Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143975.roa
File: AS143975.roa (raw, json)
Hash identifier: hyEDp+qC4CAUOCj2cfPZPG9LYb0yDFOcK+eFkbLmrBo=
Subject key identifier: DC:EE:56:85:B3:C7:4D:09:06:B9:60:2E:C2:8C:8F:0A:4A:F3:CC:62
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 267D53222DB82C1F2FBCE1B6F1AABD4A84472513
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143975.roa
Signing time: Tue 26 May 2026 01:12:55 +0000
ROA not before: Tue 26 May 2026 01:07:55 +0000
ROA not after: Tue 25 May 2027 01:12:55 +0000
asID: 143975
IP address blocks: 240a:a52d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:7d:53:22:2d:b8:2c:1f:2f:bc:e1:b6:f1:aa:bd:4a:84:47:25:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:07:55 2026 GMT
Not After : May 25 01:12:55 2027 GMT
Subject: CN=DCEE5685B3C74D0906B9602EC28C8F0A4AF3CC62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:78:ba:1b:b5:70:c9:70:79:a3:b6:1f:c1:95:
b3:01:27:4f:80:75:3b:2c:bb:e5:1d:de:1c:f2:4c:
7e:e1:ca:a4:e0:dd:66:43:46:21:a7:9f:7a:70:28:
e5:e3:11:fd:09:c3:63:97:93:2e:2e:35:7e:40:28:
58:9e:23:c0:69:5b:e7:8e:42:70:8b:ca:13:ad:16:
2d:4a:a2:29:92:03:37:2c:15:99:db:e1:07:29:e9:
f8:72:a8:15:4e:d4:55:a8:00:ec:c8:00:ea:a3:bd:
44:26:7a:c0:03:65:0a:59:31:66:dd:3e:83:c6:88:
e0:bc:15:9f:e2:68:0f:a3:9e:5c:7a:5e:1e:15:4d:
21:de:1b:8b:0f:4a:67:b4:e4:19:66:a9:9c:6e:fd:
3e:6c:02:1c:f4:a8:29:a8:38:64:6b:4d:dc:63:bf:
14:43:8e:f4:e4:9e:df:56:5e:5c:52:71:71:c8:dc:
8a:53:df:c6:e8:6d:15:a9:f7:64:3a:79:e4:1a:5e:
ec:b3:5c:a9:5b:fb:87:e5:65:eb:dd:26:e2:34:ac:
7f:d0:e7:68:fe:bf:28:d8:3e:6a:72:fb:a9:94:39:
49:16:70:8a:07:22:bb:61:d4:0e:2b:38:27:12:0c:
70:17:4a:6c:77:eb:3a:5b:a5:31:0e:8b:a9:42:10:
15:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:EE:56:85:B3:C7:4D:09:06:B9:60:2E:C2:8C:8F:0A:4A:F3:CC:62
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143975.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a52d::/32
Signature Algorithm: sha256WithRSAEncryption
15:75:c3:77:cd:f7:39:34:be:7f:6a:e8:c5:23:0d:f4:87:0a:
c2:91:1c:db:95:c8:93:af:24:ca:f9:83:e7:da:f7:c0:33:0a:
e5:2c:50:58:1b:ba:c3:6b:06:61:f5:3f:9f:23:b0:54:3c:90:
14:ed:d1:b2:6c:31:de:6a:b6:fb:f7:2e:e3:bc:58:d3:1c:f3:
14:12:6b:0a:ee:37:e6:b8:3f:9f:da:90:cc:33:c2:11:b8:17:
81:99:6e:ac:57:10:6f:94:b8:6d:5e:1e:82:82:53:3b:8c:00:
36:5a:fd:6e:5d:79:bc:a9:61:0d:ad:e7:e8:42:13:32:b3:84:
2e:1f:7d:ef:2e:d4:e7:0b:b7:d5:ba:cd:63:02:07:e8:74:34:
82:57:89:6f:1b:12:ee:f9:c4:bc:7d:94:66:0d:da:cf:20:ee:
60:31:12:c9:4b:fa:35:05:a1:e9:81:6f:d8:25:18:19:40:9d:
db:8f:c1:96:17:36:eb:f8:06:97:a2:d0:b6:3c:ba:2f:1a:00:
c4:b5:c0:f6:4e:94:c3:d2:49:ae:83:8e:ef:3c:d3:e2:30:42:
c8:5e:f9:f8:6a:c7:c6:d4:ed:a2:46:c9:b1:6a:b0:e8:09:ff:
bb:23:22:0f:c8:8c:3a:de:03:30:e5:8b:89:be:77:17:2d:98:
f5:3d:df:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:43 2026 by rpki-client