Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143976.roa
File: AS143976.roa (raw, json)
Hash identifier: 4n54K5yKnjyhhyMtHiZoK7D9gwAiU0UwIuNAwFn12WU=
Subject key identifier: 80:B3:4C:46:EE:F0:4A:D7:BF:BF:6F:A3:EA:49:10:86:3F:75:5B:67
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1B91F0EAA428EF3E12661222486D51701D568C0F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143976.roa
Signing time: Fri 22 May 2026 06:58:46 +0000
ROA not before: Fri 22 May 2026 06:53:46 +0000
ROA not after: Fri 21 May 2027 06:58:46 +0000
asID: 143976
IP address blocks: 240a:a52e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:91:f0:ea:a4:28:ef:3e:12:66:12:22:48:6d:51:70:1d:56:8c:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:46 2026 GMT
Not After : May 21 06:58:46 2027 GMT
Subject: CN=80B34C46EEF04AD7BFBF6FA3EA4910863F755B67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1d:c6:e9:53:67:b1:92:a6:f7:3a:c4:a3:df:
47:dc:7c:31:5d:04:8f:0c:e2:3f:c4:fd:9a:81:ab:
f6:7e:44:bc:81:96:97:8a:46:9d:c5:70:59:64:98:
40:44:eb:f2:96:cc:05:dd:7b:40:eb:49:65:4b:0d:
c2:b9:57:57:56:47:c5:01:b4:9f:70:51:46:4a:32:
9e:44:4f:a2:f7:ee:9a:8a:54:70:c0:12:ac:2f:c9:
2f:42:7a:2c:97:67:70:73:50:7c:39:7c:92:5d:bb:
69:7c:ad:21:ac:7a:11:a5:72:e4:9c:0f:9d:e8:28:
42:16:f1:7d:7a:13:9a:4c:9a:bd:91:32:4b:6a:b9:
c9:63:cf:9c:d1:65:50:fc:06:fc:ca:b0:b9:95:f6:
86:f8:ef:2c:b4:09:9b:3a:0f:15:d6:70:4f:b8:6c:
0b:7c:8b:1b:eb:d3:02:e5:a0:60:e4:c0:80:d0:6a:
76:cc:c7:4c:3f:0b:95:1b:5f:ee:54:97:64:20:61:
90:41:7f:46:66:1a:24:50:cd:f9:f5:03:a8:2b:3a:
51:4b:8b:ab:06:0b:65:9c:e2:ce:c2:bf:55:c5:c2:
bf:1b:1b:96:79:2f:98:ff:ef:a8:fb:0d:d4:76:a4:
ce:e8:e3:e7:f8:80:e4:8c:7f:c3:dd:a9:d3:7c:93:
90:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B3:4C:46:EE:F0:4A:D7:BF:BF:6F:A3:EA:49:10:86:3F:75:5B:67
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143976.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a52e::/32
Signature Algorithm: sha256WithRSAEncryption
9f:76:ad:3b:82:2a:09:6a:fd:c4:72:b0:23:ff:47:9e:0c:42:
de:0b:8d:6b:db:68:5b:2f:d7:e6:c5:f7:83:97:99:da:45:f2:
bb:b8:4f:38:27:42:41:34:49:d2:1d:67:94:ae:2e:87:27:fc:
51:d0:c4:23:3a:a8:c0:d7:7c:14:32:88:50:7c:ea:f3:cb:cb:
64:e7:e9:a1:87:d3:5b:47:e9:c4:08:6b:e6:bb:de:5e:30:2a:
9d:89:b4:02:f1:b4:e2:8e:cd:80:5a:63:e9:c0:05:19:c0:0d:
08:f0:59:28:60:24:14:89:cd:23:e9:fd:87:3b:dd:b9:1d:3a:
88:27:1c:63:b0:ee:c4:de:ec:14:68:89:6a:73:40:36:b2:08:
47:58:8c:b3:fb:72:d6:00:a3:36:9b:c8:8d:6f:f7:19:49:c4:
2e:15:01:f4:21:93:6e:03:2c:22:d4:32:ef:90:9f:eb:88:99:
20:a5:31:b9:06:09:99:e3:35:fd:16:a4:95:be:59:c1:e5:ec:
d1:8b:a8:aa:f3:88:b0:e1:8b:c9:de:54:db:81:5a:8d:fa:98:
5d:14:f0:61:8d:7a:e0:b1:09:e5:20:28:f2:b8:00:31:75:46:
c6:f6:fb:a7:9b:ec:d5:74:52:8f:30:17:1e:10:71:a2:12:ba:
3c:89:e1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:12 2026 by rpki-client