Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143248.roa
File: AS143248.roa (raw, json)
Hash identifier: CI8CsZFClrExqowdl6+jMRB0B6xehwQNSaxJecYPyzI=
Subject key identifier: 88:ED:8B:12:45:0F:10:E9:A7:FB:55:51:EB:5A:CA:37:84:30:F9:68
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3A28254B1A0E9D93637C1DF57E30C581EC73CC0C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143248.roa
Signing time: Fri 22 May 2026 07:24:24 +0000
ROA not before: Fri 22 May 2026 07:19:24 +0000
ROA not after: Fri 21 May 2027 07:24:24 +0000
asID: 143248
IP address blocks: 240a:a256::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:28:25:4b:1a:0e:9d:93:63:7c:1d:f5:7e:30:c5:81:ec:73:cc:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:24 2026 GMT
Not After : May 21 07:24:24 2027 GMT
Subject: CN=88ED8B12450F10E9A7FB5551EB5ACA378430F968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a8:7e:97:b4:16:30:70:b3:a9:d5:52:60:51:
46:9e:e0:92:bc:4b:c4:24:bc:e0:c0:30:25:61:28:
9e:dc:fd:d6:2b:ce:b0:0c:6d:55:c2:d1:a8:97:06:
ad:45:ee:55:c2:31:50:b0:ba:15:8d:59:ff:37:77:
6c:13:77:bb:09:97:d7:01:b1:af:ec:cc:59:4d:7a:
7f:f6:60:5e:04:20:83:19:6f:8b:49:c7:8a:7a:7e:
80:8a:db:cd:fd:60:88:f8:0e:9a:90:cb:b3:82:f8:
c4:78:65:87:d5:55:ce:ee:1b:5b:8a:73:38:75:d1:
f6:1c:f1:2d:8c:23:56:63:17:db:6d:d6:fb:36:77:
b1:3a:8d:04:e1:52:f7:1a:9c:07:ef:9d:60:96:93:
bf:54:07:46:8a:9a:b1:2e:16:29:85:4b:25:0e:68:
af:e7:fd:dd:d0:9f:5a:c9:36:42:53:c8:40:51:07:
91:59:fe:da:52:28:70:d7:cf:5a:f0:f2:25:d1:4d:
db:f2:e6:aa:1c:6d:75:bc:ef:b6:d6:b3:05:14:5d:
a5:14:63:04:99:2f:f5:07:be:04:69:db:a7:aa:80:
c0:bb:99:7e:2c:24:74:0d:f9:81:aa:1f:7a:88:ca:
24:94:d4:8b:cb:4d:67:b9:48:90:50:50:49:7d:d3:
ec:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:ED:8B:12:45:0F:10:E9:A7:FB:55:51:EB:5A:CA:37:84:30:F9:68
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143248.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a256::/32
Signature Algorithm: sha256WithRSAEncryption
bd:2f:da:ef:cc:a0:79:af:f8:ca:94:60:d1:e3:d3:d1:e9:87:
cd:3d:7f:28:e1:53:a4:a8:58:6c:fd:b4:bf:cb:ac:90:c4:e3:
52:40:db:19:f6:23:c1:7a:1a:ed:8d:eb:bc:02:10:4c:4a:8e:
14:ba:9d:28:10:12:e3:51:a5:5b:1e:c8:44:18:ec:d4:59:d4:
a8:9a:1b:fa:c6:0c:08:a0:38:78:80:f4:ad:c8:90:0b:10:5d:
52:3d:c8:85:49:3d:7d:f7:63:7f:86:9a:34:2a:b3:7f:79:71:
b4:dc:8c:4d:bc:07:60:00:38:29:6f:6a:3e:a6:cc:62:43:4d:
39:7b:ca:60:b8:c1:42:60:33:15:fa:3c:05:8b:73:3a:19:48:
25:b4:51:34:3e:74:fd:b8:8f:69:51:3a:b3:c2:07:14:14:9c:
04:4d:ae:0a:4c:b5:40:58:b6:de:c8:80:ba:3b:bb:74:bd:18:
3f:aa:a6:9d:a8:0e:81:50:32:76:53:90:5d:31:8e:54:52:56:
3b:21:b3:34:37:a7:ce:89:30:87:97:47:ce:b0:d0:f0:a5:bf:
b1:32:a6:69:c4:7d:cf:b3:32:d0:72:0f:09:20:4c:17:3e:69:
d0:88:d6:15:7c:5a:1c:33:eb:08:dd:6e:dc:d1:ef:35:6e:ab:
96:5e:76:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:18 2026 by rpki-client