Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143322.roa
File: AS143322.roa (raw, json)
Hash identifier: ykM5el4c4n9QUJEXCAm7TB6YdkJSxswrOV2zmlwn6Cs=
Subject key identifier: 31:43:D7:32:E2:1E:DD:6C:69:E0:CB:2D:88:3A:FD:54:61:64:D7:84
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6619D3262AB13F069908127929FC5B209D3BF314
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143322.roa
Signing time: Tue 26 May 2026 03:17:19 +0000
ROA not before: Tue 26 May 2026 03:12:19 +0000
ROA not after: Tue 25 May 2027 03:17:19 +0000
asID: 143322
IP address blocks: 240a:a2a0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:19:d3:26:2a:b1:3f:06:99:08:12:79:29:fc:5b:20:9d:3b:f3:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:12:19 2026 GMT
Not After : May 25 03:17:19 2027 GMT
Subject: CN=3143D732E21EDD6C69E0CB2D883AFD546164D784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8a:d9:73:4d:0a:bc:cd:d2:fb:8e:f3:97:97:
bd:ef:74:9c:8c:84:10:e7:8b:e1:f0:a4:ad:2e:e3:
37:9c:30:85:b5:65:2d:29:3f:93:7a:0e:da:1f:60:
bc:4a:74:ba:51:13:db:a9:3f:3f:f5:97:ed:0e:fc:
6d:d9:8a:bc:d0:05:78:dc:15:fc:37:3d:d4:d8:a4:
78:b6:20:07:36:c8:2c:4b:e1:41:ba:94:0c:b3:b2:
63:27:36:2c:c8:ce:05:b7:d9:1e:08:e1:2d:23:f5:
2e:02:04:7f:aa:96:2c:63:49:15:b9:63:26:41:4f:
19:8a:8e:13:3b:53:b8:82:04:73:a6:18:ab:69:44:
1b:07:9f:6d:06:42:ec:ec:5e:95:52:6c:23:8e:dd:
9b:05:8e:7f:81:b5:9b:86:6f:1a:40:a0:1d:e5:0a:
c0:1f:6c:2b:0c:9f:15:d4:d3:56:4c:c9:90:38:b9:
bc:1d:3f:d2:af:ad:21:41:a2:9a:ab:37:36:fc:dc:
a7:c3:57:f1:36:87:4f:c4:8b:62:96:fd:78:ce:86:
33:95:76:4f:51:87:5c:35:48:d9:a9:bb:59:3e:d7:
3a:f9:77:79:da:a8:24:ab:1f:fc:51:4b:eb:6f:79:
52:db:00:b4:47:9b:a8:b5:06:d2:35:45:77:ff:b3:
ca:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:43:D7:32:E2:1E:DD:6C:69:E0:CB:2D:88:3A:FD:54:61:64:D7:84
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143322.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a2a0::/32
Signature Algorithm: sha256WithRSAEncryption
2e:37:b0:08:06:1b:73:1a:d2:f6:cc:41:7d:30:1f:9c:ec:92:
62:f0:ad:5b:a6:47:6c:ca:a3:21:08:22:7b:1b:03:f8:45:9f:
22:9d:16:7f:c3:9f:84:31:2e:1e:f8:1a:6f:44:17:a1:7b:5b:
08:28:a0:6e:14:c9:8c:a1:09:29:c1:ed:73:a7:04:22:ab:cb:
f0:87:70:e2:ca:d2:5b:0a:e1:d3:cb:44:60:08:ed:e2:a9:cb:
f0:08:50:40:29:0d:ed:4b:ba:4f:ed:13:d0:02:84:98:9a:96:
03:6e:98:3d:63:49:ee:dd:bf:91:e5:4f:d8:6e:31:19:22:54:
a4:6e:f3:16:86:e8:8c:1a:44:aa:24:22:e9:fb:63:26:a1:a6:
e0:a9:e1:51:01:62:1d:70:fa:52:80:df:44:c7:2a:be:f2:9a:
d3:aa:c0:08:d7:31:49:5e:d3:d1:87:a5:41:cc:96:82:b0:e3:
a6:5e:a9:db:4f:b5:de:4c:6f:da:4d:f2:33:96:9b:b4:5a:2a:
94:4f:89:fa:9f:7b:4d:7d:09:d3:ba:9b:c2:ff:bf:f4:7f:03:
19:f1:96:16:1b:de:91:d9:cd:a3:fd:99:fe:a7:92:b3:21:82:
4c:2e:8e:c2:ca:c4:eb:f0:b1:e2:79:65:c5:d3:b3:e0:95:4f:
de:27:63:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:21 2026 by rpki-client