Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143301.roa
File: AS143301.roa (raw, json)
Hash identifier: ZvP2IW0W8tsyeEPr4hZ/zkirlQk+KXuY/zisv95Y0lE=
Subject key identifier: 94:C9:B3:BC:00:8B:D1:32:EB:5B:66:E6:69:8F:17:ED:B6:69:C3:9B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0A1C66368869FCC5D5A370C2F65DD3A97847E0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143301.roa
Signing time: Tue 26 May 2026 08:52:56 +0000
ROA not before: Tue 26 May 2026 08:47:56 +0000
ROA not after: Tue 25 May 2027 08:52:56 +0000
asID: 143301
IP address blocks: 240a:a28b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:1c:66:36:88:69:fc:c5:d5:a3:70:c2:f6:5d:d3:a9:78:47:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 08:47:56 2026 GMT
Not After : May 25 08:52:56 2027 GMT
Subject: CN=94C9B3BC008BD132EB5B66E6698F17EDB669C39B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c1:4b:8c:e9:d0:0d:53:1b:46:86:8b:2b:e9:
47:d0:eb:72:1a:8c:16:48:ef:32:07:40:55:4a:49:
72:e6:77:9e:77:1a:16:4e:9e:e2:45:d4:8c:c3:e6:
e8:ce:07:15:4e:40:f2:29:4e:bf:83:7c:0d:8c:cf:
60:85:2f:63:92:f3:17:f6:d8:8b:de:88:db:a1:f7:
94:31:c8:e6:4c:bd:83:d8:ae:14:a4:22:98:b3:7f:
76:83:04:a6:24:f5:3d:62:96:e0:62:27:a7:74:7e:
bc:e7:f4:75:a9:d0:95:7b:ea:d1:4f:88:aa:1b:84:
af:e8:8b:e0:27:0c:0a:0b:c0:58:e8:10:ef:d0:6b:
c9:04:49:43:21:e6:39:c7:76:5f:b0:e0:67:4b:9e:
54:25:56:c7:f6:62:dc:e3:94:10:38:0e:fd:8f:a7:
15:7d:e3:cf:2d:c6:69:01:89:93:4b:98:0c:de:75:
9c:8f:65:27:ce:a5:bd:87:3d:fe:21:87:74:86:93:
d1:70:22:76:1b:c9:92:eb:b3:cd:ca:69:fd:d8:ef:
07:4f:3a:ee:94:05:67:cf:5c:b4:88:44:04:19:47:
86:6c:48:1a:5a:52:55:e9:52:33:97:34:ba:4b:1e:
40:69:3d:53:f3:12:c9:0e:fd:57:c1:8b:8b:b1:69:
e8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C9:B3:BC:00:8B:D1:32:EB:5B:66:E6:69:8F:17:ED:B6:69:C3:9B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143301.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a28b::/32
Signature Algorithm: sha256WithRSAEncryption
54:e8:4b:01:00:95:33:f2:8a:b4:46:a6:4a:33:80:54:9f:51:
61:45:fa:d1:a2:77:33:65:56:c1:ae:b8:ad:61:34:9d:42:25:
26:b6:0e:7a:9b:38:30:b7:dd:30:e3:90:8b:a8:db:c3:e8:5e:
55:69:f6:73:98:c8:a5:43:b5:cb:15:4b:fd:3b:21:33:48:92:
27:bc:1a:6d:57:68:dd:71:32:ad:94:0c:e0:78:aa:58:37:84:
e1:42:22:4f:f6:07:9f:c4:91:01:fd:d5:a0:40:5a:96:b1:4b:
2f:9a:ed:08:19:d9:41:9b:d1:48:3a:da:6d:c4:8d:81:9c:a4:
df:2f:ab:65:b8:14:b9:65:f4:89:5f:a0:56:e3:c8:e3:93:3d:
ed:84:b6:96:ba:f9:94:80:62:9d:ff:4d:f9:6d:fe:ce:d6:cc:
24:52:04:84:15:d6:d3:89:f8:88:d7:a0:a2:40:69:d8:8c:c8:
bd:d4:4f:be:7a:c1:b9:93:c1:5a:93:46:8b:f3:8e:c3:b3:c4:
3b:c4:a4:6e:10:13:64:78:77:8c:e5:01:1e:d7:de:9b:1e:e9:
12:b7:95:d0:94:1e:f1:d3:9d:86:d4:d7:fc:9e:c0:83:17:a3:
44:78:13:6e:44:41:42:57:35:a4:cb:57:70:96:f2:ed:c2:36:
37:1b:1a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:48 2026 by rpki-client