Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143339.roa
File: AS143339.roa (raw, json)
Hash identifier: va9RVNTZRWHPU6ZUw+Rcp1qQ29RXZASl80vlzTnbtWY=
Subject key identifier: 14:A6:B5:B9:76:ED:30:20:7E:EA:A4:79:10:D5:87:1D:A2:5E:17:4F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 18AEB62472F2EC6EB933D124BEFDCB0266851D4E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143339.roa
Signing time: Fri 22 May 2026 06:05:27 +0000
ROA not before: Fri 22 May 2026 06:00:27 +0000
ROA not after: Fri 21 May 2027 06:05:27 +0000
asID: 143339
IP address blocks: 240a:a2b1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:ae:b6:24:72:f2:ec:6e:b9:33:d1:24:be:fd:cb:02:66:85:1d:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:27 2026 GMT
Not After : May 21 06:05:27 2027 GMT
Subject: CN=14A6B5B976ED30207EEAA47910D5871DA25E174F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5b:7c:ba:98:0d:f9:8e:87:82:ef:31:ca:f9:
a1:9b:79:be:3c:c2:08:e5:ef:11:29:e2:2b:25:82:
80:59:12:34:15:6a:5f:19:df:ca:a3:44:6e:52:0c:
ef:7a:e9:fb:f4:fe:3c:10:6b:66:a0:f0:9d:b6:9d:
e3:c6:48:70:f4:d2:1a:4f:10:1f:cd:1a:a3:6a:5b:
ba:cf:8b:94:a6:71:81:2a:97:9d:8d:ad:99:66:20:
19:aa:5f:13:87:5c:1d:15:4b:d0:d0:43:72:9e:a6:
e1:3d:27:5e:3b:e3:98:9c:99:45:1c:84:0d:ff:ba:
ec:ef:1c:47:65:af:e3:a6:3f:27:0d:29:85:42:31:
25:2f:33:49:77:a5:3d:e6:02:2f:a2:92:f2:ba:fd:
7b:11:a6:c1:b2:f8:04:5a:79:5b:70:4e:01:5d:04:
6a:3e:a9:a9:68:36:8f:cf:5f:08:74:39:a7:68:05:
6e:1f:9e:ea:3a:f8:81:5c:8f:38:73:81:f0:f8:64:
d2:46:2e:f5:45:36:bd:27:b1:74:55:2a:9e:1c:4f:
7d:be:cf:13:7a:77:6a:c0:c1:65:92:10:a4:70:fb:
04:2a:84:15:6b:88:70:cf:21:90:d6:3f:88:c1:7a:
73:98:ef:32:d6:ef:35:43:9a:66:17:df:3d:b1:e9:
ae:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A6:B5:B9:76:ED:30:20:7E:EA:A4:79:10:D5:87:1D:A2:5E:17:4F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a2b1::/32
Signature Algorithm: sha256WithRSAEncryption
02:b1:5e:ae:ec:d3:bb:6c:64:a3:ee:64:d3:d8:f4:9f:31:8e:
c0:77:2b:1c:58:64:c3:22:c6:68:1f:d7:7c:60:c2:e0:a5:6f:
34:6c:90:bc:f2:00:96:db:bc:b5:ed:26:8e:5c:a4:05:43:9a:
70:e1:6f:22:44:82:7c:e7:0f:41:da:93:3d:76:b7:b1:59:8b:
46:93:59:09:bf:65:9d:bd:df:2b:11:92:1f:06:15:42:ef:c2:
42:19:c6:99:37:65:c6:95:b8:38:35:e2:c1:c5:1e:d2:9d:35:
84:fa:30:5e:18:32:0c:16:f2:2e:16:87:15:bc:bf:d3:ad:d9:
71:f3:8e:96:94:61:c5:43:11:af:3e:af:27:96:ab:d2:9f:6f:
a7:2a:da:a3:1d:6a:10:56:e7:11:ce:4c:46:42:e3:df:5f:59:
18:7d:ae:9d:83:62:1a:d0:66:6a:2c:df:d6:28:bf:b0:b7:99:
6e:cb:62:02:9a:ba:43:f0:ac:6f:70:6c:65:43:09:1d:2a:5e:
8a:62:e1:50:ca:aa:a8:57:49:27:a8:e8:eb:29:26:da:70:2c:
15:05:55:cc:ba:df:82:2a:69:a7:07:06:9d:33:b0:98:bd:80:
12:dd:a9:a0:b9:e0:60:06:08:fb:85:5a:1a:23:dd:7e:d7:35:
16:df:8a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:39:03 2026 by rpki-client