Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143276.roa
File: AS143276.roa (raw, json)
Hash identifier: BZWXmu+jkOyh7HD2BUQALC+Hn1gatNDxhkd2ifsrK98=
Subject key identifier: 9C:FA:C2:5D:95:78:D3:9D:9A:B7:DC:C5:F0:72:D7:83:39:62:21:8B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 163612640B184F4397ED0851A8A4456DE6867D31
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143276.roa
Signing time: Tue 26 May 2026 06:30:37 +0000
ROA not before: Tue 26 May 2026 06:25:37 +0000
ROA not after: Tue 25 May 2027 06:30:37 +0000
asID: 143276
IP address blocks: 240a:a272::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:36:12:64:0b:18:4f:43:97:ed:08:51:a8:a4:45:6d:e6:86:7d:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:25:37 2026 GMT
Not After : May 25 06:30:37 2027 GMT
Subject: CN=9CFAC25D9578D39D9AB7DCC5F072D7833962218B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7f:39:09:e3:a8:a6:9f:46:53:bf:c9:81:20:
8c:1b:81:d5:a0:81:50:1b:26:b4:f8:43:6b:4c:6d:
f5:88:a2:6a:f3:72:b1:d8:d7:89:f4:60:fc:fe:37:
b4:9d:0c:ca:21:d7:29:6d:db:09:1f:c0:e7:d5:69:
fb:40:cf:65:e8:fd:04:d5:0f:11:1f:e2:be:c0:20:
eb:66:0f:fb:a0:36:b3:e1:ca:56:ce:b7:e3:a4:09:
0d:a0:ba:64:6a:d9:ed:e6:05:9d:d0:8e:f0:aa:cb:
77:89:44:40:26:44:6b:7f:1f:a6:66:0a:11:be:cb:
1c:df:18:a8:93:a8:69:75:d8:e7:8f:83:fe:5d:ca:
70:eb:bc:8c:d6:f1:fe:9f:02:01:10:b6:05:45:54:
a9:89:a5:02:ce:b0:ae:04:33:6c:d8:18:36:77:c2:
4b:da:0d:3f:67:80:06:30:15:0b:5c:dc:d1:82:5a:
3e:90:ca:cd:00:8a:9b:7e:73:2a:42:44:ea:8e:60:
b2:39:74:10:89:1f:44:45:26:cc:f3:17:e9:8f:06:
25:15:95:0d:40:b0:7a:b8:03:df:76:84:32:7f:4b:
7f:ce:5d:f6:a1:df:d0:b4:f8:1c:15:06:3a:f2:5c:
18:33:69:aa:8b:7c:62:cd:68:2b:9b:d6:9b:36:66:
cb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:FA:C2:5D:95:78:D3:9D:9A:B7:DC:C5:F0:72:D7:83:39:62:21:8B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143276.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a272::/32
Signature Algorithm: sha256WithRSAEncryption
b8:a5:41:d7:b6:26:8a:a1:49:8e:5e:b8:fc:69:a4:01:83:2b:
d0:82:c5:ed:86:a2:86:c0:c1:73:2b:88:d5:3c:62:8f:66:85:
0f:e6:fb:58:85:16:ca:7e:c4:22:23:a5:62:7f:ff:3d:62:5d:
34:2c:6e:ce:53:a4:46:a1:f7:cc:75:df:6c:ab:4d:9b:f5:60:
1c:d3:85:ef:5a:10:30:6a:74:1a:69:13:7b:39:18:55:d1:4a:
b7:38:12:da:4c:c6:f1:5b:7b:8d:6f:a5:85:9e:42:a9:ce:70:
93:82:28:f7:74:f2:5d:6a:a5:bb:c5:ec:ef:cb:3f:6e:7d:d6:
91:f0:8b:7f:c6:e5:27:36:44:65:af:e6:e2:6c:a5:b1:8b:da:
35:89:6b:8c:e5:24:41:52:c8:eb:b6:d8:b5:1b:f7:cc:f1:53:
f3:d1:2e:89:bc:aa:70:2f:29:fa:7b:9b:34:77:c2:e2:2f:ef:
b0:0b:25:dd:a2:69:77:7a:49:bd:d5:ff:02:43:4a:e0:e1:92:
49:79:d1:3a:a1:15:07:ae:3d:2a:b7:80:15:01:b1:ab:17:84:
ce:9c:c6:4a:d7:80:43:17:42:e9:eb:cc:bb:50:04:76:d6:a1:
6f:70:ee:21:56:69:da:28:58:86:ed:51:01:c8:7f:70:3f:77:
fa:2b:3e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:17 2026 by rpki-client