Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143323.roa
File: AS143323.roa (raw, json)
Hash identifier: PVgHXpmK8f4WsLK1DgwMVqlLudwBHrKCalR3WsbARic=
Subject key identifier: AD:F5:6A:30:C9:D5:65:38:78:9C:99:EF:D4:BD:9D:04:FA:FD:F2:17
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7D8E1CCFCCD77E471435F9AB0BADE261249A9F3D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143323.roa
Signing time: Fri 22 May 2026 01:50:11 +0000
ROA not before: Fri 22 May 2026 01:45:11 +0000
ROA not after: Fri 21 May 2027 01:50:11 +0000
asID: 143323
IP address blocks: 240a:a2a1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:8e:1c:cf:cc:d7:7e:47:14:35:f9:ab:0b:ad:e2:61:24:9a:9f:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:11 2026 GMT
Not After : May 21 01:50:11 2027 GMT
Subject: CN=ADF56A30C9D56538789C99EFD4BD9D04FAFDF217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6f:63:c8:0c:ae:f8:95:aa:26:6b:e2:f3:a9:
ed:33:f1:3f:a9:14:6e:5c:a6:8e:1c:47:53:9b:cc:
9c:a4:0e:2a:72:c9:71:73:9c:b2:3a:e2:49:a8:f3:
0d:5a:19:bf:11:55:6c:ae:bd:4f:6a:fe:f0:14:65:
b3:23:cc:00:8a:14:0c:b0:7c:4f:53:48:3f:6d:89:
88:3c:e4:01:a3:72:08:7a:56:ae:62:8c:80:5d:42:
e6:ae:d2:75:79:26:5e:b4:05:fb:1a:b2:4d:69:d3:
45:14:db:23:41:8d:e9:db:85:28:c4:7c:95:03:0d:
b0:4a:23:e3:2f:20:d4:1f:23:2a:4b:bc:ea:0a:bc:
dc:d9:c0:de:16:74:d8:cd:79:f6:4f:d1:00:d4:eb:
14:99:8b:68:7d:9a:0c:07:7b:85:bc:f6:aa:da:b7:
96:a0:d7:85:9f:d8:f9:cf:dd:8b:7f:6c:0e:bc:ac:
94:24:69:dd:a7:8a:d8:98:69:a4:4f:05:a3:19:d4:
3d:64:94:c4:c9:a4:03:c8:c9:41:85:d9:ec:c9:79:
bc:f0:80:c2:29:cb:6a:9c:1d:9f:0a:2a:2f:06:1c:
58:c6:ea:b6:49:b9:5b:be:5d:3b:57:60:df:b0:d1:
4e:68:d4:14:cd:e8:78:cb:b3:5d:23:b1:a0:c6:43:
4d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F5:6A:30:C9:D5:65:38:78:9C:99:EF:D4:BD:9D:04:FA:FD:F2:17
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143323.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a2a1::/32
Signature Algorithm: sha256WithRSAEncryption
98:7c:99:8b:6c:8c:1c:87:44:77:ff:0f:09:c2:ac:4e:be:7f:
a2:68:e1:38:84:f6:9c:15:37:1f:11:f0:17:85:6f:bd:00:21:
b9:e4:f3:56:20:67:20:7c:7d:0f:04:5e:a3:95:71:5e:50:fb:
0c:a7:1d:41:a0:db:1e:0e:f0:68:9b:a2:12:e3:20:73:f8:31:
21:dd:4e:50:99:e5:12:0f:6a:01:29:5a:e5:d8:8c:e2:9a:ae:
0d:02:e6:7b:ae:f3:60:b4:66:cf:3f:d0:26:71:a1:30:32:bf:
2f:6a:a1:44:05:d8:b5:51:33:93:66:f3:af:f3:5a:01:82:d8:
44:46:0d:52:4d:27:31:b0:5e:8e:15:d4:97:2e:54:d9:0c:8a:
8f:b3:2c:f3:2f:51:05:4d:f6:4e:dd:a4:d3:66:0b:b4:ca:62:
cd:78:d9:f1:fe:1f:c9:37:80:85:dc:ee:f3:12:19:c9:0f:77:
1a:09:2a:8e:a6:c8:62:ac:a5:a2:f2:df:ea:65:e1:d6:c3:c9:
27:ee:a4:36:78:c3:7c:ff:7f:b1:06:07:0d:a5:09:e0:4e:d7:
9a:81:8d:29:07:34:89:fa:0c:c8:ca:79:1b:14:83:08:74:dc:
84:cc:f8:81:98:11:69:bf:75:41:0f:1f:2a:f5:2a:85:f6:39:
58:51:7b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:02 2026 by rpki-client