Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143300.roa
File: AS143300.roa (raw, json)
Hash identifier: WcPaBaWeXU5BsTogHB1teI4//PQzDCVmQWNCMbgcn4c=
Subject key identifier: 2F:EE:CD:E3:BA:33:48:DE:92:20:04:A6:88:9F:BC:21:8A:8B:7F:2B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 094B6051B90C1C6953ED11F7960FB7E7F2AE1201
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143300.roa
Signing time: Tue 26 May 2026 02:35:10 +0000
ROA not before: Tue 26 May 2026 02:30:10 +0000
ROA not after: Tue 25 May 2027 02:35:10 +0000
asID: 143300
IP address blocks: 240a:a28a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:4b:60:51:b9:0c:1c:69:53:ed:11:f7:96:0f:b7:e7:f2:ae:12:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:10 2026 GMT
Not After : May 25 02:35:10 2027 GMT
Subject: CN=2FEECDE3BA3348DE922004A6889FBC218A8B7F2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ce:eb:6e:38:dd:f2:ed:44:4e:18:00:d1:7c:
7e:be:9b:25:10:86:cf:a4:f6:ee:6c:b4:c4:8e:ef:
ce:75:bc:6f:05:64:b7:cc:a4:f1:fe:bf:09:3a:f4:
31:33:78:bb:06:68:08:ad:a2:aa:fd:84:05:f5:ac:
a3:93:19:52:79:79:90:ca:8a:af:59:2b:6a:12:ca:
10:de:57:89:be:fe:52:3d:5a:a6:35:75:e3:05:8a:
7b:d7:ab:0a:0f:3f:49:e8:dc:cb:70:e0:4f:0e:13:
fc:d4:6d:9d:e0:70:4e:00:a4:88:57:4e:a0:41:42:
08:f5:87:a9:fa:d2:a8:d6:b9:f4:01:f1:9c:a1:d7:
19:e0:43:73:a3:28:51:89:6c:fb:13:f9:19:86:0b:
54:62:28:dc:2d:22:e6:da:d0:0a:8c:7c:28:99:02:
ad:5b:f1:b0:7d:ff:76:43:38:eb:bb:f7:12:a7:4b:
cc:d9:df:d3:fc:69:74:56:17:4c:77:7b:68:c6:44:
ab:81:ee:38:6c:4f:2f:f3:a5:33:77:3b:a9:98:dd:
b8:f1:d2:d7:3e:99:e5:87:90:58:07:05:d7:01:40:
be:45:3f:a9:b2:ab:1f:2a:b1:ff:66:e0:5f:c1:fc:
4b:20:e9:1d:7e:97:58:16:14:50:00:a4:d6:ac:b7:
4c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:EE:CD:E3:BA:33:48:DE:92:20:04:A6:88:9F:BC:21:8A:8B:7F:2B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143300.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a28a::/32
Signature Algorithm: sha256WithRSAEncryption
8b:fa:1b:3e:05:dd:b6:28:4c:9a:ba:60:63:4c:4e:f1:9a:49:
fe:cd:4d:fc:bb:d9:55:e2:67:4a:d5:57:dd:32:d8:8d:91:22:
20:e7:26:d0:04:2d:b4:e9:00:cf:11:ae:1e:9d:cb:8a:1e:25:
23:4c:2c:28:2e:80:be:b6:8e:46:73:80:98:aa:2f:20:9b:ed:
1b:e8:9c:ed:a0:b3:81:41:0d:9d:9b:3b:89:b1:44:e3:dc:99:
e3:d0:bd:08:a2:45:7e:cc:ea:a7:81:ef:c8:b7:32:31:00:77:
09:9f:8d:97:ba:84:76:e7:b4:62:80:3b:72:02:37:5b:21:e8:
bd:f1:a2:a5:80:1b:7b:2b:f2:a8:19:a0:e4:9a:6b:9c:28:7d:
c3:f7:34:5f:7d:25:15:b9:13:7e:67:34:fc:2c:41:5a:4d:dc:
28:ee:d2:db:77:17:0e:09:17:53:c1:9c:41:72:60:62:1c:08:
00:27:66:83:fa:13:1c:71:1f:b4:8a:c8:27:f9:6f:24:3a:bf:
7d:1b:cf:f0:02:82:76:7b:c5:49:70:71:30:9f:20:72:5a:07:
d5:66:2f:53:ac:5d:bd:07:5c:63:fe:2d:f6:a1:26:8d:63:26:
d8:b2:dc:90:6c:3a:af:4f:fb:b1:7b:e8:c5:49:07:67:ca:18:
af:48:ec:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:51 2026 by rpki-client