Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143325.roa
File: AS143325.roa (raw, json)
Hash identifier: jhIi5itavuiHJIESytXkjQ/xTF3meG2FsTT1uOuNWRQ=
Subject key identifier: E8:94:6C:DD:97:E4:19:0A:02:A8:9B:B1:6C:BD:F9:73:AC:D5:D4:37
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3D96CE289DC95DE17E4D2D2C933A86B2132F0C41
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143325.roa
Signing time: Fri 22 May 2026 02:47:32 +0000
ROA not before: Fri 22 May 2026 02:42:32 +0000
ROA not after: Fri 21 May 2027 02:47:32 +0000
asID: 143325
IP address blocks: 240a:a2a3::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:96:ce:28:9d:c9:5d:e1:7e:4d:2d:2c:93:3a:86:b2:13:2f:0c:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:32 2026 GMT
Not After : May 21 02:47:32 2027 GMT
Subject: CN=E8946CDD97E4190A02A89BB16CBDF973ACD5D437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bd:17:b6:e8:a9:ce:34:59:93:f1:0d:23:cf:
79:26:bb:49:e4:fd:97:8b:40:8a:36:22:83:02:94:
01:1a:c7:52:0d:76:64:05:9b:a3:02:d1:9d:5e:b8:
7a:67:19:d4:8d:0e:29:9c:85:b2:7b:f2:74:eb:5f:
b7:d3:fb:87:57:3b:8f:69:5b:d2:b5:85:cd:c0:e5:
87:4a:49:0b:33:7c:1c:b8:d4:b1:63:a7:78:98:6f:
ad:c7:59:7b:21:a7:a3:aa:ad:ba:f2:43:a4:33:4e:
5d:d1:3e:5b:ef:e2:2e:66:22:e8:5d:67:2b:c5:91:
78:1f:91:ad:ff:2b:5b:e0:85:e5:62:c7:cb:1c:e2:
cf:7b:bc:18:39:1d:23:48:e1:fc:52:92:e7:af:b7:
2f:a2:28:d5:7e:5c:cc:23:3f:39:b9:1a:79:a9:56:
d8:ad:f0:84:3d:b8:37:c6:67:a1:39:e1:de:59:dc:
5a:cf:25:6e:9e:c5:7c:e3:34:41:6b:8b:48:36:7c:
05:59:5b:6f:9c:a5:b6:98:fe:62:be:80:d3:23:3b:
39:34:84:5b:da:44:47:81:10:56:05:29:f4:ad:22:
4e:4f:69:b7:99:dd:cc:46:14:28:09:dd:d5:9f:b7:
ed:af:70:4b:fc:b1:99:d5:9c:b8:6e:89:d7:a7:a0:
17:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:94:6C:DD:97:E4:19:0A:02:A8:9B:B1:6C:BD:F9:73:AC:D5:D4:37
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143325.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a2a3::/32
Signature Algorithm: sha256WithRSAEncryption
ad:34:b0:f1:5b:3a:97:4b:30:b2:5f:3c:f7:5b:cc:12:b8:f4:
91:1d:05:53:d4:86:8c:15:8f:bc:13:66:e7:03:c4:b2:c4:4b:
99:51:d0:48:69:cc:49:cd:5b:b7:0f:2f:cc:7e:76:fa:87:13:
fa:fa:74:21:0a:3f:72:07:64:c4:0b:a4:3f:3d:f7:a6:23:f5:
97:e8:a9:bb:fd:e7:1c:81:8c:c0:a4:7d:e5:fa:71:09:ef:6c:
8a:17:e8:97:9d:c3:32:c0:0b:38:86:90:ac:b2:17:b6:5d:df:
81:a6:2b:75:81:d3:5d:ea:d5:b5:61:ca:4f:ad:af:22:5d:70:
54:47:cc:27:aa:e4:f9:a9:64:d7:1f:c7:f3:38:fe:b1:35:83:
d5:96:da:1e:5b:9d:58:12:9d:d3:3e:de:1b:a5:6d:e8:de:93:
07:51:65:40:2f:9b:37:af:66:59:ad:11:d1:c5:08:8c:5a:1d:
ba:f9:cc:3a:f1:97:4d:7b:77:ae:7e:01:0f:53:3f:b4:f3:51:
b9:5e:0f:eb:dd:0f:c9:8e:8f:90:46:c3:f2:ce:35:66:e6:da:
f9:dd:53:cd:b5:04:4d:18:3b:03:6f:1c:4e:1e:21:8c:8e:dc:
10:1c:52:66:b6:2f:98:12:e3:f2:e0:ba:a2:f2:7b:1f:53:16:
e0:54:df:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:50:02 2026 by rpki-client