Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143283.roa
File: AS143283.roa (raw, json)
Hash identifier: ukTCxYmBsTuA4iWS5DFFXgSZT6ajwi+uUV5KteMHOsU=
Subject key identifier: 07:DD:A3:1C:6C:7E:EF:C2:D3:E1:76:7C:3D:BD:C6:9F:ED:31:20:D2
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 088D7407B9116391010F5429457B94561465BEC6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143283.roa
Signing time: Fri 22 May 2026 02:48:09 +0000
ROA not before: Fri 22 May 2026 02:43:09 +0000
ROA not after: Fri 21 May 2027 02:48:09 +0000
asID: 143283
IP address blocks: 240a:a279::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:8d:74:07:b9:11:63:91:01:0f:54:29:45:7b:94:56:14:65:be:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:43:09 2026 GMT
Not After : May 21 02:48:09 2027 GMT
Subject: CN=07DDA31C6C7EEFC2D3E1767C3DBDC69FED3120D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d4:a5:23:ae:cc:30:c1:69:15:d0:c6:a6:3b:
37:27:a8:b5:f6:55:38:f3:ea:10:6f:7b:c3:eb:6d:
ec:99:1d:e7:bd:9d:3f:2b:31:9a:24:87:fb:bf:08:
53:4d:e4:82:09:c0:d1:9f:14:26:75:da:5d:2d:26:
a7:e8:8e:43:f5:27:e2:9b:a6:1c:3a:fb:9b:a4:70:
95:7f:23:4b:03:53:6d:f6:75:5d:fc:74:35:46:45:
b3:63:6e:4f:f7:cd:4d:0f:80:0b:53:49:01:ab:c5:
2a:c5:f5:f0:0d:2e:23:c9:ba:40:f8:c3:d2:ec:ec:
c8:cc:ae:dc:25:87:45:bf:39:f4:32:fe:4f:01:34:
3d:da:6c:f7:96:83:34:79:e0:38:5b:61:24:e4:29:
21:90:25:3a:6f:9e:b0:ee:87:fb:89:6d:52:ce:b0:
dd:0a:d5:e4:06:22:ae:45:b8:4b:f2:17:4e:2b:26:
5a:c8:69:fd:08:50:30:72:f0:f1:cb:73:6f:23:8e:
02:24:e2:2e:59:4a:21:05:93:2e:6c:83:e0:3a:a7:
e1:aa:2a:c1:bf:4b:20:8f:77:f0:c2:78:5d:bd:dd:
c9:c7:14:c1:55:df:d7:ad:6f:12:7a:00:4a:2e:1e:
78:be:ad:2c:8b:6d:6d:b6:d7:ad:3e:fa:9d:78:5e:
3e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:DD:A3:1C:6C:7E:EF:C2:D3:E1:76:7C:3D:BD:C6:9F:ED:31:20:D2
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143283.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a279::/32
Signature Algorithm: sha256WithRSAEncryption
a4:cb:1a:d7:73:c7:5f:a1:1a:a3:a3:5a:af:1f:9c:a9:62:e2:
a7:53:f1:36:ea:f9:aa:67:51:0d:c8:f6:aa:51:ff:61:d3:92:
d2:21:07:76:60:af:29:af:d5:26:5c:f1:04:55:5f:9e:4e:47:
b7:96:db:ce:78:2f:8b:68:07:d7:c0:4a:8b:21:91:63:eb:04:
ca:3a:7a:79:7c:b2:e0:3b:43:11:72:20:43:c8:41:3f:cc:f7:
8c:64:0d:60:e0:da:d6:57:45:4c:f8:57:da:44:77:12:43:80:
89:aa:ea:14:f5:72:83:c1:44:d6:78:5d:92:d9:b0:62:de:ba:
59:1a:ae:84:87:69:54:5b:0f:16:35:bc:bf:89:97:61:c2:63:
7b:05:12:8f:63:c1:67:b0:7e:8f:21:17:ff:9c:9d:07:1a:ff:
53:6a:f4:16:db:ef:4d:69:f2:7b:d0:d2:6c:67:98:5c:d0:6d:
0b:50:e1:53:13:db:8f:86:98:db:c8:62:e9:e0:25:82:b8:ec:
71:4a:24:e9:23:c6:db:9e:32:60:c2:b3:f5:a6:bb:46:41:a8:
11:5a:f2:61:d6:b5:27:1e:22:5d:4a:ef:89:c4:30:73:4c:84:
2c:4e:c8:c5:07:94:64:53:52:47:a9:15:94:98:25:5a:06:0a:
81:9f:11:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:58 2026 by rpki-client