Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143305.roa
File: AS143305.roa (raw, json)
Hash identifier: czRniBZJU5aJ3NDr+aPd1mrVyT0osgIRlf9FkMdFiK4=
Subject key identifier: 0D:7C:D5:3D:72:DD:96:B4:CA:DE:EC:FC:3C:F2:C7:5A:83:2F:09:1F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 33820A4504C2C015BFA982CACAB4C0EA1A32B0F5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143305.roa
Signing time: Fri 22 May 2026 02:47:44 +0000
ROA not before: Fri 22 May 2026 02:42:44 +0000
ROA not after: Fri 21 May 2027 02:47:44 +0000
asID: 143305
IP address blocks: 240a:a28f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:82:0a:45:04:c2:c0:15:bf:a9:82:ca:ca:b4:c0:ea:1a:32:b0:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:44 2026 GMT
Not After : May 21 02:47:44 2027 GMT
Subject: CN=0D7CD53D72DD96B4CADEECFC3CF2C75A832F091F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f5:80:e0:29:e0:2d:6c:53:3d:0e:7b:fd:bb:
69:2c:29:f8:42:21:9a:db:5d:57:c5:c2:28:f1:46:
76:44:9e:5f:2c:26:06:48:85:54:2d:48:54:d7:3c:
ec:79:ad:1f:17:62:5b:26:18:bf:15:de:09:7d:b2:
25:67:f6:36:51:37:e8:70:11:39:58:6e:d6:b0:1e:
6c:6b:4b:01:8f:b2:e1:40:99:72:4b:b7:59:56:a2:
e2:5a:02:58:2e:c4:f5:5b:8b:e1:85:52:50:2e:3e:
25:3e:ca:60:cb:98:e6:1b:8c:de:7e:e0:d3:75:5e:
80:9f:3a:02:75:a0:de:0d:f9:6f:74:c8:80:2f:4b:
47:8a:9e:e5:84:6c:08:87:71:16:84:3a:2b:81:f3:
ea:8e:1f:3f:ce:9e:01:b7:21:b3:8b:0f:5d:9b:55:
5d:ec:26:35:28:ff:e5:92:a1:76:45:6b:47:18:48:
c3:b1:f2:7d:53:7b:4e:67:6d:95:b8:e8:63:66:45:
dd:e8:5b:6c:09:1c:7b:20:4b:88:c4:53:23:25:a1:
33:de:0b:ca:8f:83:24:63:40:f9:5c:18:c8:35:ca:
95:97:6a:b0:fe:d9:e7:a2:d5:91:b2:cf:51:b3:8f:
9e:c1:7f:08:a9:4f:4b:dd:c4:bb:71:a6:01:69:c4:
86:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:7C:D5:3D:72:DD:96:B4:CA:DE:EC:FC:3C:F2:C7:5A:83:2F:09:1F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143305.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a28f::/32
Signature Algorithm: sha256WithRSAEncryption
0e:23:38:19:bf:b6:be:4e:a0:29:3e:ef:78:a7:5d:f9:99:dc:
1a:7e:3d:d4:58:14:58:de:95:70:d9:c6:c8:96:44:0c:4f:de:
cf:9e:38:75:09:18:68:2f:2f:cf:fe:5b:04:ee:17:09:7e:4e:
25:33:de:71:38:1c:28:69:19:7b:1c:61:a9:33:68:49:98:0d:
59:c1:71:02:2a:79:02:83:90:29:a3:0b:e4:23:e8:ce:28:75:
32:af:03:7c:b2:bd:b5:8f:e7:e6:24:12:1b:a4:96:24:5a:51:
43:6a:c8:56:6a:a0:01:eb:17:35:bd:75:75:8c:ec:8c:a3:3b:
ec:1a:60:97:9c:13:f8:e0:e5:a8:cd:88:bb:8c:7d:91:67:03:
0a:b3:7e:a8:38:3b:8e:0c:3c:ed:97:a2:d9:c8:e3:10:f3:77:
53:9b:55:4f:6d:37:61:4d:f5:8b:10:a5:3d:bd:04:83:1c:88:
ac:5d:3a:d8:44:e2:07:23:6d:ea:25:07:4a:78:8b:65:d4:6b:
b4:38:8d:01:19:6b:7b:23:14:09:0c:24:2a:33:27:e1:b5:e4:
04:a7:d6:e7:27:9e:96:be:09:23:ea:78:2f:00:70:4d:a6:fe:
fa:01:d7:07:ff:ae:6c:3a:25:1b:25:83:95:c5:b1:27:00:04:
4c:cc:c4:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:14 2026 by rpki-client