Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143986.roa
File: AS143986.roa (raw, json)
Hash identifier: 25yX0qRpFwFOStNMmT8cTOrDn1JXAjiyC4DWVO+sKZY=
Subject key identifier: 95:3C:4D:AD:48:3D:9C:63:DC:D9:5C:50:3F:4C:A2:C7:5B:D1:A7:7E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 12B7907D0A25E01EE25C006D9A2B438EEAC75B5B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143986.roa
Signing time: Fri 22 May 2026 07:24:43 +0000
ROA not before: Fri 22 May 2026 07:19:43 +0000
ROA not after: Fri 21 May 2027 07:24:43 +0000
asID: 143986
IP address blocks: 240a:a538::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:b7:90:7d:0a:25:e0:1e:e2:5c:00:6d:9a:2b:43:8e:ea:c7:5b:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:43 2026 GMT
Not After : May 21 07:24:43 2027 GMT
Subject: CN=953C4DAD483D9C63DCD95C503F4CA2C75BD1A77E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2f:12:a9:d7:08:d7:1d:b8:3c:fa:a0:7d:be:
a2:b7:6a:55:60:7a:61:46:80:31:09:81:e8:86:aa:
b3:ec:f2:bd:f0:c8:d9:36:c1:f9:0b:ac:46:b4:39:
67:69:12:75:65:d5:f4:ae:55:76:27:ad:47:da:62:
26:72:87:0d:5b:04:8a:ab:e9:1c:55:f3:c4:ca:8d:
bc:6a:37:2c:2e:63:53:62:32:74:a0:a3:bf:4b:0c:
05:28:d0:18:00:6a:dc:fa:27:bf:ca:e5:be:b9:fb:
3d:c8:82:6a:d5:6e:15:5c:67:c4:40:1a:2b:fe:ff:
e3:df:e9:96:de:99:6a:d5:ea:a3:cf:e5:fa:b5:d0:
89:95:e4:d8:b2:ab:55:17:91:52:0b:77:e9:40:1d:
b0:91:e0:11:f0:e6:2a:30:ca:52:81:c3:40:b9:eb:
9c:33:7b:2d:4c:fe:88:1f:48:ac:31:51:03:fe:11:
9f:d8:4b:00:e3:9b:b3:aa:0c:fb:c3:5f:87:3c:8d:
63:bc:c2:3b:4d:25:4a:77:e2:fd:22:16:bd:dd:05:
b7:40:82:08:8d:e5:c2:b9:05:66:cd:43:cd:83:15:
c9:57:a2:74:20:e2:84:f7:8f:e6:0f:22:1f:c7:58:
36:10:f4:4c:21:45:fe:7a:9c:7c:09:f7:2b:d7:e9:
c4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:3C:4D:AD:48:3D:9C:63:DC:D9:5C:50:3F:4C:A2:C7:5B:D1:A7:7E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143986.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a538::/32
Signature Algorithm: sha256WithRSAEncryption
25:c4:bb:8c:8e:0a:e9:8f:7b:a2:21:95:c0:fd:8a:b2:d3:42:
7d:dd:9e:e9:15:29:84:9b:77:4c:0f:e1:5a:28:c4:ea:07:49:
27:e7:4a:eb:ae:79:20:e5:39:3a:ba:9d:24:9b:88:86:7f:bc:
dd:5c:39:9d:9a:00:40:9e:ec:95:cd:58:b3:13:4d:d2:33:97:
bd:1c:26:eb:f3:67:65:0e:76:4b:25:94:40:31:9e:7c:21:96:
4b:d6:a7:b3:2e:52:29:05:29:5c:e2:ff:42:6e:f9:40:11:4d:
0e:e3:42:07:22:3c:20:71:43:8d:70:72:da:b6:66:42:dc:f5:
c9:89:e0:43:a5:0f:c0:f6:19:31:cb:17:9b:8e:d7:6a:75:29:
fa:0c:e4:d8:0e:d6:c5:4c:72:0a:f8:91:8a:7f:f8:ab:95:9c:
d5:36:35:43:6f:3c:1b:5c:26:40:d6:18:17:2b:54:6e:e8:0d:
45:6b:d5:d2:c5:23:38:43:5a:59:96:33:9a:6f:31:e4:8f:24:
36:94:5b:df:de:37:29:2c:f4:1e:aa:2b:1e:26:eb:bb:2f:18:
de:c1:b6:39:96:3d:34:7e:32:cd:d6:ef:aa:b6:c8:75:aa:fa:
bf:ee:a4:8f:18:0d:b4:b6:b4:4b:43:11:8b:b8:5c:46:ac:a0:
87:d3:28:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:37 2026 by rpki-client