Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143330.roa
File: AS143330.roa (raw, json)
Hash identifier: RhFFR1piUbOx5kPoxvJE4wnhBLkySZ6HLbKOILM02fg=
Subject key identifier: AD:88:C9:89:5E:E7:2F:97:4F:2C:67:0B:28:5F:DA:F0:C3:CE:09:CE
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 50537162C99F190551EC20E0D77DFDC8059578F0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143330.roa
Signing time: Mon 25 May 2026 01:38:32 +0000
ROA not before: Mon 25 May 2026 01:33:32 +0000
ROA not after: Mon 24 May 2027 01:38:32 +0000
asID: 143330
IP address blocks: 240a:a2a8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:53:71:62:c9:9f:19:05:51:ec:20:e0:d7:7d:fd:c8:05:95:78:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:32 2026 GMT
Not After : May 24 01:38:32 2027 GMT
Subject: CN=AD88C9895EE72F974F2C670B285FDAF0C3CE09CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:00:92:bb:cf:d6:c5:64:46:e9:cc:2b:8d:75:
4f:ae:5e:5e:08:a2:99:3e:50:0c:d5:72:23:88:32:
a5:fb:05:7e:1c:89:13:25:b2:77:cf:6b:2b:a2:27:
66:70:a1:3e:ba:92:fd:6b:bb:74:f5:8d:f6:1c:61:
69:89:0c:e7:7b:b3:90:b7:15:1f:59:b6:f5:e0:b0:
5d:2d:26:bf:b3:49:69:e1:ff:e1:8d:32:f6:5d:48:
ef:2d:42:34:0a:45:50:15:e1:3b:b5:d4:92:3b:84:
4a:c3:e6:38:2d:f9:6c:db:f5:6e:16:e4:8d:77:f6:
ae:5b:bf:c0:2e:cb:55:bf:72:71:9b:6c:ae:1c:9f:
f7:e6:78:12:4f:0a:c3:16:33:6f:7f:60:44:20:86:
68:76:44:50:dd:cb:83:48:0d:89:58:94:d4:e5:eb:
8e:c7:db:54:42:31:73:7f:7e:9f:34:a6:79:2d:39:
a4:b3:4b:c5:61:c6:e7:2c:c7:50:86:c8:36:9c:db:
f3:ca:2e:8c:ba:71:c2:d2:e4:e7:85:e2:75:16:9a:
0a:63:2e:6d:90:a6:12:68:d7:ba:ed:4c:d3:1a:3d:
76:f2:2e:1c:d5:4a:56:36:c8:e0:91:bd:1c:bc:10:
e9:1f:54:bc:94:43:2a:2c:c0:7e:14:a9:39:f7:bb:
0c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:88:C9:89:5E:E7:2F:97:4F:2C:67:0B:28:5F:DA:F0:C3:CE:09:CE
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a2a8::/32
Signature Algorithm: sha256WithRSAEncryption
ad:07:fe:02:63:60:84:59:a3:57:ee:69:5d:11:85:a5:15:e2:
8e:4a:fa:ef:05:75:93:7c:55:51:21:e9:e5:a2:c0:67:64:aa:
16:dc:62:a0:b8:0d:bd:ad:2c:f9:2a:30:98:3a:42:c7:cc:12:
26:a3:3b:8d:a8:2b:d8:f2:53:88:a8:26:ed:6f:2d:20:96:58:
b2:2e:75:37:91:cf:c2:c3:47:29:15:c0:ce:35:6f:dd:c9:d8:
4b:cc:90:ee:66:dc:26:ee:2c:38:ca:47:d5:37:c2:b5:93:7b:
63:70:4d:4f:bf:b5:dc:a1:e4:04:bb:4f:4e:ee:8e:c2:62:a5:
2f:3e:e9:51:53:e5:a5:09:6a:ac:af:c7:1e:6c:a2:ea:9b:81:
30:3a:61:b6:ed:f6:bb:37:29:e1:75:1c:1d:78:65:1b:9a:75:
c0:dd:f1:3b:55:72:27:83:3f:61:05:89:a3:44:c6:7f:b6:b2:
c3:96:9f:b3:ae:0c:24:6b:94:e9:48:37:64:65:98:42:72:15:
02:0c:25:bd:bf:d5:63:c6:ed:9b:ba:3f:a3:82:db:20:48:11:
98:0a:d2:f9:8b:8e:ed:62:fb:b3:67:66:73:e1:0e:44:8e:c5:
ba:4d:d7:a4:f8:30:0a:d2:8d:c2:32:cf:aa:97:35:5a:91:c8:
54:2a:17:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:50 2026 by rpki-client