Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143299.roa
File: AS143299.roa (raw, json)
Hash identifier: z29DWg0xKLqdlWpqtXx+ae7MkHgmV9P+uPu56c4KCSc=
Subject key identifier: 1B:18:10:ED:91:07:5D:52:8D:42:53:63:A3:10:B5:54:5A:37:FE:21
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4ACCCAC4B2275E6AC67F824A59395A12CA198EFE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143299.roa
Signing time: Mon 25 May 2026 02:22:41 +0000
ROA not before: Mon 25 May 2026 02:17:41 +0000
ROA not after: Mon 24 May 2027 02:22:41 +0000
asID: 143299
IP address blocks: 240a:a289::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:cc:ca:c4:b2:27:5e:6a:c6:7f:82:4a:59:39:5a:12:ca:19:8e:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:41 2026 GMT
Not After : May 24 02:22:41 2027 GMT
Subject: CN=1B1810ED91075D528D425363A310B5545A37FE21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:61:d6:9b:0b:6d:e0:aa:44:ae:2a:83:df:fb:
83:cb:55:53:ec:b3:91:f0:6b:99:61:60:85:19:ee:
41:e9:52:f6:70:a7:5e:53:46:73:2e:87:c5:7f:b0:
eb:0a:19:d2:4a:86:29:a3:35:e3:74:9c:a9:5f:f2:
c9:74:e3:7b:43:51:32:7d:3c:3a:72:cf:4c:e1:b4:
c8:f1:d2:0e:d2:ea:86:ff:a8:3b:94:af:e7:32:6e:
49:40:c8:e6:19:36:1b:fe:d3:98:93:a7:46:96:80:
a7:8b:ba:b4:f9:25:20:39:d1:19:d5:16:97:59:11:
3d:3f:0d:b6:87:3a:2d:a2:c8:02:a5:2d:4e:0f:33:
d8:b7:11:f6:1d:5a:8d:a5:65:b6:6a:2e:ca:60:a9:
7c:c3:90:50:19:31:1a:05:47:48:c8:b5:00:d3:f4:
78:e9:02:19:1c:b6:0b:11:0a:47:c2:8c:20:50:7e:
78:a2:db:d4:47:19:60:73:64:fa:31:3b:d9:7a:51:
68:6a:35:9f:a2:b3:f9:cc:2a:a2:63:23:15:6e:34:
ce:af:2a:02:9b:85:92:c0:0e:ad:e7:40:82:4d:50:
a4:7e:aa:7e:f8:39:0a:9e:cf:10:d7:03:69:b1:96:
08:94:ff:94:df:80:e4:26:dd:3f:76:a0:d0:0e:53:
22:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:18:10:ED:91:07:5D:52:8D:42:53:63:A3:10:B5:54:5A:37:FE:21
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143299.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a289::/32
Signature Algorithm: sha256WithRSAEncryption
2f:9b:d0:77:7b:cf:4e:15:09:c4:96:62:b8:2c:11:67:1f:e0:
92:94:77:a0:fa:0f:92:28:d6:48:c8:16:b1:9f:9b:75:ab:50:
86:37:2c:68:24:7c:70:73:30:68:48:e3:65:a5:a1:5f:3e:24:
57:fc:ec:3a:09:37:40:03:4e:92:66:34:26:b2:01:c8:c5:3d:
24:c5:2f:53:ff:5a:30:e1:be:cd:8e:93:99:82:c6:4d:93:18:
3f:cd:7f:ca:9d:60:d0:66:40:36:b3:93:50:6c:9c:fa:49:7a:
d1:3f:2e:bf:08:cb:c3:13:27:5e:1e:3c:5c:c1:9d:a1:1b:f9:
d9:dc:35:c3:82:85:12:e7:12:85:0d:f9:40:22:aa:f9:d7:9f:
d8:78:8a:95:ce:d6:99:e8:4e:b5:22:97:b1:d3:ab:4c:3e:68:
59:e8:3f:33:11:08:21:d6:53:97:27:48:25:07:af:f4:12:28:
6c:ae:b5:05:9c:bc:ea:5f:5a:d8:ee:83:60:24:5d:66:bf:04:
e2:fe:d1:09:f3:10:51:a6:03:6a:09:be:99:26:93:79:1b:78:
74:14:73:f3:bc:55:d4:43:a9:53:93:48:32:17:c8:0f:0d:01:
95:00:c0:93:27:af:19:2a:19:d1:f6:02:2f:e6:e8:42:97:b8:
3a:84:97:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:04 2026 by rpki-client