Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143274.roa
File: AS143274.roa (raw, json)
Hash identifier: lLfQUvUQeWJf++qpFPFi1t5E+VpE1ncdJjFwR8m8Lmc=
Subject key identifier: 7D:20:CE:61:06:B8:05:A4:57:8C:29:D2:75:59:EA:1C:22:23:D7:8E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0A018C4F4AADF1E99825B34E46EA408E98199C19
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143274.roa
Signing time: Mon 25 May 2026 02:22:34 +0000
ROA not before: Mon 25 May 2026 02:17:34 +0000
ROA not after: Mon 24 May 2027 02:22:34 +0000
asID: 143274
IP address blocks: 240a:a270::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:01:8c:4f:4a:ad:f1:e9:98:25:b3:4e:46:ea:40:8e:98:19:9c:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:34 2026 GMT
Not After : May 24 02:22:34 2027 GMT
Subject: CN=7D20CE6106B805A4578C29D27559EA1C2223D78E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:57:a3:d5:74:de:f7:62:12:f0:ac:bb:9f:38:
1f:51:cf:3e:17:39:7b:d4:85:30:73:bd:90:2b:ca:
10:61:3a:c2:39:5e:87:e5:76:6e:31:67:a9:10:07:
ef:50:0c:0d:db:23:45:6b:ce:c6:69:a1:c2:05:38:
ea:fa:15:51:34:ce:c8:5f:60:60:a7:c1:7b:f4:f9:
e1:4f:45:31:2c:c1:47:36:d2:a0:31:f4:76:8c:82:
cb:4f:62:43:64:cd:42:cb:09:f4:c6:e7:49:f9:eb:
25:bd:6a:14:26:13:98:28:18:7e:e1:9e:23:db:d5:
19:c1:16:3e:be:e7:83:ea:34:a1:64:c5:b1:92:91:
e0:2a:1f:f3:4a:60:4e:6e:58:80:d9:24:ed:20:be:
2e:42:37:69:0b:4c:05:0f:d3:86:6e:06:24:63:17:
47:34:60:b0:61:75:36:f8:c5:24:ce:20:a3:9c:ed:
91:25:ad:f8:d2:c9:3f:f4:66:88:74:7d:49:33:f3:
8e:7d:d9:bc:1d:76:f3:fe:ca:4a:b0:04:2a:03:95:
8d:9d:38:ab:a6:ad:f1:98:eb:66:1a:28:a0:b1:78:
21:42:28:80:15:1c:43:c7:57:7b:ff:64:97:8f:85:
01:27:d8:c8:13:bd:4e:aa:48:01:83:2a:7b:8c:80:
3e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:20:CE:61:06:B8:05:A4:57:8C:29:D2:75:59:EA:1C:22:23:D7:8E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143274.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a270::/32
Signature Algorithm: sha256WithRSAEncryption
2a:1b:c6:7c:17:35:b1:3b:23:f6:da:3a:80:a5:c3:38:91:21:
55:22:47:1f:10:9f:42:69:59:2b:32:52:c3:3d:bc:89:d3:3d:
9c:9e:03:c7:a8:7f:7e:f3:c6:d3:6f:6f:d0:c8:dd:81:40:f2:
cc:fa:7e:df:12:92:47:0a:8e:04:78:58:40:2c:75:db:2a:e3:
5e:83:0f:ec:f5:c4:98:8f:30:cf:d5:4d:29:44:41:6d:c1:80:
af:91:df:d6:b6:76:79:30:c8:96:33:a4:ca:6a:b4:69:9a:e4:
76:c0:33:b8:a4:2b:68:95:5c:76:10:b9:b0:77:9e:17:4d:13:
ae:38:ff:9d:c6:40:a8:0c:65:d1:a0:cd:14:b6:d2:79:8d:97:
15:24:7c:a0:a9:f6:27:d9:ac:f0:27:f1:7c:1f:03:43:67:e6:
9c:c6:f8:44:69:83:e5:51:39:e5:b9:75:ff:2d:e0:9a:6f:7e:
b6:35:93:e6:1d:50:ae:99:5d:29:21:19:9e:14:f1:b5:fa:87:
65:6e:58:eb:bb:2e:40:13:c3:56:f3:4a:db:27:c3:9b:f3:35:
bb:0e:ab:dd:ff:ab:cd:9c:41:84:c7:ed:c9:4a:68:94:ac:83:
90:9e:fe:23:ff:5a:7c:b0:88:43:c2:26:db:8a:e7:21:62:bd:
f9:04:07:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:14 2026 by rpki-client