Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143263.roa
File: AS143263.roa (raw, json)
Hash identifier: 8Zdvq0bsDYdqOFXLwgJivoCsDwFnbsJtYreDnlyN/2g=
Subject key identifier: 09:D9:59:C8:5A:4B:86:AC:32:69:3A:80:6B:F3:DB:D6:6D:75:C7:24
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 19B9593878C07DA852110C26B2D8801CFE7940EC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143263.roa
Signing time: Mon 25 May 2026 03:19:47 +0000
ROA not before: Mon 25 May 2026 03:14:47 +0000
ROA not after: Mon 24 May 2027 03:19:47 +0000
asID: 143263
IP address blocks: 240a:a265::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:b9:59:38:78:c0:7d:a8:52:11:0c:26:b2:d8:80:1c:fe:79:40:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:47 2026 GMT
Not After : May 24 03:19:47 2027 GMT
Subject: CN=09D959C85A4B86AC32693A806BF3DBD66D75C724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6f:18:f4:24:1a:6f:7e:09:27:dc:f5:2f:fc:
eb:a8:ed:84:0a:f5:d1:96:28:a6:37:c9:66:08:63:
e2:a7:d7:fe:ce:d1:9a:1c:4e:32:5b:a8:c9:32:6c:
1c:92:4a:57:70:2b:1b:03:6a:b7:af:a4:4f:16:f9:
e9:09:b8:dc:f2:2f:55:eb:92:db:01:ca:84:ad:af:
4b:c3:f6:04:79:3e:ef:f6:49:53:54:3b:d7:c6:71:
e5:e0:90:a0:25:6f:40:f9:cc:2c:13:9e:9f:4e:3d:
8d:23:ee:c1:fb:b8:33:a6:f7:f5:c2:0d:b1:94:4c:
97:da:e8:4c:ca:e8:72:69:25:c5:e6:21:26:80:65:
e5:63:e7:6e:56:b9:a0:5e:96:0f:8d:8c:3c:bb:16:
c6:7e:9a:02:4a:26:44:ee:f8:69:e8:1d:95:51:15:
5a:6a:e3:b5:11:3f:49:2f:e4:7d:09:01:6d:48:1d:
da:e3:4e:71:6e:64:c3:00:8d:58:18:e3:4c:3b:6e:
45:38:45:7f:60:0a:28:2c:ee:ae:02:22:dd:92:0f:
0e:9f:d3:d6:21:0f:e1:ed:7c:9f:68:a2:75:25:e9:
ac:ac:f2:bc:33:ee:98:0f:84:b1:86:e5:3a:ff:0d:
a2:be:62:ad:a8:97:46:c9:1b:9c:4c:c3:41:47:52:
6e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D9:59:C8:5A:4B:86:AC:32:69:3A:80:6B:F3:DB:D6:6D:75:C7:24
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143263.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a265::/32
Signature Algorithm: sha256WithRSAEncryption
58:67:5f:7a:6c:7e:be:33:6b:60:91:2b:6b:3e:71:c1:83:77:
3f:fb:fa:95:62:f2:72:68:c0:72:84:e2:5f:c7:1a:ee:4e:0c:
4c:05:0b:a9:9f:85:1a:4c:88:58:d9:80:93:fd:f9:4d:54:0c:
d6:c1:ef:56:53:de:8e:9a:52:50:8e:32:ab:10:27:ca:ea:e4:
a6:64:30:aa:d1:aa:61:28:ce:64:c0:a5:2b:52:f9:c7:13:2e:
8b:3d:9d:99:01:64:4a:2c:f1:37:c6:86:10:fd:91:0b:91:72:
94:87:20:e9:d6:75:96:13:4f:fd:33:6a:21:a4:d0:c6:cd:f7:
fa:66:1a:7e:f1:e4:3f:98:5b:8b:c3:a1:39:6b:5c:13:6e:53:
da:60:7a:48:a2:9c:a0:fb:51:21:82:f3:14:f5:42:75:50:94:
cf:c2:62:23:de:92:af:74:98:ea:e7:b0:d0:93:2c:77:c0:6f:
24:c8:fb:3c:27:0b:42:d2:41:24:c7:e1:48:5c:8b:29:ac:ab:
55:0c:20:76:08:71:76:eb:cb:3a:76:09:62:07:d5:49:00:76:
6b:6b:7f:f9:a3:3b:b3:de:1c:48:3e:f2:72:c1:82:83:91:60:
a2:50:e5:10:85:db:cb:ec:4b:59:14:27:d5:8d:b4:09:1e:1a:
05:2f:fa:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:21 2026 by rpki-client