Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143284.roa
File: AS143284.roa (raw, json)
Hash identifier: B7aY/Nj0enk01zbDw2bF9L9aKO7j1DpFv+eZ/mCuTv8=
Subject key identifier: 63:06:2A:0A:08:0A:E8:5A:6C:C0:E1:26:21:40:EE:BA:B2:D2:3E:5B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1DC6C5A181BF2C3C9102A70B63458532D11DBB9C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143284.roa
Signing time: Fri 22 May 2026 04:08:16 +0000
ROA not before: Fri 22 May 2026 04:03:16 +0000
ROA not after: Fri 21 May 2027 04:08:16 +0000
asID: 143284
IP address blocks: 240a:a27a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:c6:c5:a1:81:bf:2c:3c:91:02:a7:0b:63:45:85:32:d1:1d:bb:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:16 2026 GMT
Not After : May 21 04:08:16 2027 GMT
Subject: CN=63062A0A080AE85A6CC0E1262140EEBAB2D23E5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0b:4c:b3:04:b0:f9:10:24:ad:e5:dd:e5:7b:
bc:2d:67:65:9d:75:25:01:de:13:c3:13:6d:43:2f:
cd:36:c9:8a:24:0f:e1:86:75:5e:90:44:a3:32:d0:
7b:ab:82:de:5c:48:b8:07:09:99:1e:e8:fb:55:6f:
30:26:50:d4:21:5e:46:e3:b5:4d:85:3e:92:cf:78:
8d:63:f4:22:62:31:a2:0b:f9:a9:90:c0:cd:ad:b3:
ba:85:0d:e6:97:24:97:9d:e4:00:45:eb:60:53:8f:
18:55:42:13:b3:9f:02:d2:5c:f1:97:41:6b:68:6d:
2c:27:40:1a:05:dc:b3:f4:a8:aa:16:fe:89:40:28:
ad:cf:97:dc:23:71:8d:d9:45:20:00:f7:07:5b:04:
04:52:8e:03:d9:df:3b:7e:df:c6:cd:22:69:4b:64:
16:48:da:54:59:f3:d0:c3:c9:47:02:d5:46:01:97:
a7:62:a5:1f:26:e5:3e:06:2a:c4:d3:28:fc:0e:84:
14:15:7a:e3:3a:48:ee:a4:f3:45:3d:70:7f:13:41:
fa:96:5d:ae:00:3e:99:6c:32:be:41:f4:ff:d5:84:
cf:a9:70:95:72:71:78:23:70:dc:2c:ca:99:8b:2f:
09:75:1f:31:09:00:d6:d7:36:a4:99:4c:fb:57:e3:
cd:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:06:2A:0A:08:0A:E8:5A:6C:C0:E1:26:21:40:EE:BA:B2:D2:3E:5B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143284.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a27a::/32
Signature Algorithm: sha256WithRSAEncryption
7b:48:83:b6:1f:26:7c:22:db:9b:08:b7:43:c9:d1:a3:4f:d8:
d7:03:ff:26:1d:94:81:5c:38:4b:dd:04:d1:fc:f3:af:5a:cc:
97:13:c0:eb:bb:82:a7:1a:7d:02:fd:99:02:36:97:d7:1b:a9:
9a:76:fb:df:ad:90:4b:ea:9c:b8:9e:5f:df:7d:b3:db:0f:ef:
d6:98:d8:58:ef:00:73:c0:4a:9a:eb:48:db:95:34:82:89:05:
e5:0c:b3:0e:37:6e:ce:a2:9c:dc:93:4c:b5:34:46:ed:9f:d6:
90:a1:36:a0:2b:f1:1c:a4:e9:39:e3:f9:6d:4a:2d:d4:61:8c:
bf:bc:a9:7b:72:5b:2e:6d:ee:40:60:80:bd:b5:9f:85:d6:f4:
92:b8:6e:68:93:a8:2c:f8:7c:ab:1e:f7:88:ef:8d:8f:b8:3e:
b5:66:06:9a:94:27:af:ee:bf:df:63:2f:21:77:f8:14:01:a9:
00:cb:d9:dd:6b:da:7a:c8:84:ec:9f:40:c3:6a:91:60:57:0d:
21:e0:f4:a4:c0:58:57:f2:99:65:95:00:95:a4:10:09:54:d9:
cd:cf:10:a8:71:b3:cf:12:0b:59:9c:d1:79:c1:40:e8:7d:44:
5a:24:d3:f1:b7:29:cc:e9:1b:98:46:b8:d0:7e:54:45:93:c8:
00:57:16:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:10 2026 by rpki-client