Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143978.roa
File: AS143978.roa (raw, json)
Hash identifier: fcfFXwQXv2Z/1JyjSfZ/DJRUo3kgOUshiMwSOZWUBwU=
Subject key identifier: 54:BB:D4:06:82:CE:9C:F4:E9:DF:11:8F:D4:A1:F4:02:0F:7F:4F:36
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4B546154650001B875AECFD084C9EC72B1273AAE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143978.roa
Signing time: Tue 26 May 2026 06:30:34 +0000
ROA not before: Tue 26 May 2026 06:25:34 +0000
ROA not after: Tue 25 May 2027 06:30:34 +0000
asID: 143978
IP address blocks: 240a:a530::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:54:61:54:65:00:01:b8:75:ae:cf:d0:84:c9:ec:72:b1:27:3a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:25:34 2026 GMT
Not After : May 25 06:30:34 2027 GMT
Subject: CN=54BBD40682CE9CF4E9DF118FD4A1F4020F7F4F36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9f:95:62:f9:38:04:ea:17:fd:f5:c0:63:07:
ec:d9:23:3b:d5:d4:30:c5:bf:d9:ca:2a:a3:98:09:
02:a7:d3:8e:b2:0a:e4:8b:18:f3:1a:01:57:51:ea:
d3:9a:5d:00:1f:17:e8:f5:f5:34:f2:5d:da:d0:d2:
3e:4f:1c:20:3c:2c:30:5d:7b:bb:c6:04:fe:40:5c:
9f:74:cc:0d:f6:bd:ce:b2:27:cb:63:d2:8d:7b:5b:
dc:76:b0:6f:bb:dc:ec:83:48:4f:5a:89:54:82:f7:
29:63:aa:a0:07:10:94:40:48:61:0e:9f:93:cc:17:
07:c4:27:e6:97:25:53:1b:0a:90:a2:36:ef:00:47:
ac:1a:46:07:8b:9d:6e:80:db:86:e0:2d:28:a2:e7:
da:16:7c:52:96:c7:99:d3:2c:35:93:2b:ed:f0:2f:
00:9c:8d:77:31:62:44:dc:e0:e0:8a:78:3d:a5:85:
19:99:0a:ab:c7:97:16:4f:c3:77:a6:b7:65:bd:2d:
87:d1:9d:10:8b:d2:8b:36:be:cb:f3:44:98:e3:53:
f1:a2:0c:1b:55:b4:35:ca:a3:8d:02:37:37:33:bb:
c5:70:ed:9c:cc:fc:b8:1a:40:b2:b6:96:13:24:9a:
66:26:55:8f:fe:64:de:c9:ff:04:20:68:7f:52:88:
25:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:BB:D4:06:82:CE:9C:F4:E9:DF:11:8F:D4:A1:F4:02:0F:7F:4F:36
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143978.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a530::/32
Signature Algorithm: sha256WithRSAEncryption
39:f5:b3:5b:e7:af:4e:dd:e2:38:71:75:b4:c1:08:bc:26:f7:
61:81:89:72:3a:13:95:ff:ee:29:3a:12:a1:67:56:89:8c:15:
85:28:3a:9f:d5:62:22:04:c1:11:25:5c:9c:9d:58:44:d0:0c:
5e:20:21:f6:b8:4d:f4:d9:7e:08:bc:bb:62:9c:bb:c5:b0:e2:
c4:9b:c4:06:0b:cd:d4:2d:30:7a:6b:e8:1c:4a:34:ae:9b:cb:
bf:ff:c6:4b:85:8b:df:66:0b:ec:82:11:e4:ad:0d:65:74:5b:
e1:62:73:9b:03:a6:ae:d8:17:41:25:d9:e1:b5:8d:2e:33:b9:
20:fd:cd:ca:99:86:e9:63:82:71:4c:a3:4d:e5:8e:91:69:8b:
76:c5:c8:0b:49:06:27:9a:9f:93:2e:97:d7:56:99:dc:c1:1d:
ab:40:88:17:23:c7:c7:d4:f8:30:93:bd:ca:5c:e6:dc:36:1e:
b2:cd:f8:b2:d3:37:38:7b:2a:2d:ce:73:76:a1:32:a7:30:36:
78:9c:e3:b7:e2:37:8b:35:c3:5c:d3:d4:4e:f9:cd:37:70:9b:
10:8f:e9:d2:4e:3b:f1:36:4e:84:aa:b1:79:fc:c3:44:28:90:
ee:a4:92:00:92:c1:6d:eb:4b:67:aa:70:e0:aa:d2:00:ef:6d:
9e:d6:db:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:13 2026 by rpki-client