Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143320.roa
File: AS143320.roa (raw, json)
Hash identifier: gA3F2h6hnBWgY9WW82OlCIfxfuzG+9xA9Arlvd6srjU=
Subject key identifier: B5:D5:A8:4A:8C:C1:5A:A1:96:9B:0C:E3:01:7E:08:DD:75:85:EE:CE
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 30E6484EB65CA0772523CC502DF99C358D8A290E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143320.roa
Signing time: Fri 22 May 2026 06:46:11 +0000
ROA not before: Fri 22 May 2026 06:41:11 +0000
ROA not after: Fri 21 May 2027 06:46:11 +0000
asID: 143320
IP address blocks: 240a:a29e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:e6:48:4e:b6:5c:a0:77:25:23:cc:50:2d:f9:9c:35:8d:8a:29:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:11 2026 GMT
Not After : May 21 06:46:11 2027 GMT
Subject: CN=B5D5A84A8CC15AA1969B0CE3017E08DD7585EECE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:8b:27:87:3f:9f:fd:6b:42:d3:fe:5f:f8:f1:
58:d1:b3:cb:73:aa:24:bd:fc:ac:13:73:08:14:5e:
f9:f6:7a:9c:c9:a5:7e:6b:3c:09:07:f8:ed:a2:c0:
d0:07:04:ea:6c:ac:6d:03:f9:9a:60:9f:a6:81:a0:
02:21:7f:29:2d:5b:41:82:0d:af:d4:8e:89:8e:33:
5a:48:04:83:63:04:3e:cd:28:f1:4b:21:19:d7:49:
13:16:21:8c:ef:1b:e1:10:91:8c:1d:92:99:89:95:
37:ce:70:ba:4d:48:38:b3:25:27:9f:2b:8d:52:8f:
16:5a:7f:27:67:f6:7e:4b:9f:e8:61:8f:a9:f6:98:
32:04:c5:ca:fc:dc:6a:e3:bb:d6:80:24:7a:5d:28:
0d:bd:c0:78:1a:92:7d:38:7c:b7:b6:5b:a1:ff:0b:
46:e5:37:46:1a:96:4e:dd:36:6a:14:75:82:83:0e:
f0:ad:ee:33:bd:97:3a:71:45:15:17:63:0a:26:0c:
51:07:8c:51:bb:5b:68:47:31:6b:3a:b8:70:31:06:
d6:e9:70:38:24:6c:62:de:19:94:a2:53:86:76:47:
60:dd:2c:5f:4c:83:44:66:4c:5e:cb:b8:d4:91:b0:
86:bc:97:38:05:14:36:83:d7:12:cc:f3:61:eb:78:
72:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D5:A8:4A:8C:C1:5A:A1:96:9B:0C:E3:01:7E:08:DD:75:85:EE:CE
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143320.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a29e::/32
Signature Algorithm: sha256WithRSAEncryption
82:34:b1:2e:bb:7a:c9:3a:57:27:b1:e0:31:f5:8d:f4:47:0a:
67:2e:c1:c1:99:17:a2:3b:6d:9c:d6:94:75:a2:48:cc:c0:f5:
cc:f7:c0:e7:36:08:79:01:e7:3f:06:86:ff:28:29:76:7d:bd:
ce:26:c2:30:1b:31:65:92:a1:87:06:d0:a7:53:da:b7:e3:7f:
9d:d8:d0:f9:1c:c3:30:05:9f:2e:2d:84:51:de:cb:e8:13:2b:
be:6a:c8:b9:bb:e3:01:d0:45:d6:b3:9a:43:50:44:f9:b8:b8:
3c:a4:cd:55:81:03:dd:91:2f:f1:da:84:77:58:44:3a:c9:ba:
76:ec:32:93:fc:9d:f9:41:b7:91:a8:8f:60:b0:b0:1c:12:9c:
67:a3:2c:a7:12:cf:3b:e7:b8:a4:26:2b:ca:9c:7c:15:cd:45:
70:ff:15:2b:b9:f2:ca:14:55:5b:f6:4b:1c:cd:6e:a3:f5:a8:
61:50:e8:eb:48:34:68:a3:3a:07:ad:1b:7c:95:bf:15:02:95:
b4:49:64:14:f9:7b:bf:af:25:50:44:0e:3e:04:e9:7d:4b:bf:
42:cc:b8:38:e4:45:ef:8b:95:db:52:07:49:c7:3d:d0:10:a8:
49:35:b4:42:e2:c4:31:9e:69:8e:a1:5f:ce:16:ce:10:66:47:
be:75:d2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:07 2026 by rpki-client