Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143287.roa
File: AS143287.roa (raw, json)
Hash identifier: 4ejRXmVDYl+IiO+UHP85pSMFbzl0KD1lI8sYxff/tOA=
Subject key identifier: D6:35:CB:EC:47:68:35:18:8F:AB:10:2B:7D:F7:63:9A:7A:8B:CA:D9
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1AADEA10CA7A636748FD8BE20BEA72307316BA61
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143287.roa
Signing time: Fri 22 May 2026 07:24:26 +0000
ROA not before: Fri 22 May 2026 07:19:26 +0000
ROA not after: Fri 21 May 2027 07:24:26 +0000
asID: 143287
IP address blocks: 240a:a27d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:ad:ea:10:ca:7a:63:67:48:fd:8b:e2:0b:ea:72:30:73:16:ba:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:26 2026 GMT
Not After : May 21 07:24:26 2027 GMT
Subject: CN=D635CBEC476835188FAB102B7DF7639A7A8BCAD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:84:94:42:72:cf:30:7e:be:88:46:a2:7a:97:
ad:58:46:4b:76:55:37:8f:1c:e7:aa:eb:0a:cd:0a:
0c:7c:92:c3:6a:f4:8e:aa:75:c5:87:d0:a4:4c:f3:
14:f6:2f:c1:23:1f:69:3e:d3:7b:95:37:27:2b:20:
55:c2:7a:11:3b:be:1f:35:fc:e0:73:ad:81:7c:71:
41:d0:69:02:a3:8a:26:97:39:0e:aa:c3:19:86:7b:
72:87:6f:84:2c:99:3b:42:c6:f0:be:bf:e6:17:58:
ac:49:36:af:0d:40:05:7e:68:68:e0:80:57:fd:c9:
49:a1:76:7b:2c:9f:42:22:f8:f3:03:12:52:1f:aa:
c1:8c:08:1c:a2:f6:3d:5d:b4:7c:c3:ff:55:cb:9b:
07:4a:07:04:bd:ab:ee:fb:79:cf:d4:96:9d:e2:50:
0d:8a:e1:70:72:0e:25:70:f6:26:4e:eb:40:92:ab:
22:0f:e2:a4:e4:0a:c0:6c:f3:76:e6:eb:3f:c0:83:
36:52:58:bb:98:ac:89:b5:df:69:4f:4d:a2:e6:0a:
20:17:77:eb:79:69:4f:0a:c2:13:73:5a:30:5b:9c:
5e:01:f8:1d:83:66:ed:21:40:40:5e:23:a0:6f:3d:
10:5b:08:fa:ce:0d:10:83:c7:4a:c9:e6:3a:e6:00:
6a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:35:CB:EC:47:68:35:18:8F:AB:10:2B:7D:F7:63:9A:7A:8B:CA:D9
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143287.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a27d::/32
Signature Algorithm: sha256WithRSAEncryption
3c:9f:ea:58:78:5e:09:8a:b6:f1:0c:a5:fb:57:ce:f0:23:99:
8a:a1:2c:55:31:d9:b2:1a:15:d1:27:7e:27:41:48:33:c8:cd:
ac:15:91:d4:5f:8b:14:1d:8c:a5:b6:22:58:a9:11:db:3a:41:
61:bf:80:cc:cc:e3:e1:59:ef:69:76:ca:d6:ae:e7:ba:08:b0:
b8:d4:a5:8b:84:69:2e:87:b2:47:bf:67:dd:73:10:d9:ac:da:
42:a2:5a:b0:30:72:1d:f2:d3:73:45:f3:b2:54:9b:3d:53:bf:
f1:25:1c:b9:ca:c1:96:24:c8:5a:6f:ab:80:b7:6b:e5:32:4d:
1e:f4:49:a4:06:99:07:86:3d:fe:4c:e0:82:c8:37:e2:d3:26:
61:48:12:36:21:cf:ea:82:5d:af:3d:26:f8:49:21:7c:95:76:
96:1f:33:90:b6:74:b5:2f:00:6c:87:1a:5f:86:1e:1f:65:cd:
ea:07:c3:08:5c:0d:eb:4e:bf:7e:b6:f0:18:ee:39:8f:15:55:
a1:c9:0b:6b:07:d7:db:73:08:ed:cf:ea:6c:a1:96:54:ae:a3:
45:d1:9c:cc:23:26:f1:ec:66:93:3d:4a:b1:4a:49:e4:48:af:
48:55:25:b2:b1:b9:60:15:0d:4b:f2:38:3e:ed:45:9f:cb:a0:
1e:3d:2b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:05 2026 by rpki-client