Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143267.roa
File: AS143267.roa (raw, json)
Hash identifier: p/14Vi/QoKQZDIjiLL7RLxdYTmWgmb8m+63sA9vErso=
Subject key identifier: CF:7B:F8:72:02:8F:8C:CE:56:6B:94:66:6C:CD:B8:B8:D6:E8:5F:59
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3AFCB39B4A2F057396CF06C97BA92AE9E69CDDA9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143267.roa
Signing time: Fri 22 May 2026 02:48:02 +0000
ROA not before: Fri 22 May 2026 02:43:02 +0000
ROA not after: Fri 21 May 2027 02:48:02 +0000
asID: 143267
IP address blocks: 240a:a269::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:fc:b3:9b:4a:2f:05:73:96:cf:06:c9:7b:a9:2a:e9:e6:9c:dd:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:43:02 2026 GMT
Not After : May 21 02:48:02 2027 GMT
Subject: CN=CF7BF872028F8CCE566B94666CCDB8B8D6E85F59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ee:3e:80:cf:19:da:76:be:0b:00:0c:4d:b2:
03:45:37:5b:a9:b4:fb:ef:ce:11:97:8b:32:13:14:
12:33:e8:eb:69:56:47:e8:2d:6f:10:e6:99:e0:4c:
0a:e0:66:3a:0e:5e:3f:41:03:f3:d7:37:05:bf:80:
23:ac:a1:21:cc:ec:b1:17:01:58:91:ed:54:55:4b:
7e:a2:cf:6d:6c:20:b5:49:90:87:b8:bd:d7:02:e5:
c6:26:f2:a2:89:3e:09:33:d8:a1:f8:3e:09:57:e2:
24:18:86:6c:b9:17:70:02:b0:93:93:08:77:05:af:
6c:27:85:02:38:c1:db:81:89:eb:13:cd:b0:18:3a:
c1:d1:b1:ca:ff:65:a3:68:c7:d3:e1:0d:2a:ee:03:
8d:a3:d6:b7:5a:f2:03:a5:2b:80:ca:11:ae:12:66:
cc:db:fb:f3:aa:56:b7:07:a9:4c:65:c0:00:d2:e9:
df:86:5d:2a:31:ad:5c:a5:37:54:bb:42:06:eb:5f:
8f:56:61:f7:6c:6f:a8:00:83:f2:79:40:aa:82:3b:
0d:61:04:3c:14:f6:43:5b:ff:f0:fe:2a:5e:58:dc:
57:da:cb:12:d2:88:64:56:f1:c7:e2:a7:67:1a:6a:
56:c8:b0:34:14:be:99:62:81:04:f9:19:43:d4:e7:
9f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:7B:F8:72:02:8F:8C:CE:56:6B:94:66:6C:CD:B8:B8:D6:E8:5F:59
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143267.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a269::/32
Signature Algorithm: sha256WithRSAEncryption
a6:8c:75:32:43:35:a1:4a:fb:fe:8f:9f:a4:97:c0:5c:fe:bf:
a7:af:1b:d6:d7:7b:f9:bd:f8:6c:45:6c:56:9e:7c:4b:42:18:
e6:57:5e:1c:83:46:cb:45:af:60:37:ca:8a:de:26:d8:d4:fa:
88:0b:47:8d:f6:e7:e2:d7:01:f4:4d:0c:a5:49:9a:32:7d:d7:
27:51:fa:3f:d4:aa:2a:66:86:92:75:72:f4:73:2c:0f:56:0d:
27:d9:92:ff:0d:da:1b:ca:2b:36:99:c5:7c:50:3e:47:87:61:
78:b5:2b:8c:cf:ad:a7:4c:5e:ff:ae:fb:69:43:e2:8a:a0:a9:
11:3d:a6:7b:eb:91:07:a7:f7:3d:ba:8f:cf:72:a2:e7:07:1f:
7f:ae:5a:b2:2f:78:31:83:c2:8e:10:eb:e2:52:61:6e:22:ba:
a4:bd:e2:19:93:cc:e5:a2:0b:a6:b8:6e:d9:cc:13:9a:0b:ad:
72:3a:7f:ab:20:ff:c5:9b:12:86:38:0b:71:cf:29:0b:3d:cd:
4d:20:f4:7c:c1:9c:98:b7:a1:7a:09:26:5e:f2:74:b5:5f:80:
39:13:2a:c1:7f:2e:15:6d:85:5e:6c:79:25:77:6a:e9:e2:06:
23:ab:93:6e:31:73:19:5e:7e:b7:05:68:a8:af:1d:57:4c:da:
21:0a:86:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:33 2026 by rpki-client