Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143264.roa
File: AS143264.roa (raw, json)
Hash identifier: o3nLZ6Q+VpfXUpp8EQxEnIqomM6efltalQiJ3FCrH4A=
Subject key identifier: 55:62:A8:1C:C1:17:22:36:97:82:EA:9D:33:27:80:6C:AD:2A:2C:CE
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 73D6900F058B2813203FF0A7FDFED3585A7DEE0C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143264.roa
Signing time: Fri 22 May 2026 07:24:49 +0000
ROA not before: Fri 22 May 2026 07:19:49 +0000
ROA not after: Fri 21 May 2027 07:24:49 +0000
asID: 143264
IP address blocks: 240a:a266::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:d6:90:0f:05:8b:28:13:20:3f:f0:a7:fd:fe:d3:58:5a:7d:ee:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:49 2026 GMT
Not After : May 21 07:24:49 2027 GMT
Subject: CN=5562A81CC11722369782EA9D3327806CAD2A2CCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:44:02:1b:24:b9:ad:6d:86:2f:f0:2c:26:b8:
de:e6:3a:1a:db:13:91:88:3c:77:b2:c3:d6:07:3b:
8c:4a:20:2c:bd:9a:89:ce:be:71:3e:40:d1:41:a6:
85:e7:44:1c:cf:e2:d5:9f:b7:5e:d0:5b:dd:0e:ea:
d0:52:4f:13:18:78:57:04:93:1d:d2:4e:47:c0:bc:
40:9c:2e:66:18:97:55:0b:5e:a2:94:81:3e:53:f4:
8e:85:8b:ed:ac:5f:7b:9c:7a:4d:5c:43:d7:be:c9:
bd:11:f8:b0:55:c0:d7:19:12:80:57:54:53:f7:0b:
1a:ce:bf:53:ca:ec:da:3e:ad:d7:de:5b:9d:3e:b4:
4e:54:46:7f:8b:62:93:8e:8d:72:b4:8c:77:21:5f:
68:2d:26:82:10:fe:d7:5d:45:28:8a:dd:15:1b:28:
db:f4:3a:8e:d2:4b:a3:d3:11:90:52:de:77:86:1b:
e1:a8:7c:d7:ef:2b:8a:60:65:90:d7:99:3e:ef:68:
03:ff:3d:d8:63:e5:af:17:87:cd:1c:0a:84:fc:fd:
a4:35:54:63:8e:84:1d:23:71:ed:f3:5e:87:47:01:
f7:02:40:6d:d7:f3:17:45:fa:65:6e:9b:54:af:d8:
8a:20:17:06:b2:0c:63:89:a5:a9:8e:20:9b:d9:cb:
0f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:62:A8:1C:C1:17:22:36:97:82:EA:9D:33:27:80:6C:AD:2A:2C:CE
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143264.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a266::/32
Signature Algorithm: sha256WithRSAEncryption
37:f6:cb:d3:85:4b:c8:4a:93:1e:de:53:c0:2b:40:46:8f:e7:
3e:6b:db:f2:f3:c3:21:37:05:04:6e:f7:24:18:4a:cf:e0:3b:
04:83:9b:cd:0a:c5:26:c7:61:a8:68:24:15:0c:7d:e2:47:fd:
03:2b:1b:cf:e9:62:c3:a4:0f:56:52:c6:03:64:e2:56:f4:d3:
c4:7f:ab:7a:16:83:bb:fd:62:d6:9b:07:fb:26:61:a3:d6:91:
a2:e7:99:20:a1:96:65:68:0e:d4:b8:82:08:93:48:22:8b:d9:
e7:1b:8b:25:64:ab:63:bd:35:20:0f:4c:6e:d4:1e:08:40:c8:
f3:2a:6e:10:54:ea:d2:54:56:0e:11:33:15:3d:07:1d:76:6b:
b2:91:b2:09:f9:da:14:7f:5e:a8:85:c3:cc:97:5d:54:7b:26:
c2:0c:d2:33:43:54:61:2e:0d:33:21:e2:61:f7:84:0b:a5:dd:
b0:73:ed:9c:d3:9a:28:18:78:79:04:50:e5:26:73:a5:20:75:
8b:8c:a2:3d:5f:f9:18:08:bb:db:8d:16:4f:e2:6a:13:d3:34:
68:eb:fc:b4:0c:64:96:bf:4f:af:5b:18:23:df:8e:7c:c3:1b:
88:fb:01:a2:7e:66:81:b9:89:56:1c:aa:31:88:24:70:9b:d9:
3d:79:8f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:56 2026 by rpki-client