Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143317.roa
File: AS143317.roa (raw, json)
Hash identifier: Jwy242UlnSrP1rVMP/Yuaa+O5b5RnsSV0UGBBQ4upt4=
Subject key identifier: A2:C9:92:08:5C:58:9B:33:C3:FF:A0:35:C8:26:F6:59:7E:7D:A5:77
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0F54CF91C90D1AD592E6B0D429671F6075B6B98E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143317.roa
Signing time: Mon 25 May 2026 03:19:43 +0000
ROA not before: Mon 25 May 2026 03:14:43 +0000
ROA not after: Mon 24 May 2027 03:19:43 +0000
asID: 143317
IP address blocks: 240a:a29b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:54:cf:91:c9:0d:1a:d5:92:e6:b0:d4:29:67:1f:60:75:b6:b9:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:43 2026 GMT
Not After : May 24 03:19:43 2027 GMT
Subject: CN=A2C992085C589B33C3FFA035C826F6597E7DA577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:01:c9:60:bf:e3:3b:07:e6:9a:91:bc:d2:c7:
04:07:45:a7:c3:fd:91:04:90:ad:a3:3b:de:8c:d2:
56:54:4b:d9:d7:af:70:0f:cd:e9:47:39:fb:2f:d0:
b1:52:db:a4:b0:ee:e8:fa:89:dc:41:11:df:d0:d0:
9f:28:82:7f:e6:ba:b3:42:bb:b1:16:6a:4e:8f:5c:
00:4b:4b:03:a3:2d:fe:63:ae:f5:f2:b0:80:af:08:
94:80:c1:dd:ef:82:ac:60:64:08:f4:c8:5d:e2:cf:
4c:5e:09:a2:4b:6f:78:53:53:77:06:15:e2:d2:99:
d9:c1:d6:54:a0:6d:c3:57:88:03:25:52:da:e2:51:
a7:c0:39:0a:02:ed:56:52:c7:d4:db:e3:f1:9d:4c:
63:42:d2:2d:d6:b7:24:91:70:45:bf:b2:44:b8:63:
60:99:63:72:06:ac:9c:be:38:a8:d0:c9:81:cc:f6:
5b:fc:7e:5e:57:5f:1b:ba:03:ff:ab:86:74:94:48:
e0:9a:b8:17:5e:dc:df:0c:ed:2a:cf:d8:ba:6e:fa:
7f:00:2d:27:f4:56:90:88:54:16:9b:f8:e4:64:ec:
03:c2:a3:ae:7a:70:0e:5b:58:9b:4c:89:7e:a9:97:
f3:c9:ac:56:62:64:0d:a5:e9:42:bb:4b:3b:d9:9c:
97:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C9:92:08:5C:58:9B:33:C3:FF:A0:35:C8:26:F6:59:7E:7D:A5:77
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143317.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a29b::/32
Signature Algorithm: sha256WithRSAEncryption
1e:4c:20:74:a6:2e:7b:fb:d6:98:a6:dd:51:64:f8:2c:37:df:
b4:fc:7a:70:61:44:0c:99:56:37:57:7d:a1:98:30:42:c9:16:
ed:81:c4:e8:19:56:94:49:f4:fd:45:84:da:3a:60:43:35:a5:
3d:57:0d:64:eb:99:e6:d8:e5:b3:fd:ce:03:a3:5b:2e:eb:13:
30:a9:0e:35:d0:84:74:d7:e0:ae:4f:7c:95:f3:ce:42:8d:01:
89:b1:28:92:7f:7d:b6:cb:13:8c:ed:16:b2:05:86:36:5f:f9:
3f:0d:0b:d0:02:44:22:e3:d9:bd:7a:2c:f6:85:6f:c2:1c:55:
05:e8:16:9f:03:f7:b5:88:07:0f:cc:3b:ab:fd:40:f4:c8:ef:
3f:48:d4:19:d7:91:fd:a1:57:37:17:75:96:9d:71:bf:b2:c4:
ae:0b:f9:7a:cb:fd:41:4b:5d:d3:d2:6e:a0:9b:03:d5:98:42:
a9:06:2b:0d:e4:d8:45:23:24:c0:60:fa:62:69:63:46:4b:83:
b4:44:61:55:bc:c1:0e:75:0c:34:38:5d:a9:65:81:22:9b:75:
d6:de:e8:21:44:e3:12:c5:bd:ea:6f:20:42:fb:81:39:fc:e6:
1a:7f:f3:66:fe:e6:d0:b1:cf:b3:95:a7:ef:aa:8c:ee:a4:10:
43:c1:47:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:59 2026 by rpki-client