Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143296.roa
File: AS143296.roa (raw, json)
Hash identifier: vlwFXIixQbyD47qZOopl/O8yVfmX77aIcVdpL4pzPdE=
Subject key identifier: 2B:94:51:FB:8C:20:CC:35:2B:FC:AA:3A:30:2B:1E:F5:B6:52:82:79
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2A2F667C1E17BF3F3F361EC08B5640BB202849FF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143296.roa
Signing time: Fri 22 May 2026 07:09:16 +0000
ROA not before: Fri 22 May 2026 07:04:16 +0000
ROA not after: Fri 21 May 2027 07:09:16 +0000
asID: 143296
IP address blocks: 240a:a286::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:2f:66:7c:1e:17:bf:3f:3f:36:1e:c0:8b:56:40:bb:20:28:49:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:04:16 2026 GMT
Not After : May 21 07:09:16 2027 GMT
Subject: CN=2B9451FB8C20CC352BFCAA3A302B1EF5B6528279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5e:9f:63:14:34:d9:8a:6b:c4:99:b0:ee:16:
8a:d7:19:c9:41:11:8d:46:bc:12:a6:59:fc:e9:1c:
f5:29:b7:d9:5e:35:54:bb:3a:ec:7a:07:0b:fd:2a:
ba:ab:11:0e:b1:66:ca:e8:d1:bc:b0:cf:10:8c:e1:
8d:80:4e:f4:2f:43:6e:a7:bc:57:ad:c3:f9:54:b8:
ad:68:d0:0a:3e:55:3d:a8:5e:59:d1:f2:f3:54:ea:
1e:1e:d3:84:d5:96:4e:5f:f4:2f:02:f5:03:77:ff:
47:14:82:3f:5d:44:44:f3:b4:10:5a:13:48:0d:67:
97:b1:62:68:13:7b:c2:dd:57:7c:c7:28:03:6e:fa:
b7:2f:16:9b:46:dc:92:2e:8c:95:2b:ce:75:11:42:
bf:b0:3a:54:03:8f:61:b7:ca:38:24:4b:b3:ef:bd:
ec:03:93:c2:a3:a2:13:01:14:36:d9:5d:d5:86:ea:
33:5d:78:db:3c:4c:5d:44:59:26:22:63:d3:57:62:
f6:ad:06:c4:47:0e:91:a6:4e:70:68:8c:86:cb:1f:
d2:7f:48:7a:c2:ae:73:04:98:b0:7d:b8:28:21:33:
27:53:01:ed:df:e6:81:ee:c4:d3:16:f2:98:90:09:
c7:2c:b5:56:3a:18:d3:e8:b6:46:fd:06:1a:77:dd:
95:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:94:51:FB:8C:20:CC:35:2B:FC:AA:3A:30:2B:1E:F5:B6:52:82:79
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143296.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a286::/32
Signature Algorithm: sha256WithRSAEncryption
60:28:d6:68:c9:28:ce:57:db:45:f1:d6:72:73:a6:6f:18:d5:
b3:80:05:d1:12:63:d6:0f:9f:8c:7f:f2:44:bd:39:af:b1:4d:
45:37:56:fa:6f:e0:8a:49:69:ae:ce:3c:d9:5f:94:25:80:f7:
0c:26:8f:bd:98:53:71:fc:a9:5f:0b:9c:47:74:fd:76:b2:f1:
ec:57:21:c1:55:ed:03:02:3b:39:df:d2:87:ea:29:23:98:84:
da:4c:ca:97:80:ef:1a:1f:ec:c1:e4:7b:b7:19:4e:d0:5a:38:
d9:c0:fb:ce:2c:53:e8:bb:90:ba:fe:03:77:1b:ee:87:e6:ce:
a7:bb:70:c4:e4:26:5f:be:ee:a2:eb:34:40:61:92:8e:c3:8a:
24:85:dd:22:73:1a:87:1f:59:07:f6:a7:57:77:4d:45:1f:2b:
2b:e3:c6:f2:b3:93:e5:5f:db:57:b9:d1:98:e8:a9:6b:be:9d:
b8:fb:6d:d3:f3:51:f7:29:fa:62:d2:72:3d:24:06:5d:56:23:
b0:47:29:bb:9e:f2:8b:fa:a5:f2:52:0d:59:f5:d2:0e:58:ee:
65:a2:c3:fa:8b:39:18:35:6b:ae:14:49:a6:1f:60:9b:c2:0f:
58:ae:3c:f8:a2:77:db:b6:86:ce:28:0e:e1:92:8b:2e:2a:40:
0a:50:39:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:06 2026 by rpki-client