Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143285.roa
File: AS143285.roa (raw, json)
Hash identifier: Xa0amVavmThrs4xpVOyhC9zoBp6kaBQj+z1q5JC9BX4=
Subject key identifier: 94:CF:BE:07:35:DC:DD:F9:6F:DD:4F:38:D3:7A:15:89:D6:95:23:BF
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6CD67B1565D148C03897A3B80C23720B486DF510
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143285.roa
Signing time: Tue 26 May 2026 01:13:14 +0000
ROA not before: Tue 26 May 2026 01:08:14 +0000
ROA not after: Tue 25 May 2027 01:13:14 +0000
asID: 143285
IP address blocks: 240a:a27b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:d6:7b:15:65:d1:48:c0:38:97:a3:b8:0c:23:72:0b:48:6d:f5:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:14 2026 GMT
Not After : May 25 01:13:14 2027 GMT
Subject: CN=94CFBE0735DCDDF96FDD4F38D37A1589D69523BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:35:a8:cd:96:59:e7:ac:6c:91:21:b8:70:f7:
35:65:d4:42:f9:a5:44:44:3e:29:a0:7a:58:86:8d:
e9:aa:2d:0e:5e:fc:56:31:11:2c:61:a3:7f:d9:a7:
0f:34:42:86:43:a6:b6:b4:cb:51:90:f5:2e:fa:bb:
65:39:f9:d8:85:ef:59:6d:78:a7:10:94:18:d0:83:
e0:f6:fe:2a:12:27:4d:4b:8a:4a:31:b0:23:79:c5:
7a:8d:d5:24:91:d3:88:70:f4:b7:77:01:a9:72:5a:
52:00:bb:06:cf:45:b1:8d:52:ed:27:71:a1:97:e1:
a4:02:ae:b3:a4:d6:ad:23:82:1a:47:1e:9a:fa:68:
65:be:e4:8d:e6:a3:3b:63:5a:2c:f4:44:e9:a2:2d:
79:38:42:dd:8a:80:af:3d:e9:83:35:38:df:ca:29:
ef:1e:a9:ab:10:05:26:23:a0:7f:0f:9c:c5:80:fb:
58:d3:96:9c:81:e6:f4:76:25:ba:50:f0:51:cd:7f:
b1:9a:9e:88:a5:ba:6b:b9:0c:21:28:26:be:d9:25:
e9:7b:13:65:3b:3a:6b:09:69:aa:ec:0d:d4:f7:3f:
a9:aa:60:de:2c:6b:b6:e6:b9:a2:9e:17:11:0b:3a:
29:27:e7:83:f6:60:8c:7c:ff:19:e6:69:6e:4d:a6:
46:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:CF:BE:07:35:DC:DD:F9:6F:DD:4F:38:D3:7A:15:89:D6:95:23:BF
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143285.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a27b::/32
Signature Algorithm: sha256WithRSAEncryption
2a:8d:ee:b5:f4:c0:b9:e6:fc:b6:41:ef:34:8d:57:e5:5a:ba:
67:8c:a9:bd:1f:9f:74:a1:8a:eb:91:95:2c:20:ec:2d:31:f7:
51:51:60:52:d5:4d:34:6c:e2:91:0c:7a:52:8c:54:c9:1a:b9:
03:9e:3d:4f:5a:e0:f0:83:dc:9b:e4:aa:57:15:4b:43:d4:b3:
12:48:7e:c3:1d:54:d3:1f:c7:93:86:8c:44:3c:63:59:05:21:
e1:d3:e8:18:52:d6:52:d5:e3:e1:1c:c1:92:21:d2:8a:f2:58:
ba:d5:35:75:7e:4d:7a:51:b1:40:6c:52:8c:53:33:51:72:ea:
ab:9d:57:1c:46:a7:1e:3c:f5:d8:9d:f2:00:d7:6b:96:e9:55:
e1:16:af:e6:56:30:73:02:d5:09:2f:3f:80:ae:34:7e:65:e2:
78:61:fc:6b:49:94:f2:9e:cf:8e:c8:d2:da:5e:f8:47:2d:38:
01:c5:22:19:d1:e7:0c:7e:87:d1:50:71:4c:4e:ab:e3:2e:95:
75:24:84:37:71:e6:5f:40:3e:81:43:8d:ed:1b:a3:4a:7d:35:
33:65:44:86:31:96:e7:67:f5:a8:45:71:df:60:0c:a7:c1:4b:
45:11:35:c8:1e:82:40:50:35:ee:7e:8e:38:f7:b8:c6:ee:74:
8c:3b:2a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:57 2026 by rpki-client