Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143997.roa
File: AS143997.roa (raw, json)
Hash identifier: 3NCFuyCjq3nCE/nE9N4ml6fL0Dqqqnv7cUq3dNzKgJg=
Subject key identifier: EF:13:97:16:2C:4B:E5:28:37:D4:49:31:9B:70:A0:7F:7B:A6:7A:3D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 78B3CD13491DDC43457FBEEA14C205DC6B61D1DB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143997.roa
Signing time: Fri 22 May 2026 06:05:18 +0000
ROA not before: Fri 22 May 2026 06:00:18 +0000
ROA not after: Fri 21 May 2027 06:05:18 +0000
asID: 143997
IP address blocks: 240a:a543::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:b3:cd:13:49:1d:dc:43:45:7f:be:ea:14:c2:05:dc:6b:61:d1:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:18 2026 GMT
Not After : May 21 06:05:18 2027 GMT
Subject: CN=EF1397162C4BE52837D449319B70A07F7BA67A3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3e:c3:ad:ba:34:a9:fd:49:59:b3:ac:cb:87:
b4:4d:0b:9d:cb:79:15:85:fb:78:00:7b:8a:46:f5:
fc:9d:94:a0:80:ad:a8:95:d0:bc:86:d1:c6:8d:45:
57:24:fa:d1:fc:f5:15:e7:95:53:89:b1:ee:43:13:
5e:a0:9f:48:70:6d:49:a4:c0:f2:99:7c:77:6d:30:
d4:1c:48:c2:a9:a2:22:69:19:f5:b8:ab:8a:24:f7:
4d:9c:d2:88:13:69:20:7e:e1:84:c0:e2:b6:d1:b6:
79:7b:12:6a:10:15:cf:66:85:d8:46:70:0b:99:20:
ee:54:d5:64:dd:3d:02:d8:ec:8c:fe:93:09:89:b5:
48:11:f1:3a:53:cb:dd:9e:96:fa:82:8f:09:d7:0b:
dc:b7:4b:32:ef:9f:7d:65:33:3d:96:71:f9:b7:2a:
ea:b7:0a:24:95:03:58:42:ba:10:c0:b4:6c:26:3c:
55:06:7e:6e:89:a5:07:ca:7b:fc:67:2e:6d:ad:e8:
47:10:30:a1:a6:46:c0:c9:16:6f:e0:e5:17:54:88:
4f:1d:24:50:5f:7b:9d:20:2e:aa:34:c4:b1:16:b5:
07:e7:93:b7:76:73:89:f8:ab:66:da:00:fc:48:7a:
00:32:03:d1:09:ec:b1:b7:7d:7c:34:c9:ea:1b:06:
53:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:13:97:16:2C:4B:E5:28:37:D4:49:31:9B:70:A0:7F:7B:A6:7A:3D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143997.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a543::/32
Signature Algorithm: sha256WithRSAEncryption
af:56:7b:1b:53:51:52:f9:a4:9b:b1:e5:92:aa:d8:f9:bf:06:
9e:3d:90:c2:94:9c:94:30:98:20:66:57:c9:ff:dc:56:7b:6c:
94:dc:ec:4a:ee:6f:11:79:0f:fa:42:62:e3:8e:9c:ba:6e:cf:
19:6a:57:81:ad:a9:85:08:f3:d1:d4:de:12:29:a0:7f:5c:b0:
ec:a7:44:0f:8e:70:3f:be:a8:92:d6:52:00:a3:79:06:ab:1f:
c2:9c:ad:ab:a2:b8:88:35:a6:11:77:1f:9e:68:94:b0:38:31:
e6:40:7a:3b:39:17:06:25:5a:93:ca:67:03:cb:66:5d:47:43:
27:65:51:14:ba:96:ef:e6:4c:cd:9c:19:d6:47:e9:0c:3a:95:
49:49:99:6d:df:50:37:d2:db:59:e8:77:ad:5e:cd:33:e8:92:
50:39:7e:4f:d7:08:cb:7b:c8:da:5d:6a:fd:fb:be:00:41:74:
9b:df:ba:1f:35:ff:84:09:1a:22:24:87:4c:d6:80:86:ac:07:
d5:18:07:98:7e:e6:5e:f2:32:c1:11:55:da:45:27:e0:5c:a5:
58:df:71:bb:f1:c6:84:a5:9d:ab:f6:06:1f:c1:89:b2:cf:60:
97:bc:ea:ab:79:51:b1:21:67:b8:94:31:21:49:fb:a8:88:44:
60:c6:10:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:38 2026 by rpki-client