Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143994.roa
File: AS143994.roa (raw, json)
Hash identifier: qkEIDDa+5WvOGbTEGnOuqAwYzd8pGR3p5/2ku8SskZo=
Subject key identifier: 0A:57:FD:C6:66:36:FE:8B:D2:7F:AF:24:E2:B3:98:AC:D1:A7:BD:2E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7C94CE78199554182C8BC97F8A26A5906286F446
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143994.roa
Signing time: Fri 22 May 2026 07:41:11 +0000
ROA not before: Fri 22 May 2026 07:36:11 +0000
ROA not after: Fri 21 May 2027 07:41:11 +0000
asID: 143994
IP address blocks: 240a:a540::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:94:ce:78:19:95:54:18:2c:8b:c9:7f:8a:26:a5:90:62:86:f4:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:36:11 2026 GMT
Not After : May 21 07:41:11 2027 GMT
Subject: CN=0A57FDC66636FE8BD27FAF24E2B398ACD1A7BD2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5b:04:f8:4d:30:86:97:cc:d7:41:22:cb:92:
00:b2:61:61:31:0b:36:bf:c4:df:60:7e:a2:a1:b1:
10:e6:90:63:31:68:96:d8:38:49:d9:fa:45:7a:fa:
b1:8b:29:b9:fe:3e:26:2c:9a:b3:b5:51:97:85:f3:
11:cd:b8:ae:1d:30:42:f7:9c:de:d7:1d:ce:96:ac:
c7:64:e8:8a:f9:40:06:25:50:6b:70:1b:5e:0e:69:
39:89:ae:0f:1a:fa:05:18:45:f1:9c:df:5c:05:5e:
a3:d0:76:8e:c1:06:59:f6:bd:9c:b9:0a:59:06:a0:
32:a5:02:a7:fa:43:b2:52:61:ba:16:0b:96:79:f3:
ba:89:38:ac:08:bf:d7:f4:64:1b:c0:d8:7c:2f:30:
38:22:3c:22:d5:6f:e7:8d:13:8a:b8:6b:91:39:7c:
1b:36:f7:61:85:2f:59:bf:a9:e3:a8:2e:c0:e9:3e:
49:79:fc:3c:a6:e0:be:0e:19:c8:2c:7e:f8:13:03:
2c:ec:05:c8:b1:2e:1b:24:fa:da:f9:fc:a3:7d:1e:
0c:ff:a8:29:27:ea:94:74:77:8d:5d:a4:20:b2:1e:
ac:67:f3:a4:8c:c0:8f:3a:72:74:11:8f:86:cb:31:
55:ae:e3:72:f1:17:0e:98:36:d0:40:26:15:bf:11:
32:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:57:FD:C6:66:36:FE:8B:D2:7F:AF:24:E2:B3:98:AC:D1:A7:BD:2E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143994.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a540::/32
Signature Algorithm: sha256WithRSAEncryption
2d:9f:11:3b:37:b2:e8:af:e9:81:27:45:32:07:40:18:f0:96:
58:a8:a0:91:dd:04:58:38:db:7d:0c:25:84:57:5b:68:ca:99:
f5:e8:87:9d:66:dd:87:a2:cf:64:b9:f4:a7:d9:24:b8:f2:59:
36:31:72:5d:d6:6d:62:b8:cd:62:17:c8:5c:48:38:25:e7:fc:
e7:dc:77:52:30:f6:2c:54:52:2e:d1:6f:49:d3:09:0c:93:de:
06:8f:22:0a:3c:93:c3:e3:f5:6c:10:e6:e8:d9:55:6e:34:54:
90:78:c8:40:f7:e8:54:42:d3:ca:40:cf:5e:e6:ae:1e:c8:7c:
e3:6b:30:18:7f:6a:a2:d8:58:0c:88:4e:08:ce:ce:e1:ee:8a:
0b:a1:23:55:31:31:df:20:15:bb:44:f7:d7:e4:d2:c3:57:e5:
75:5a:fa:1b:7a:e1:58:e4:86:dc:6a:d6:b7:59:ee:d0:5c:07:
1f:92:1f:9e:2c:bd:f7:cb:c1:0d:f2:28:ce:f1:5e:10:9e:14:
71:e7:5c:d4:51:aa:56:62:65:46:0c:e7:83:c3:cd:e8:41:2e:
71:1b:03:c6:3f:b5:02:21:bc:1a:f7:0c:f1:37:c7:cc:03:e6:
53:ac:c2:d5:b0:47:20:5f:d0:44:ab:5b:67:11:f3:9c:ab:82:
01:8b:9c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:21 2026 by rpki-client