Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143965.roa
File: AS143965.roa (raw, json)
Hash identifier: 4vBJb4qM8ivJE+PP65OrsEM5K9N7CX0OMTvztw5SeA0=
Subject key identifier: 53:AA:48:DD:DE:76:2F:9B:C2:BC:45:8B:66:2A:F7:4D:F9:27:77:C7
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 547666624A523C961C44889312810B9EE1BA3EFA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143965.roa
Signing time: Tue 26 May 2026 02:34:54 +0000
ROA not before: Tue 26 May 2026 02:29:54 +0000
ROA not after: Tue 25 May 2027 02:34:54 +0000
asID: 143965
IP address blocks: 240a:a523::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:76:66:62:4a:52:3c:96:1c:44:88:93:12:81:0b:9e:e1:ba:3e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:29:54 2026 GMT
Not After : May 25 02:34:54 2027 GMT
Subject: CN=53AA48DDDE762F9BC2BC458B662AF74DF92777C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:9b:41:c9:b7:65:5b:7a:e0:52:ea:0f:af:7f:
2c:d2:4b:18:b6:b1:f4:03:24:4b:a9:e8:bc:93:b5:
45:98:4a:54:30:57:61:05:5e:66:54:cd:71:23:2a:
c6:6d:06:09:d0:da:da:28:00:ae:4e:75:37:45:2d:
fd:87:bf:e7:2d:49:21:94:31:f1:f4:54:30:ee:de:
53:bd:23:ad:e9:02:5f:3a:90:b6:2b:fc:d9:07:5e:
fd:e5:82:8d:94:61:4b:d1:ba:8e:98:0a:94:52:39:
4f:51:30:de:a0:c9:6f:84:cb:06:79:07:14:1d:d7:
99:7f:38:f3:0f:24:a7:f4:00:03:a6:95:ee:74:3c:
4f:fc:4c:be:26:4a:37:c4:f2:fa:ac:78:93:64:43:
3f:ae:b4:e8:5c:97:40:a4:6d:8d:a1:c0:1a:29:26:
cd:14:ed:d0:8d:58:95:b2:7a:b9:a6:5d:1d:96:2d:
0e:52:61:e7:1b:cf:8a:ca:12:4c:5a:11:36:28:c0:
e7:d4:4d:74:0e:34:eb:2a:a6:16:a3:91:d9:c1:79:
d1:3f:ba:f4:02:41:db:82:b2:25:27:d1:8d:f3:27:
20:9d:ed:ad:ad:aa:e5:ef:00:0f:51:8b:3c:9c:68:
bb:cc:c7:86:b7:f5:05:e5:59:75:e3:c5:8e:35:d5:
1b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:AA:48:DD:DE:76:2F:9B:C2:BC:45:8B:66:2A:F7:4D:F9:27:77:C7
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143965.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a523::/32
Signature Algorithm: sha256WithRSAEncryption
30:62:13:42:8d:52:74:99:95:7b:3b:8b:7e:9e:65:0a:f1:e5:
1e:43:41:12:da:c0:45:2a:88:d1:44:5e:a3:9a:bf:96:01:62:
a1:7d:77:10:df:fb:2d:2a:45:2d:8d:81:f8:ff:c9:98:b2:7e:
6f:0c:6b:08:5a:4d:9f:a7:58:6b:80:03:9f:ff:3a:8b:68:d9:
ef:81:3c:6a:c3:1b:83:82:e4:b5:01:da:cd:fc:c6:50:4a:6b:
40:db:a0:b6:bc:6d:33:69:17:fb:10:c1:14:49:a9:43:3f:96:
e4:b7:6d:8e:7c:99:44:0d:4d:c4:96:a0:43:99:f0:20:fd:4a:
30:00:0d:c5:d6:52:5f:44:48:1a:54:f9:b8:dc:4e:2a:2f:aa:
24:8f:89:94:bf:b6:45:d5:cd:24:cb:65:98:14:02:f9:97:1e:
73:ee:a4:0f:26:9d:35:f0:8d:d6:46:12:60:cb:60:22:73:19:
e1:a9:f7:36:fe:32:7a:ae:2d:21:71:c5:55:37:8c:a6:78:87:
08:6b:da:10:1b:df:b7:6a:49:19:95:2a:ea:51:34:41:22:07:
21:a6:28:58:7e:9f:59:d9:58:92:7a:13:f8:e5:84:99:d0:91:
c4:ff:01:77:81:e9:e7:44:0a:b2:c5:be:42:92:17:5f:29:a8:
60:b4:54:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:32 2026 by rpki-client