Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143977.roa
File: AS143977.roa (raw, json)
Hash identifier: AvKMankYTRXjHArs/eMO8tItDcn26WaPLkbIeWGw5BQ=
Subject key identifier: 26:93:F1:6A:B1:27:5C:03:4E:25:90:06:72:D2:87:1E:A7:92:35:C9
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 16E49F1D0A65E95DEEF51D0E576F8677CA48D0CA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143977.roa
Signing time: Fri 22 May 2026 04:26:48 +0000
ROA not before: Fri 22 May 2026 04:21:48 +0000
ROA not after: Fri 21 May 2027 04:26:48 +0000
asID: 143977
IP address blocks: 240a:a52f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:e4:9f:1d:0a:65:e9:5d:ee:f5:1d:0e:57:6f:86:77:ca:48:d0:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:21:48 2026 GMT
Not After : May 21 04:26:48 2027 GMT
Subject: CN=2693F16AB1275C034E25900672D2871EA79235C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bc:4a:d5:90:64:cc:97:af:3f:40:27:ba:0f:
c0:20:99:e6:60:26:4d:a7:0c:e6:7c:1b:ac:0b:ce:
bc:1d:3e:d3:89:4a:f1:b0:49:fb:48:d0:0e:34:c5:
a5:c9:a2:08:f9:da:8e:e5:5e:40:7d:7d:7b:14:6e:
59:b8:6e:fa:f7:b4:de:2f:be:d5:c3:e0:bb:2c:94:
3b:54:64:44:31:46:41:3a:0b:20:21:9f:9f:6c:79:
e0:8c:74:c4:de:d0:18:2e:72:b8:8b:dc:dc:45:0c:
ea:a4:f3:4c:b0:03:77:c3:2a:15:7f:74:2c:6a:55:
82:ae:80:5f:b3:18:8f:16:18:ef:19:e4:4e:e7:1b:
d6:8b:8e:d1:11:f8:40:76:a9:f6:28:e9:e5:26:aa:
0f:1b:9d:2b:5f:95:3a:12:ef:e0:d2:56:68:11:7a:
d7:a4:96:f3:57:bf:56:9d:b2:e6:7f:2e:a3:eb:62:
b0:d7:85:9f:17:2b:8d:e1:a3:43:32:dd:5e:1d:d9:
d2:20:5e:ab:41:6b:0c:2e:1c:42:3c:21:a3:60:a6:
8e:6e:ea:25:5d:88:8d:90:ff:4f:64:1a:38:7c:c6:
b8:d7:85:c3:42:c5:4e:f4:43:26:11:4e:31:96:9f:
b8:9a:74:ba:78:1a:e7:70:b3:dd:ed:3f:94:25:77:
c3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:93:F1:6A:B1:27:5C:03:4E:25:90:06:72:D2:87:1E:A7:92:35:C9
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143977.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a52f::/32
Signature Algorithm: sha256WithRSAEncryption
7c:92:52:8a:1c:f2:77:d1:dc:43:0a:1b:0c:7c:ce:35:0a:09:
9c:bd:a4:0b:92:2a:06:40:a6:a8:b1:65:08:90:08:c6:d6:b8:
18:77:a4:31:36:e9:89:3c:38:4d:c9:44:c0:d2:82:5a:b9:b7:
21:2f:74:5f:b0:a8:5a:2c:47:bd:56:9e:5a:24:ea:df:c1:d7:
0b:9b:7f:02:9f:f3:ad:bb:97:30:b2:1e:23:b1:e3:9c:91:7d:
16:14:d8:8a:79:29:87:f1:26:7b:66:53:79:60:b1:c5:29:c1:
24:2e:e1:1c:4c:3e:14:9f:68:51:6f:19:4c:b0:6f:7c:3c:63:
4c:d8:eb:c4:34:9f:57:b7:cc:39:c1:cb:8a:81:d2:42:95:a8:
a6:c4:f4:d3:59:aa:cd:17:a5:3c:ba:b6:fe:6b:73:5d:e0:eb:
b3:0b:7c:a0:be:78:bd:35:76:50:42:e8:e9:f1:17:d0:13:7d:
53:72:58:94:79:7b:4b:06:23:47:8b:20:5c:48:cb:57:5d:f8:
4d:c1:a1:40:fa:91:60:61:cc:94:14:4a:17:11:90:5f:e8:d1:
83:97:e0:96:ad:dd:17:40:36:d2:43:07:53:a0:af:c3:84:29:
7f:5e:f0:21:db:5c:0a:3e:8c:31:53:2a:16:89:d5:30:00:fd:
d0:25:41:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:35 2026 by rpki-client