Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143335.roa
File: AS143335.roa (raw, json)
Hash identifier: NiTON5WJGgfjC3Bbzj/sYSAIzvPHy862W8RdD50GJzE=
Subject key identifier: D7:06:14:52:4C:CA:F5:EC:85:C1:0D:16:DE:A9:A8:3D:8A:82:49:B2
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2EEB817085F827DE6A87753D933B2FB6CF5DCD11
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143335.roa
Signing time: Tue 26 May 2026 02:34:49 +0000
ROA not before: Tue 26 May 2026 02:29:49 +0000
ROA not after: Tue 25 May 2027 02:34:49 +0000
asID: 143335
IP address blocks: 240a:a2ad::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:eb:81:70:85:f8:27:de:6a:87:75:3d:93:3b:2f:b6:cf:5d:cd:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:29:49 2026 GMT
Not After : May 25 02:34:49 2027 GMT
Subject: CN=D70614524CCAF5EC85C10D16DEA9A83D8A8249B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8d:93:f3:a7:13:cd:d1:9b:63:e2:dd:9a:da:
da:b0:e6:51:ec:58:8a:49:38:6f:80:24:7b:37:98:
d6:00:73:54:07:2a:30:85:eb:1e:65:17:fa:ac:b4:
c9:ad:b5:08:4a:e4:86:c8:a1:9e:eb:b5:c4:98:b7:
87:70:86:35:ce:9e:57:ff:c5:ac:b1:1e:73:75:7f:
0d:52:52:16:39:39:14:9a:18:70:7d:ce:d7:55:be:
46:0a:0d:5d:a4:24:d2:28:5b:a3:8c:7e:fc:48:33:
01:33:dc:33:3e:58:5f:47:a0:47:0a:dc:a6:28:50:
fc:ba:13:40:38:3f:6c:79:37:40:e9:5f:96:9b:fa:
eb:64:1b:b6:c7:e5:f8:66:10:04:c3:de:09:2e:aa:
ec:a9:c6:40:84:ad:db:f7:e3:35:6f:aa:e9:db:37:
29:48:0e:f8:19:06:ef:0b:7e:37:6f:56:b1:22:e1:
cb:fb:29:a0:21:22:9d:e9:bf:62:3a:da:0d:e2:a8:
04:f6:3e:72:2f:cf:09:3d:c9:10:31:6a:d3:c6:cc:
a6:2b:44:21:39:b8:33:92:4d:99:b2:67:e4:c2:e5:
92:24:25:99:dd:37:99:bd:80:80:a1:c1:37:51:6a:
9c:2c:c2:42:1c:92:20:82:28:28:ee:ec:83:e1:1e:
63:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:06:14:52:4C:CA:F5:EC:85:C1:0D:16:DE:A9:A8:3D:8A:82:49:B2
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a2ad::/32
Signature Algorithm: sha256WithRSAEncryption
73:c5:52:ba:cf:be:f1:cb:b6:a5:30:04:41:1c:b9:88:d2:9a:
08:b6:df:aa:fe:f7:1f:07:f8:6c:05:a3:0d:32:3c:a3:a7:2a:
d4:1c:ca:5c:e9:83:9e:be:80:13:b3:53:4c:5e:57:dd:6b:79:
6c:64:e8:15:96:0a:4e:3e:d8:da:78:29:7c:f9:c3:b2:04:61:
16:70:a7:e6:15:db:1a:c7:40:4e:1f:90:65:e0:d9:73:40:fc:
ce:16:95:52:78:10:ed:92:b1:97:31:1d:27:02:4f:25:b2:ad:
b4:ac:0b:c9:33:11:cd:38:d6:1d:57:06:b6:9b:e5:93:70:71:
8b:da:5b:77:cf:42:10:49:d2:67:95:87:30:dd:bb:c3:99:ad:
0e:41:be:88:a3:0e:83:2b:34:f4:8e:98:cd:1b:b9:23:ac:f7:
12:8c:77:4f:15:2e:30:2b:98:99:dc:4d:5b:1e:19:d7:63:d7:
c5:8e:4a:5c:2d:be:1a:09:58:bd:ab:2f:8f:6b:3b:e7:2c:c1:
57:c6:87:cf:62:e8:a9:51:b9:8b:65:a9:5e:ae:92:a3:7f:8f:
5c:60:53:53:c6:54:2b:98:2a:c4:c2:07:f3:43:26:70:41:b2:
7c:1d:cf:b9:d6:1f:22:32:90:4c:3d:0f:70:b3:de:04:92:1d:
3c:2e:54:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:07 2026 by rpki-client