Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143303.roa
File: AS143303.roa (raw, json)
Hash identifier: nEz+QhJaG+zvmH1aQCnx7jcHDEwtXTi7yCnShlk7jUE=
Subject key identifier: C4:07:34:A6:95:72:37:FE:69:26:BD:7B:34:85:F9:9A:D9:79:48:FD
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1714DB3F6E0F740C33D660E9F4436A285DE87F84
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143303.roa
Signing time: Fri 22 May 2026 02:47:41 +0000
ROA not before: Fri 22 May 2026 02:42:41 +0000
ROA not after: Fri 21 May 2027 02:47:41 +0000
asID: 143303
IP address blocks: 240a:a28d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:14:db:3f:6e:0f:74:0c:33:d6:60:e9:f4:43:6a:28:5d:e8:7f:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:41 2026 GMT
Not After : May 21 02:47:41 2027 GMT
Subject: CN=C40734A6957237FE6926BD7B3485F99AD97948FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2d:22:b8:e3:20:d1:84:32:5f:c0:c2:48:8a:
85:3d:6a:1c:48:2b:cc:9e:d3:5d:6d:6c:8d:7c:fe:
51:96:aa:23:41:8f:b0:a7:a1:66:cf:43:d3:ee:ab:
c6:54:08:67:8c:8a:a6:2a:1b:4c:52:ee:12:83:71:
8e:e1:ff:41:64:ef:2e:45:03:28:24:3f:d9:b6:2d:
11:49:72:9a:fb:a4:75:bb:f4:aa:d7:56:43:b6:87:
a5:ef:0a:c5:2e:32:de:28:9a:c7:cd:8f:af:89:e4:
34:07:4b:15:cc:e8:b1:99:50:01:f6:ed:53:fa:6f:
b6:5e:48:35:2d:d2:7d:dc:c2:9f:bb:f2:3b:2e:1d:
e2:d7:0a:1f:01:f1:bc:11:8c:d4:92:ff:12:2a:e9:
66:54:29:2e:bf:f7:4c:ce:9e:8f:24:be:c4:ad:0c:
5a:c8:1e:4f:64:48:3c:5e:8a:17:ac:02:b7:d9:6b:
aa:87:48:b1:d5:85:64:67:8f:7d:0a:0e:7f:c3:98:
d9:c9:25:42:7e:db:b7:39:cb:3d:7e:f9:ff:fe:06:
37:28:04:6d:b1:e3:b2:da:b3:27:b6:64:bd:df:1b:
4e:b0:a6:93:fb:a0:7a:91:f5:4d:62:df:d8:af:c1:
dd:f6:eb:26:6d:14:e6:21:68:f5:7f:d4:66:02:e6:
b2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:07:34:A6:95:72:37:FE:69:26:BD:7B:34:85:F9:9A:D9:79:48:FD
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143303.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a28d::/32
Signature Algorithm: sha256WithRSAEncryption
04:c2:92:7f:be:08:df:ff:6e:a3:32:ce:9b:fd:51:67:ec:bf:
c7:52:37:40:d8:1a:89:ba:e4:5d:2f:f6:ef:a3:26:a2:d5:bd:
fe:07:49:9f:41:88:d8:76:ea:4c:18:e4:0c:ac:a1:5f:9b:4b:
52:09:fa:0e:3c:bf:49:bb:b9:83:3f:26:81:7e:35:b0:88:df:
bf:f2:cc:8e:11:fb:cb:f8:f9:3e:ec:43:58:80:dd:9b:f1:dc:
94:a4:3c:d7:3f:63:12:4e:c6:a5:53:88:ad:14:7d:53:87:78:
4c:8c:86:8a:29:69:e5:3b:94:7a:7a:54:01:d3:5e:2e:64:2e:
b1:24:be:0e:00:c5:71:dc:23:b6:99:a4:fa:a3:5f:57:7d:d5:
69:fc:b4:44:71:9c:cf:6a:ae:36:d0:42:99:46:6b:2a:69:4e:
9e:e0:ab:78:cc:62:7b:95:55:49:b3:3e:37:a6:61:6a:4d:b6:
ad:9f:fb:39:05:6c:f7:06:52:f1:eb:d1:03:6b:e8:ff:9f:79:
c2:d4:d0:56:9a:1a:fb:8a:01:8f:fe:58:a3:43:45:03:42:01:
ee:a1:09:7e:76:be:46:29:86:46:a3:32:bc:79:59:a7:c5:5f:
34:96:62:33:07:d8:2f:29:73:2e:e8:58:a6:c0:2d:cb:91:3b:
8a:6a:dc:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:48 2026 by rpki-client