Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143974.roa
File: AS143974.roa (raw, json)
Hash identifier: wfJB5kl42zA6u42lat1dC4CdlkdKW8n6h28YB/xuIa8=
Subject key identifier: 35:DE:47:9D:EA:B2:B0:BF:E8:84:25:AD:C5:4D:74:52:00:BA:F7:7B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 40BA6CDF66E9E1376D751755F57FC779C98FF805
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143974.roa
Signing time: Mon 25 May 2026 06:28:42 +0000
ROA not before: Mon 25 May 2026 06:23:42 +0000
ROA not after: Mon 24 May 2027 06:28:42 +0000
asID: 143974
IP address blocks: 240a:a52c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:ba:6c:df:66:e9:e1:37:6d:75:17:55:f5:7f:c7:79:c9:8f:f8:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:42 2026 GMT
Not After : May 24 06:28:42 2027 GMT
Subject: CN=35DE479DEAB2B0BFE88425ADC54D745200BAF77B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bd:20:6e:24:34:71:27:e3:33:12:60:86:a6:
2e:08:6e:73:33:1f:eb:15:ed:ff:4a:6d:3b:5f:0d:
05:ef:52:c8:4e:4c:79:3b:99:28:86:fc:29:b6:5e:
11:10:e7:92:f5:bc:6d:bc:9a:b5:e2:f1:67:a9:ed:
11:52:a7:67:7d:1d:5d:50:cd:06:3c:55:ad:86:00:
c5:9e:5d:a9:0b:e1:9b:fd:bd:3c:a1:13:c0:69:81:
d9:52:a9:d7:09:11:db:88:6e:00:41:80:6a:9f:74:
93:3a:05:69:57:be:01:49:23:d2:18:83:72:fb:6b:
fb:fe:75:f2:79:70:ef:e2:71:d4:3a:7c:17:ca:cb:
6b:c1:4d:b7:cd:70:5d:d1:7f:8a:17:68:05:48:e1:
08:da:f2:5e:85:9e:42:23:d2:18:d7:dc:69:06:92:
61:a1:03:cc:cf:dd:a2:a4:1c:a5:4d:d3:ea:ec:3f:
e5:dd:21:4f:fb:b7:01:1e:7f:2c:ee:a7:e5:31:da:
e4:56:1c:39:f4:34:c0:4f:c4:b5:62:9a:05:7a:fb:
f5:8a:48:3c:36:68:8d:22:8a:64:10:6b:ad:b0:74:
93:0b:eb:27:30:e0:8b:91:67:29:57:84:c4:9b:10:
b9:85:a9:e0:f8:af:a6:b7:38:04:5a:7b:f1:1b:ef:
f1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:DE:47:9D:EA:B2:B0:BF:E8:84:25:AD:C5:4D:74:52:00:BA:F7:7B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143974.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a52c::/32
Signature Algorithm: sha256WithRSAEncryption
3b:76:bc:d0:d7:5c:8f:33:5e:38:cd:4c:74:41:95:f1:6e:aa:
a0:9e:c6:b1:4d:15:f1:57:dc:fa:7c:b3:e7:47:0c:7d:1b:96:
4a:c0:2b:b3:d1:f0:b6:9e:1c:50:d5:2a:ba:e0:7f:2b:bf:94:
be:53:55:a5:83:69:01:52:d1:05:24:48:c5:49:7c:a1:c2:5a:
4d:96:8b:41:55:5d:b8:a2:d3:66:ac:08:4d:15:74:f6:56:68:
1d:cd:92:47:b2:c8:62:b1:c5:ad:4c:46:55:0b:22:cd:e4:ab:
aa:21:ce:e0:a7:e5:b5:a6:9d:09:c6:d7:9e:11:0a:36:7b:98:
db:50:c9:5e:df:aa:60:1b:4a:76:45:9f:e0:1c:95:43:89:30:
1a:08:95:e8:b1:47:35:db:18:38:78:5f:16:88:49:fc:cf:bf:
46:c5:13:82:1a:9d:7c:a4:55:cf:95:53:25:6c:38:91:be:bc:
db:b5:2b:2b:5c:a6:6e:03:4a:69:de:c7:b6:7e:0b:6a:c4:34:
f6:3c:e6:5e:94:bc:89:37:54:54:3c:65:bc:d8:2a:41:2f:ac:
f2:59:52:b2:38:7f:d6:98:77:9f:e6:1b:fe:7e:92:f4:ab:ad:
ba:b6:d6:77:bb:2e:2a:03:d6:55:62:fc:e0:45:2f:b7:3a:db:
70:f2:8b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:55 2026 by rpki-client