8d:62:e4:b2:ec:00:
7d:10:82:9f:85:49:51:56:71:a8:bd:2c:7c:8b:6c:4c:d7:fb:
a0:60:80:db:39:2b:4c:f9:50:16:1f:75:bb:82:99:dc:00:9e:
e4:99:0c:ac:7a:11:02:25:fd:1c:16:e0:a9:08:43:e6:1a:d2:
91:af:9e:62:4e:d6:fb:af:56:7d:64:99:32:f7:52:da:0e:bf:
68:23:6b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:18 2026 by rpki-client