Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143327.roa
File: AS143327.roa (raw, json)
Hash identifier: mqsEv2tQYrYo7mrcn3hflXVhcT3itVr0qkhli6EQHPs=
Subject key identifier: E5:FB:D7:64:10:24:B8:6F:11:C3:25:83:C4:43:82:3E:27:BD:FB:88
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 28DFB22B5AF22F34DCD7299A39CCF17B4BA87190
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143327.roa
Signing time: Mon 25 May 2026 06:28:32 +0000
ROA not before: Mon 25 May 2026 06:23:32 +0000
ROA not after: Mon 24 May 2027 06:28:32 +0000
asID: 143327
IP address blocks: 240a:a2a5::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:df:b2:2b:5a:f2:2f:34:dc:d7:29:9a:39:cc:f1:7b:4b:a8:71:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:32 2026 GMT
Not After : May 24 06:28:32 2027 GMT
Subject: CN=E5FBD7641024B86F11C32583C443823E27BDFB88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7b:fb:a8:a4:b3:83:60:f1:b5:e0:c7:15:83:
7c:14:16:b5:07:92:94:34:46:d4:81:23:9f:5c:68:
37:92:be:78:38:4d:75:87:5e:82:9f:13:d1:88:fc:
18:db:b5:c0:94:e5:53:e2:5b:9e:72:8d:8a:44:d7:
1d:13:91:c4:63:b2:45:c3:52:6e:49:2e:11:38:aa:
3d:95:f0:de:78:17:eb:0c:6f:89:a2:d4:b8:dc:bb:
00:92:9a:4f:a5:9d:dd:7b:2a:d8:93:aa:9c:77:4d:
62:ed:ba:3c:4f:fc:23:fe:bb:5c:77:0c:94:32:9e:
79:39:9f:87:3c:13:6a:e8:28:1d:71:1b:98:25:80:
cb:a1:bd:b5:28:dd:53:81:b3:76:49:20:e1:97:82:
18:55:86:39:3a:81:1a:a6:07:e4:1b:aa:a1:15:f9:
ef:b6:d4:7c:b3:68:98:f0:43:09:f1:6d:3e:e1:76:
56:a7:4c:49:32:f7:4a:84:0f:a6:e7:c2:59:77:d8:
00:18:70:a1:a9:70:c2:cd:06:62:56:15:bc:12:b7:
19:9b:7a:8d:78:7f:2c:91:1c:56:6e:bb:26:4a:e4:
b8:5a:44:f2:9f:00:7c:70:7a:21:b7:d3:bb:24:9f:
a7:87:d4:f9:8a:d8:4e:91:e7:5f:a4:2c:f2:e1:b1:
24:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:FB:D7:64:10:24:B8:6F:11:C3:25:83:C4:43:82:3E:27:BD:FB:88
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143327.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a2a5::/32
Signature Algorithm: sha256WithRSAEncryption
1d:03:96:1b:f4:85:c6:8f:ed:d8:5a:29:f6:23:b6:47:11:fe:
c5:9f:5d:bc:8e:a3:81:b0:da:ea:b9:d7:44:c4:b8:8a:64:17:
96:b2:fe:d7:1f:a0:f7:2e:4f:97:83:7e:d4:04:d7:3b:0c:92:
52:40:a9:e5:15:d5:5e:22:b2:89:68:46:44:83:4f:ad:24:ec:
45:fb:90:79:59:aa:a1:94:18:5e:53:bd:29:51:8e:be:6a:fe:
8e:63:61:4c:43:26:dc:5f:4b:e9:59:06:13:65:b5:47:aa:4d:
a3:02:fd:d5:61:27:28:92:c5:c2:c5:91:aa:54:18:78:98:fe:
3b:87:a0:f8:63:34:b4:a9:10:e1:69:4a:47:3b:61:ee:d2:5d:
cc:11:20:e7:9f:06:6b:35:6f:82:03:25:c9:7d:69:01:8d:f9:
62:87:31:b4:49:99:cf:7a:e9:a5:bb:c7:78:a7:27:dc:a2:32:
a0:bd:32:a8:b0:42:d8:13:93:51:ad:50:ed:e5:3f:13:c4:6d:
30:39:38:3d:b8:23:81:77:6f:80:6f:02:f0:38:a7:2e:ac:63:
e8:8e:8b:7f:30:ab:fb:54:ee:77:7c:69:0f:f5:4b:2c:ae:88:
94:50:9c:cd:bf:b7:e8:75:fb:9a:87:2a:1f:00:06:65:49:4c:
b6:13:a1:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:08 2026 by rpki-client