Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143307.roa
File: AS143307.roa (raw, json)
Hash identifier: rpIyRhy0cpa2I2FUEzlLH3tm17Ac7qBz9g3tEhHVRec=
Subject key identifier: 48:FF:10:2C:EC:86:81:8A:24:76:23:DD:D6:3C:58:CD:13:B5:93:F3
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0BB7C40297794C77B4FE70933E91C15877016296
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143307.roa
Signing time: Mon 25 May 2026 03:19:48 +0000
ROA not before: Mon 25 May 2026 03:14:48 +0000
ROA not after: Mon 24 May 2027 03:19:48 +0000
asID: 143307
IP address blocks: 240a:a291::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:b7:c4:02:97:79:4c:77:b4:fe:70:93:3e:91:c1:58:77:01:62:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:48 2026 GMT
Not After : May 24 03:19:48 2027 GMT
Subject: CN=48FF102CEC86818A247623DDD63C58CD13B593F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:56:1e:de:94:17:d1:ac:41:b1:c0:57:51:ba:
59:76:df:7a:c3:16:1d:5b:35:30:eb:1b:86:ab:67:
f4:0b:ef:84:d0:d6:31:5c:f8:1f:81:2f:f6:6e:cb:
e0:5a:b1:35:0c:e4:ac:d0:a6:e3:b1:ec:d0:a4:68:
93:e7:f1:6c:45:ae:1a:45:fa:26:b8:e3:51:f0:a3:
c0:1a:60:ba:09:ef:b4:6b:67:8f:48:a3:24:38:2c:
9f:bb:1b:8d:12:95:d9:ee:19:6d:42:93:e9:b1:88:
5b:f9:8d:b3:c9:61:b3:17:40:27:ac:48:8e:34:25:
f8:63:12:a3:75:10:80:e8:7e:7a:56:a2:7b:ce:ca:
aa:72:55:15:fd:c1:aa:96:87:de:ef:79:d6:23:3c:
4b:21:3e:33:82:09:57:02:6e:91:e1:23:65:77:d1:
14:5a:ac:f0:9b:65:fc:36:05:cb:95:dd:e2:9a:c8:
ba:da:89:55:67:4f:6e:24:33:9d:56:43:e8:0b:c9:
93:c6:09:f7:45:dc:f6:77:95:be:6f:19:b2:c4:82:
16:66:ba:97:1b:c0:27:32:c3:7a:3e:37:e4:ae:e2:
44:9c:ec:95:46:99:10:a6:65:68:81:76:92:e5:3f:
93:55:ef:c4:b8:66:45:27:57:1b:a0:f2:cf:74:3c:
3e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:FF:10:2C:EC:86:81:8A:24:76:23:DD:D6:3C:58:CD:13:B5:93:F3
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143307.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a291::/32
Signature Algorithm: sha256WithRSAEncryption
08:3d:cc:10:d9:8d:40:20:6a:fc:7b:99:33:57:b6:79:ea:b4:
34:69:50:32:ee:2f:a9:06:11:c0:13:84:b0:70:33:25:22:35:
4e:9e:e2:15:2f:c9:60:c5:a1:64:cd:92:0b:79:51:6c:72:98:
26:b4:7d:42:0d:20:bd:7a:a3:76:22:c2:92:a9:61:31:46:d2:
9e:53:73:46:29:8b:27:71:72:fa:10:5a:4a:50:02:bb:40:db:
3e:fa:20:83:3f:0f:8b:e6:48:d1:05:7b:7a:3f:f6:12:15:c4:
9f:48:0d:81:ac:84:e1:f4:9e:75:11:86:7a:04:f1:96:92:97:
3c:bb:f4:5e:37:3b:98:2d:71:f4:6f:9a:64:d6:c2:18:dc:35:
5b:f2:37:81:03:05:fa:78:7c:4f:a9:01:bb:5c:65:64:45:0d:
ba:1a:a8:5e:48:eb:a3:54:39:b8:77:fd:ec:74:4c:de:cc:1f:
27:e2:48:e7:04:71:e5:c0:16:2e:e9:0d:4e:8c:43:90:b6:b1:
f0:8c:40:96:e9:cc:d8:a7:34:ca:8e:22:79:f8:cc:e7:87:ca:
a6:f5:a3:29:63:74:d5:71:d2:a9:aa:7a:19:ea:83:5b:1c:d6:
09:e7:c2:30:ec:97:bc:32:05:a4:cf:0b:06:49:9b:fe:f5:1e:
f1:e1:4a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:39 2026 by rpki-client