Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143995.roa
File: AS143995.roa (raw, json)
Hash identifier: OxZbxqrWyIn3RrG8Ty1RoltQunJvM0JIeH5iHQ8610o=
Subject key identifier: F1:8F:0E:C3:5F:38:BD:CF:81:99:FC:D0:AE:38:DD:63:2E:60:17:8D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5B8A6AA64338D858E9E6176839585B5EF485E2E0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143995.roa
Signing time: Tue 26 May 2026 08:52:42 +0000
ROA not before: Tue 26 May 2026 08:47:42 +0000
ROA not after: Tue 25 May 2027 08:52:42 +0000
asID: 143995
IP address blocks: 240a:a541::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:8a:6a:a6:43:38:d8:58:e9:e6:17:68:39:58:5b:5e:f4:85:e2:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 08:47:42 2026 GMT
Not After : May 25 08:52:42 2027 GMT
Subject: CN=F18F0EC35F38BDCF8199FCD0AE38DD632E60178D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:31:a4:fc:34:9b:8c:e7:ec:4a:03:09:42:02:
6e:2f:9c:15:9c:83:12:81:8d:e8:96:14:4d:43:92:
d7:aa:fe:eb:a3:ff:c4:0c:0d:9d:c4:63:9f:9c:a1:
2f:77:47:36:1e:f1:9f:94:2f:23:b3:49:9b:14:49:
59:06:63:10:55:c2:a7:13:44:e4:e4:e3:90:3e:ef:
9d:36:ec:17:c4:b6:50:43:0f:56:d4:65:01:83:3e:
ef:f8:c4:fc:68:02:0a:bc:1f:b0:c9:73:45:71:16:
62:ee:fd:c3:98:93:f7:6c:37:32:db:34:7b:ae:f4:
f7:e4:5d:b9:4b:42:bd:20:08:61:d2:a0:b4:af:09:
d5:ff:36:a6:bf:0b:c9:bc:68:e4:3b:68:4d:c0:17:
49:06:1e:36:02:1b:c6:a7:50:d3:92:e7:1e:08:5e:
33:af:6c:8a:fe:40:1d:3a:6b:a8:31:bc:ea:8c:0a:
f8:fa:07:4c:af:27:e5:22:df:98:3a:a1:87:29:e2:
25:85:17:fa:bc:6a:90:82:7b:20:b0:02:64:c3:3a:
00:90:be:9d:ff:71:56:c1:b0:7d:5a:0a:05:e8:98:
65:4c:91:c2:e3:01:18:08:b1:71:31:0b:58:6f:5a:
1f:da:68:17:82:35:fe:17:ae:df:52:0b:47:77:67:
c8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:8F:0E:C3:5F:38:BD:CF:81:99:FC:D0:AE:38:DD:63:2E:60:17:8D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143995.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a541::/32
Signature Algorithm: sha256WithRSAEncryption
75:09:1e:e5:a9:4b:2d:10:e8:3f:b4:3d:72:2b:c6:4e:40:e0:
36:dd:34:34:fe:6b:61:39:75:8a:62:21:aa:2a:2b:87:a8:c1:
3f:0a:01:3f:3d:78:56:7e:c5:ad:91:d6:54:49:89:7a:96:9e:
b3:76:7c:e0:e7:37:1b:fb:75:3a:8f:43:15:c0:51:21:c3:f0:
2d:ae:40:e3:5c:a7:f6:fb:17:cb:8e:17:15:4d:52:d2:90:94:
c1:86:40:7a:44:bf:9e:74:33:4f:b1:0a:94:2e:27:92:e9:41:
6b:fa:4a:23:9c:43:6c:8a:83:77:5d:44:0a:e6:a1:c0:57:ee:
88:79:35:5f:08:2d:6e:74:3d:05:94:b4:2c:90:4f:6c:fa:c1:
e6:d6:fc:5e:71:c6:42:db:1d:81:cc:69:79:31:61:b0:e9:60:
3e:f1:f5:d6:ff:15:ec:89:60:bb:99:15:db:cf:d2:41:5a:5d:
22:c5:c2:c7:6e:90:75:dc:4d:4b:16:ba:c7:21:08:0c:d7:f5:
51:ce:6a:72:f0:2b:57:08:ae:72:2f:53:6c:f4:16:a7:be:eb:
e5:6a:9d:15:f5:89:66:7c:ca:05:ac:a0:f3:ff:3e:52:f5:94:
c2:3f:98:4e:49:38:e5:a1:34:26:12:26:88:34:77:4a:39:dd:
44:d7:3f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:40 2026 by rpki-client