Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143991.roa
File: AS143991.roa (raw, json)
Hash identifier: YEb+Qj46uNy5Gh2V71IM8JfI+zvzHgQgvHRBCdX5T68=
Subject key identifier: 6B:EB:28:1C:0B:86:CF:3C:A3:10:31:E7:3F:26:44:0A:21:B0:60:6B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 46F8EF3E364A682BD9C41C6193F23BCF91D5CD36
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143991.roa
Signing time: Fri 22 May 2026 07:40:51 +0000
ROA not before: Fri 22 May 2026 07:35:51 +0000
ROA not after: Fri 21 May 2027 07:40:51 +0000
asID: 143991
IP address blocks: 240a:a53d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:f8:ef:3e:36:4a:68:2b:d9:c4:1c:61:93:f2:3b:cf:91:d5:cd:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:35:51 2026 GMT
Not After : May 21 07:40:51 2027 GMT
Subject: CN=6BEB281C0B86CF3CA31031E73F26440A21B0606B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c6:36:87:cc:d7:72:54:26:56:85:8f:c9:e2:
e4:3a:96:ee:94:de:f0:3e:9c:2f:7f:de:d3:d2:0e:
45:98:2f:95:0b:ff:72:8d:6f:5c:ea:19:b4:2f:49:
25:11:26:e7:f9:cc:cc:84:2e:53:eb:12:de:b7:f3:
87:72:7a:df:8e:0c:0a:b2:a9:fc:a7:65:28:28:da:
1f:23:ec:28:a3:56:50:49:47:ef:fd:df:95:7d:0f:
6f:59:f5:88:e0:0c:76:32:ce:4c:2b:05:b8:b1:1d:
b2:63:52:1c:b7:d6:e0:27:b1:4f:bb:75:2d:df:aa:
69:43:1f:81:c8:92:ad:67:73:76:0e:38:27:54:cf:
15:ba:79:ff:42:e3:73:d8:e3:25:2b:a1:27:e3:7a:
1f:59:e7:15:38:92:fe:02:28:b7:67:84:55:14:ed:
60:f3:57:dc:39:b0:0a:cd:41:be:99:cd:df:66:fc:
d4:7d:7d:b2:ac:58:58:b4:94:d4:79:21:c2:b7:8e:
0d:f8:ca:7d:5e:75:60:cb:35:85:fb:23:3e:d5:32:
9f:63:55:c4:d2:18:e7:d6:54:2b:01:1f:33:1a:1b:
f5:74:f6:0d:bb:68:f7:ec:8c:00:c9:47:73:25:e8:
b6:6d:de:de:77:fc:87:28:f1:ca:99:2b:bb:6c:88:
2f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:EB:28:1C:0B:86:CF:3C:A3:10:31:E7:3F:26:44:0A:21:B0:60:6B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143991.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a53d::/32
Signature Algorithm: sha256WithRSAEncryption
54:9c:a2:50:63:a3:03:9b:2a:5d:b9:c5:11:d5:d1:4a:7a:11:
67:58:b5:bf:64:b5:db:0c:69:78:a4:ac:46:76:8b:8e:64:04:
2e:80:a9:6d:44:9e:08:e2:78:f0:e5:0a:1e:f7:50:08:03:5a:
ff:f0:ef:e4:71:3a:a0:4d:23:e6:61:8a:6f:f7:a7:52:9a:5f:
12:db:de:46:de:8f:44:49:96:3c:ac:0b:f9:68:ef:0b:b2:da:
89:21:88:49:51:12:b9:29:11:f6:2b:49:a4:0b:67:b9:df:b5:
fd:c9:2a:5e:ab:4d:2f:da:d9:ee:98:dd:aa:c6:ae:dd:32:a3:
bb:31:66:70:54:23:e4:f0:0e:5c:cb:2c:94:2f:f8:97:fa:c1:
c5:9b:5d:c8:47:eb:d0:10:27:f0:c1:c7:c6:6d:1d:3f:f6:cc:
96:12:3f:2f:ba:35:93:8a:a8:c9:93:76:2d:32:12:55:c3:c6:
71:42:df:ac:6e:21:eb:76:31:ed:f8:6e:77:af:fa:f6:1a:17:
f5:7a:07:8a:d9:5f:59:4e:3e:48:d4:9f:5b:8c:bd:90:3b:7b:
d1:bd:9a:94:07:da:35:76:c3:a7:04:68:a2:de:0d:4b:4b:13:
fe:6c:03:e5:9e:8f:b6:54:fd:7e:c5:82:32:46:13:35:c8:a7:
69:bb:ed:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:36 2026 by rpki-client