Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143288.roa
File: AS143288.roa (raw, json)
Hash identifier: rmE6N/MAIE8qb5mwNYnT2nYq9AqpySxbPptsqj8sD3I=
Subject key identifier: 34:3B:3C:D7:DC:30:49:47:41:5E:10:BA:33:95:9A:30:2B:80:29:0B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7628C403CF4FEDD8F0A51C20B48B82E0ACDD0900
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143288.roa
Signing time: Fri 22 May 2026 04:08:00 +0000
ROA not before: Fri 22 May 2026 04:03:00 +0000
ROA not after: Fri 21 May 2027 04:08:00 +0000
asID: 143288
IP address blocks: 240a:a27e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:28:c4:03:cf:4f:ed:d8:f0:a5:1c:20:b4:8b:82:e0:ac:dd:09:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:00 2026 GMT
Not After : May 21 04:08:00 2027 GMT
Subject: CN=343B3CD7DC304947415E10BA33959A302B80290B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c3:9a:2b:16:e5:5a:46:86:d1:c3:1d:7c:4e:
58:08:3a:ff:ce:2d:ad:84:a4:12:cd:e6:c5:7b:ff:
37:c6:49:1e:ec:cf:97:6a:7d:06:e2:ae:59:6f:e3:
c9:e8:c4:e0:d2:de:22:fa:00:ec:09:ea:68:76:49:
8f:02:80:d2:1f:e9:c4:29:8a:14:8c:f2:0c:69:32:
66:3d:f9:ef:dc:cf:8e:86:50:5d:b7:de:9f:ae:cd:
b5:0d:3d:0c:fc:22:34:ae:76:94:32:b1:d1:4f:23:
e5:63:bb:45:9a:90:ed:05:93:3e:0b:f3:c1:b4:d6:
a4:91:28:44:a9:62:02:c4:f8:83:b4:ac:8a:0a:e4:
3f:af:f8:57:96:c3:37:7c:ea:96:37:31:82:34:f1:
c4:91:e3:01:09:fd:4c:e6:94:f9:58:d0:a8:1c:89:
a0:4d:ac:a0:38:a0:10:22:9e:2a:99:00:89:7c:91:
6a:96:ac:a2:da:f3:f6:3d:0e:fd:86:8e:57:88:2a:
0b:a5:18:d3:c9:7d:72:13:c6:cc:59:c9:79:ed:57:
14:12:0f:7d:e2:d1:40:5d:ad:a0:ba:59:e7:ef:31:
2d:67:73:e7:35:1a:c9:57:a3:84:3a:cf:9c:57:57:
9b:b7:b5:7a:e8:48:64:b3:6e:10:e9:8e:7a:78:26:
4e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:3B:3C:D7:DC:30:49:47:41:5E:10:BA:33:95:9A:30:2B:80:29:0B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143288.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a27e::/32
Signature Algorithm: sha256WithRSAEncryption
18:e4:5d:c4:ce:75:5a:24:37:4a:96:d7:39:bd:44:3a:7f:12:
c3:ad:ed:e3:a3:e3:05:21:bc:31:f3:2a:42:78:cc:30:db:b4:
f8:41:ab:18:be:32:a1:5f:a1:45:a5:3f:85:6c:ef:27:1a:29:
3c:12:59:21:ea:6d:67:0f:7f:b5:d3:54:79:af:03:91:69:f3:
36:fd:7a:52:58:b4:42:8e:d5:28:71:58:70:d2:09:7c:79:df:
d7:6a:04:17:39:92:c4:91:57:8c:b4:53:82:93:2b:d1:48:95:
ae:60:90:45:3c:80:d2:a0:bb:52:3d:9b:d7:ec:01:79:12:13:
25:7a:c0:88:dc:67:6a:f0:ad:b1:f5:92:25:46:93:8e:49:77:
66:a5:87:60:88:63:ba:c9:a6:e6:7d:0f:3b:c3:8d:f2:82:c0:
5e:63:e9:e7:ba:62:7c:3a:73:d2:d4:0c:d9:f8:93:73:db:bc:
3f:a9:93:f7:63:99:19:50:75:f3:00:fb:3b:7d:29:01:ec:60:
99:d9:de:fa:84:0c:71:03:f6:7f:c3:a5:2d:33:8d:3b:5c:59:
0c:bf:87:31:36:ea:fc:85:fd:13:d8:6c:13:5a:00:a1:20:a2:
ed:0c:c5:7a:60:8c:c8:a3:7d:65:ef:ce:f8:74:e6:e2:6e:83:
10:19:ac:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:12 2026 by rpki-client