Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143968.roa
File: AS143968.roa (raw, json)
Hash identifier: dQDYpNgJp4RU3yoBRULEbTTZQ2mEkUXKd7RiZtm1LlY=
Subject key identifier: C5:FE:5D:4B:3F:B5:A9:E2:C9:D3:F9:C9:56:BC:54:5A:A2:19:30:B6
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 23445630DEE8851F151E6E609350938E7E4A788A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143968.roa
Signing time: Fri 22 May 2026 07:32:34 +0000
ROA not before: Fri 22 May 2026 07:27:34 +0000
ROA not after: Fri 21 May 2027 07:32:34 +0000
asID: 143968
IP address blocks: 240a:a526::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:44:56:30:de:e8:85:1f:15:1e:6e:60:93:50:93:8e:7e:4a:78:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:34 2026 GMT
Not After : May 21 07:32:34 2027 GMT
Subject: CN=C5FE5D4B3FB5A9E2C9D3F9C956BC545AA21930B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e2:66:b8:6c:57:62:89:de:55:1d:b6:52:7e:
4e:a5:3d:f7:4f:57:f1:1f:1f:5a:0c:82:98:08:62:
58:12:32:f6:5c:92:93:31:4b:8a:db:8a:f1:17:67:
31:14:17:16:15:a0:ae:fa:6b:66:34:b3:a2:d2:63:
23:9e:33:3c:53:8a:51:a9:f0:66:14:de:8c:bc:55:
89:0c:6a:cd:6a:e7:06:7f:6d:a8:19:37:c6:4a:23:
eb:0b:74:19:0a:bc:dd:9b:e5:97:6f:3a:5b:6e:ba:
3a:82:af:38:0a:3d:34:e3:a1:77:a6:1a:b0:66:79:
57:8e:08:44:ff:ae:e4:c1:69:be:3d:5c:77:3f:44:
fb:18:5a:33:06:2d:66:1f:7a:94:8c:93:dd:35:44:
0b:b5:45:3b:bb:4d:24:84:93:4c:c5:39:93:f3:b8:
c9:00:16:31:5d:da:43:93:a4:be:28:9c:7e:dc:3b:
06:25:bd:24:3c:eb:19:76:84:e7:4e:df:87:cd:6d:
64:48:16:3b:01:71:68:be:82:84:2f:b3:5d:a0:97:
0e:2f:53:35:a4:6d:3e:a6:6b:6c:16:94:b9:9b:a9:
6a:5f:5a:2c:5b:5c:1c:b9:0e:16:31:92:9c:1e:11:
37:fe:eb:d5:0a:94:56:e2:b4:70:30:57:8f:83:28:
ee:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:FE:5D:4B:3F:B5:A9:E2:C9:D3:F9:C9:56:BC:54:5A:A2:19:30:B6
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143968.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a526::/32
Signature Algorithm: sha256WithRSAEncryption
ac:87:69:27:4f:b2:87:b5:94:98:10:0a:5f:c0:aa:2a:2f:32:
49:17:d9:40:5c:c9:cd:4c:e5:ed:85:3f:dc:e3:80:e2:44:db:
bb:69:46:9e:45:54:da:78:ae:47:01:2a:73:f7:65:77:60:df:
8b:da:21:3f:55:e9:1b:6d:d4:35:88:80:85:4c:68:84:54:35:
e0:ff:e6:59:d4:b9:e8:ff:6d:5b:cc:37:05:a5:8b:54:79:ad:
ad:b8:53:58:f5:1e:7a:43:28:03:d2:97:99:6e:bf:26:c2:74:
e1:c9:6f:4c:3e:94:db:71:6e:65:83:80:48:8a:55:74:d3:ce:
d3:83:ba:a2:dc:67:42:dc:a1:f7:3a:e4:25:33:70:5f:c0:b7:
30:1a:c6:50:8d:9d:f9:21:9a:42:59:72:1c:32:93:59:13:c4:
4c:53:c0:60:b7:0b:83:62:01:fa:a9:68:64:32:d1:a4:94:78:
e2:34:65:2d:25:05:a9:ce:a8:12:b7:26:07:87:11:bb:ac:86:
3b:45:0c:c3:f6:42:4e:f6:4b:32:a4:2d:ea:37:64:04:26:fd:
f4:e9:dd:df:8d:d2:14:5d:d4:3b:be:ad:80:fe:81:0f:90:70:
10:9b:c5:50:44:67:85:5a:2e:49:f6:34:ea:21:e3:17:82:94:
a3:13:30:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:21 2026 by rpki-client