Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143223.roa
File: AS143223.roa (raw, json)
Hash identifier: BqYXkQc6DWX0mSGC1ZjYLxbW6TVtIKvGq2Ug/DJHgUg=
Subject key identifier: E3:75:28:59:53:87:78:F3:93:C2:8E:3E:15:94:0A:AA:05:11:37:89
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5F340EF79928B6A98B1865221741C431BCC65F80
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143223.roa
Signing time: Fri 22 May 2026 07:40:46 +0000
ROA not before: Fri 22 May 2026 07:35:46 +0000
ROA not after: Fri 21 May 2027 07:40:46 +0000
asID: 143223
IP address blocks: 240a:a23d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:34:0e:f7:99:28:b6:a9:8b:18:65:22:17:41:c4:31:bc:c6:5f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:35:46 2026 GMT
Not After : May 21 07:40:46 2027 GMT
Subject: CN=E3752859538778F393C28E3E15940AAA05113789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3a:e9:dc:26:20:75:58:4e:9e:19:b0:17:3b:
7a:e5:a4:7d:6e:84:ce:d2:3b:4b:f7:57:6d:49:d7:
c9:db:6e:aa:9d:b1:56:d1:42:4e:06:f4:f5:ae:d6:
93:f8:59:4f:d9:6f:11:5c:9d:0d:99:4a:4a:84:1e:
23:00:56:53:9d:7e:d4:25:cf:1c:83:7d:2c:08:d0:
16:09:bd:7e:1f:32:46:39:e7:01:a1:68:af:0b:24:
6c:17:94:98:98:3e:04:6a:a1:73:a2:07:26:e8:e0:
0d:05:ec:b9:45:1c:3b:76:f8:7b:16:f0:63:90:93:
f0:e1:b4:df:cd:fe:f9:25:85:c4:79:a1:8a:ab:f5:
d9:c9:d1:0f:07:8f:c9:d1:5c:c1:c0:89:2f:ec:b5:
af:4e:81:95:c4:32:4c:8b:53:5d:8c:bd:65:72:c8:
18:96:47:bc:bd:3e:58:37:4a:db:6b:7e:85:b1:a9:
4a:38:10:3a:57:69:d4:c1:ec:c8:e8:5d:a7:34:ce:
f0:ee:f6:3f:e1:da:2b:13:27:03:c4:dc:20:54:bc:
05:d1:96:6b:6f:1e:7b:94:df:36:8a:07:c0:fa:bb:
07:a9:d0:6b:9f:7e:e9:17:6d:13:8b:e6:40:3c:17:
c7:58:1b:76:1d:32:cc:0c:3d:65:33:6a:ab:b7:59:
cf:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:75:28:59:53:87:78:F3:93:C2:8E:3E:15:94:0A:AA:05:11:37:89
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143223.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a23d::/32
Signature Algorithm: sha256WithRSAEncryption
48:4e:24:01:a4:61:27:ff:f4:ae:80:6c:c1:6f:9b:ee:ec:04:
32:b0:5d:b7:8c:98:2f:11:68:97:b7:0a:f8:ba:4c:18:50:b1:
1a:1d:b9:1c:76:57:e2:13:46:8d:b9:85:cb:5e:e4:2f:8f:9e:
d2:48:1c:b9:ad:71:cb:85:01:67:3c:6a:10:30:4f:cb:e1:9f:
91:aa:76:85:7b:07:67:18:2e:a5:23:80:06:c0:05:2f:80:99:
ff:bc:a9:58:bd:60:ce:90:ea:04:03:64:1b:3a:e2:bc:94:6f:
2a:8a:17:a1:36:99:67:e6:51:93:33:3a:2a:e9:dd:ac:ba:69:
f1:cc:c3:2b:c2:6a:34:fc:40:2e:2b:32:cf:d3:39:7a:65:8f:
42:bd:eb:2b:41:f3:8c:38:bd:bd:4b:03:a8:1b:f4:11:a8:12:
c2:4c:85:21:ce:8c:26:c9:2b:b8:d2:94:44:23:30:43:16:87:
2d:7e:6d:cb:54:0a:53:40:3f:12:25:24:2d:41:f9:8f:16:b4:
1c:39:ed:91:6a:6c:b9:5a:b8:d7:30:3b:1c:51:57:e1:ce:1c:
4d:98:3a:91:7a:40:20:e0:7b:dd:3e:ac:60:48:a5:f4:05:98:
ba:72:fa:dc:cd:2a:63:15:0c:c6:c8:3f:91:c7:23:37:ab:a9:
85:08:5a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:53 2026 by rpki-client