Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143281.roa
File: AS143281.roa (raw, json)
Hash identifier: hvxYQ735tIRi+Ag6cnUNJmRgLJISp0m2ed50QLg6cqw=
Subject key identifier: 83:B7:AA:C8:BB:67:5B:08:F3:DB:80:63:11:A3:A9:0E:4F:FD:85:43
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 58B85D66A4D2A4D395B89AE538CB16B2DE3B904B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143281.roa
Signing time: Tue 26 May 2026 02:35:26 +0000
ROA not before: Tue 26 May 2026 02:30:26 +0000
ROA not after: Tue 25 May 2027 02:35:26 +0000
asID: 143281
IP address blocks: 240a:a277::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:b8:5d:66:a4:d2:a4:d3:95:b8:9a:e5:38:cb:16:b2:de:3b:90:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:26 2026 GMT
Not After : May 25 02:35:26 2027 GMT
Subject: CN=83B7AAC8BB675B08F3DB806311A3A90E4FFD8543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0a:28:5f:19:08:9f:17:bb:36:da:04:91:91:
e3:3e:bb:b5:94:47:2d:66:13:b5:48:b7:d1:0d:3c:
22:65:1b:4c:16:8b:fb:8e:b9:c5:41:81:ac:f6:a6:
94:6a:fc:93:0d:18:b2:0a:8f:a1:1e:23:a6:67:1b:
29:c3:c5:d5:35:a5:e1:3b:1f:42:ca:cc:0d:2f:ea:
3b:62:6f:97:27:ff:35:f8:3a:1a:75:08:42:11:3d:
5b:ba:a1:0f:05:4e:14:38:cf:dd:d3:06:c9:fd:12:
17:91:ac:c2:2e:89:b6:99:0d:86:f9:c0:24:dc:4b:
2a:85:6b:5c:66:e9:9a:a8:9a:72:44:bb:97:82:0d:
84:77:c2:06:a8:a1:c5:71:d7:34:b6:26:30:75:d2:
72:e6:b3:84:41:cf:86:f4:41:5c:9c:bc:c6:72:47:
15:aa:7f:a6:64:71:44:b2:d4:56:51:db:e2:bc:29:
96:eb:6e:4a:72:f4:10:e8:5b:cf:98:06:e3:d2:f3:
b8:93:18:91:b4:fa:4e:06:17:ba:94:1a:7c:ec:5e:
9b:6e:e7:be:a4:61:72:c0:b6:c4:36:74:0a:b8:0e:
71:3e:26:6e:06:9f:a9:18:e7:67:2e:bc:7f:a0:f6:
84:a3:ec:1b:19:7d:04:1a:c3:c2:4a:86:43:5c:dd:
5a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B7:AA:C8:BB:67:5B:08:F3:DB:80:63:11:A3:A9:0E:4F:FD:85:43
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143281.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a277::/32
Signature Algorithm: sha256WithRSAEncryption
66:82:33:49:8a:4e:73:25:ab:84:32:6a:1d:5c:e0:b4:13:dd:
ff:11:c7:e1:05:5e:81:24:38:52:68:fd:92:ee:23:04:b7:d4:
7c:0f:48:52:47:8e:56:a4:97:46:55:99:e1:f4:44:29:ef:de:
f5:9f:41:6a:21:cf:f0:5a:66:6c:21:89:6b:06:ee:fb:0d:30:
9d:c1:62:0a:71:bf:9c:bd:23:ec:0f:71:62:10:17:d6:cc:ef:
71:6a:b6:44:4f:fb:29:8d:ef:47:8e:a0:e4:00:bb:0d:c1:e1:
cb:b8:9b:48:8d:64:31:7e:15:c9:a4:87:6f:b0:95:e8:36:31:
f0:8a:d2:18:3a:05:60:c9:a1:54:f7:9c:d1:05:c7:64:d1:a3:
b2:2f:ca:a5:f3:77:96:e2:d4:9d:8d:cf:c0:3a:b3:22:4a:af:
40:da:2c:e4:2e:87:53:7f:f1:88:8b:0d:be:e7:40:9d:ea:80:
c5:74:0a:38:bf:64:2d:e8:c4:0e:ab:74:8d:af:1a:7e:d2:5f:
c1:75:1d:60:bb:d4:45:fa:d5:33:ca:98:28:04:33:be:ce:00:
78:e6:34:03:09:de:a4:30:44:84:9a:ad:0c:a6:44:04:72:a8:
d7:d9:7b:ae:05:d9:cb:98:db:6d:48:93:fe:aa:67:b2:62:95:
d2:f4:5d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:50 2026 by rpki-client