Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143973.roa
File: AS143973.roa (raw, json)
Hash identifier: 7mj2t/R4lO56SmUxtj8vb+GRLbhNuowxoy1dJsWjJhg=
Subject key identifier: 84:FA:79:60:40:95:22:76:CA:FF:A6:FF:C6:D4:F5:6E:F0:F0:55:65
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2EB8BFB8CF682E0690A3172ED795E0DEF3FF88B3
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143973.roa
Signing time: Fri 22 May 2026 04:08:20 +0000
ROA not before: Fri 22 May 2026 04:03:20 +0000
ROA not after: Fri 21 May 2027 04:08:20 +0000
asID: 143973
IP address blocks: 240a:a52b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:b8:bf:b8:cf:68:2e:06:90:a3:17:2e:d7:95:e0:de:f3:ff:88:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:20 2026 GMT
Not After : May 21 04:08:20 2027 GMT
Subject: CN=84FA796040952276CAFFA6FFC6D4F56EF0F05565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0b:68:54:8f:eb:2a:6f:84:6f:bb:29:68:12:
37:95:99:fc:b2:60:e6:4d:d1:c7:df:c8:82:84:ba:
8b:a2:bd:df:6f:6c:53:dd:4c:79:49:c9:22:dd:37:
72:0d:52:7b:b1:97:85:60:71:d6:22:3b:ff:d6:4a:
95:70:0d:96:4a:43:88:b0:01:7b:65:14:10:81:b1:
74:2f:dc:e0:f9:20:24:e0:34:d8:4c:a4:bc:91:ae:
59:16:b6:de:9e:5c:43:8f:bb:43:b3:3e:fc:c5:03:
58:7c:8a:08:4f:3a:8f:86:5f:8a:e1:97:5d:42:43:
4b:d3:9f:90:10:df:ac:aa:e8:a4:e5:4e:9c:ff:56:
f3:60:52:9e:f5:b9:c4:fa:58:0c:08:d9:ec:4c:33:
77:5d:7a:a6:c9:b6:fc:b6:7f:d2:86:e5:39:83:6a:
5b:76:b7:6b:78:de:ac:63:d4:32:3b:b2:22:4a:e3:
bc:6f:25:a6:39:ff:25:16:96:c0:82:c4:9f:22:d0:
d4:25:95:7d:74:3b:a2:54:24:06:12:e8:62:7f:42:
3a:70:f8:f3:ea:d8:89:1e:8e:a7:37:9e:ab:a2:ba:
8b:f3:48:78:17:09:ea:49:4b:36:b7:3f:dc:00:63:
43:a1:6a:32:8e:41:ae:0c:05:de:c9:35:8d:ee:90:
93:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:FA:79:60:40:95:22:76:CA:FF:A6:FF:C6:D4:F5:6E:F0:F0:55:65
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143973.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a52b::/32
Signature Algorithm: sha256WithRSAEncryption
9c:6a:ef:0e:bf:bd:d5:1e:fd:74:32:4c:42:32:f3:0e:e3:da:
4b:85:e5:25:4a:c9:61:61:ff:a5:88:02:a1:fe:0b:82:af:60:
7d:05:97:0c:95:c4:76:67:f3:12:3e:d9:18:22:c9:1f:d6:08:
e7:5e:b4:bb:ec:21:21:60:88:e6:af:63:ed:20:9a:3f:ae:bd:
6a:a0:28:78:00:b0:76:6b:e7:a6:40:8d:13:3b:5c:bc:74:64:
a2:51:0c:9f:15:d2:bb:f3:00:0f:df:62:3a:40:9e:2a:ec:85:
25:da:82:8f:f5:d8:57:64:6a:5a:57:55:df:70:f4:cf:50:03:
9d:8b:a9:91:46:5c:02:d4:be:1a:5e:8c:07:d7:dd:c8:b2:46:
8a:3f:6f:e1:80:86:c3:08:a2:38:58:81:df:8c:05:63:c7:04:
e9:08:54:f6:23:bb:1a:9b:3f:5b:eb:fc:c2:cb:c9:22:9f:2f:
6d:9b:15:e7:c9:95:8d:74:a4:a2:2f:71:9c:53:3e:3a:7b:74:
8b:7a:9f:3c:e5:22:a2:a9:96:33:70:c4:a3:20:2d:5d:f8:a7:
df:55:b7:00:5a:f7:a6:a5:66:cc:3b:66:84:83:e6:b0:1e:01:
f1:b6:e1:eb:f4:12:5e:2c:22:35:73:18:2f:9a:d0:b6:c5:49:
14:4c:50:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:50:03 2026 by rpki-client