Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143987.roa
File: AS143987.roa (raw, json)
Hash identifier: Y0h38MR6tBwisNUWijIpiAwqHjFYgybJlB0eXEd1mHA=
Subject key identifier: CC:25:E2:23:23:24:15:D2:BF:79:C7:78:6F:6F:23:A7:7F:83:FE:D0
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 12FF6EF293AE53E1A4D0C95C3828CA607265A1B4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143987.roa
Signing time: Tue 26 May 2026 08:52:57 +0000
ROA not before: Tue 26 May 2026 08:47:57 +0000
ROA not after: Tue 25 May 2027 08:52:57 +0000
asID: 143987
IP address blocks: 240a:a539::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:ff:6e:f2:93:ae:53:e1:a4:d0:c9:5c:38:28:ca:60:72:65:a1:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 08:47:57 2026 GMT
Not After : May 25 08:52:57 2027 GMT
Subject: CN=CC25E223232415D2BF79C7786F6F23A77F83FED0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ac:4b:b8:0c:ea:7d:af:0c:63:10:d1:91:0c:
15:84:cf:17:28:70:71:05:35:a3:70:50:23:11:c8:
89:04:b4:b3:5a:c7:20:50:f4:43:93:e6:04:3d:cf:
11:4a:d7:eb:cf:21:1e:7d:99:18:ab:d9:d2:5e:0e:
9c:3c:f6:aa:66:55:1d:b3:e4:78:a0:81:cd:d6:80:
8d:22:36:3b:35:ff:8b:16:88:2c:ba:75:5d:e6:b2:
4e:55:1a:6d:5b:be:c8:92:3b:51:2f:4e:93:5c:d0:
e5:75:98:4d:a2:76:69:c6:d6:fb:38:d5:dd:f6:70:
ef:15:94:97:23:2d:07:f4:04:88:0d:c1:04:c2:3c:
03:89:21:8c:eb:1b:15:34:5b:ea:33:86:ff:99:b4:
9b:76:03:64:ee:14:bb:81:8e:85:dd:27:40:90:2b:
b9:53:e1:86:7f:9b:83:14:02:a1:8e:de:8d:3e:49:
f9:9d:1a:f2:aa:83:18:ae:11:7a:28:b3:98:aa:ef:
e9:77:2b:bd:c8:32:5c:8a:a2:30:8a:3c:c4:85:1f:
60:ac:fa:a9:5f:67:dd:8b:a1:17:25:65:e4:9c:2b:
98:0a:1b:1b:ac:26:3b:a9:0e:41:29:cd:e7:4e:89:
b8:de:a3:4b:d0:70:5f:72:00:a8:bf:e1:70:29:36:
0f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:25:E2:23:23:24:15:D2:BF:79:C7:78:6F:6F:23:A7:7F:83:FE:D0
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143987.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a539::/32
Signature Algorithm: sha256WithRSAEncryption
7b:f9:13:66:a3:25:08:50:8c:5d:94:6b:9e:73:5e:73:bc:5b:
2a:d1:fd:49:1c:f7:88:8c:8b:ae:03:9b:f9:93:4d:07:cc:45:
ae:6c:aa:cf:5d:de:1e:1c:b7:29:73:89:bd:22:e8:82:4b:ee:
71:21:0c:a8:cf:a1:83:5a:ab:7b:e5:56:12:fe:69:de:c2:81:
5f:f7:23:54:9a:c8:87:85:de:87:94:a4:4f:32:d3:37:94:8f:
b3:ce:e9:13:46:5e:3e:96:97:12:79:93:35:da:4d:7c:ee:00:
9e:b0:2c:25:d1:d4:c1:8d:23:3b:e5:f5:72:b4:da:71:04:0a:
87:14:ea:8c:a2:e0:a4:f9:ac:86:4c:91:63:e3:7a:a6:2a:47:
a3:1f:e9:84:29:28:ce:f3:de:b8:38:d0:9d:cc:d1:ae:a5:c7:
a6:0a:57:70:72:6f:bd:a5:3d:7e:c9:b0:68:96:c4:17:65:55:
4d:87:ad:43:62:48:0f:28:1e:27:14:95:d0:af:5b:04:23:f3:
6f:53:7a:43:b6:7c:8d:96:16:10:1d:8d:1e:49:22:28:31:07:
ed:4e:23:64:2c:8a:16:87:be:08:ec:5a:aa:ab:c4:cf:8d:5f:
52:4c:29:00:43:f8:8a:27:6a:e7:91:f1:00:72:24:99:b1:9d:
11:98:ab:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:50 2026 by rpki-client