Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143346.roa
File: AS143346.roa (raw, json)
Hash identifier: o50jhJ5RCZTfGTB2BLB5AOEssPibhwavjnGURp2+yiI=
Subject key identifier: CC:AA:B8:AC:75:8D:55:2E:A3:F9:14:B1:04:4A:82:C0:4D:76:90:C4
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0707A2C4CFA4BEEC23B27F12428B270AEAAFBB91
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143346.roa
Signing time: Mon 25 May 2026 01:51:24 +0000
ROA not before: Mon 25 May 2026 01:46:24 +0000
ROA not after: Mon 24 May 2027 01:51:24 +0000
asID: 143346
IP address blocks: 240a:a2b8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:07:a2:c4:cf:a4:be:ec:23:b2:7f:12:42:8b:27:0a:ea:af:bb:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:24 2026 GMT
Not After : May 24 01:51:24 2027 GMT
Subject: CN=CCAAB8AC758D552EA3F914B1044A82C04D7690C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7b:db:d8:11:22:cd:54:4c:af:99:66:65:d2:
b8:7d:b0:a8:f1:36:4a:b9:57:9d:d4:de:0a:ae:a4:
20:7d:2a:78:8c:e9:bd:21:08:03:3e:81:72:47:61:
65:99:ea:24:e3:97:39:d6:dc:87:3e:1d:27:eb:d4:
c5:c5:f6:04:f5:9a:9f:ad:48:72:5a:e1:0d:5b:db:
f8:d8:21:37:e4:34:8b:b5:3b:45:f0:7a:37:02:c7:
74:4e:ee:2f:bb:8d:52:2b:cf:c1:6f:db:47:6d:2a:
ac:6d:8e:55:14:f5:e8:ef:dc:14:6e:fe:20:1e:a4:
81:bb:5a:3b:8a:c2:c3:9e:2e:57:bf:4b:ab:07:19:
fb:5b:40:04:56:f1:51:c2:50:70:5b:b7:43:35:72:
d6:9b:de:58:c3:23:33:b5:8a:96:76:41:b1:1b:44:
b6:5a:14:fc:6d:25:81:b4:94:26:2b:e4:f8:29:57:
a2:a3:cb:9d:96:72:e6:66:70:60:9b:55:44:df:68:
c6:dc:a0:45:4a:92:73:5d:48:98:10:b4:b1:27:61:
ef:2e:42:57:9b:da:d2:bd:0a:0c:f9:db:34:af:b6:
e3:2c:75:04:27:df:9d:ef:06:21:ea:5a:30:cf:c3:
8d:e3:ef:e4:37:b8:83:3d:56:9a:7e:5c:fe:7c:38:
7b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:AA:B8:AC:75:8D:55:2E:A3:F9:14:B1:04:4A:82:C0:4D:76:90:C4
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143346.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a2b8::/32
Signature Algorithm: sha256WithRSAEncryption
3d:27:04:fd:81:5b:43:8d:b5:c7:97:8e:6e:13:9f:51:30:67:
d2:5f:22:df:3b:79:8f:55:94:41:75:cc:d1:ed:49:fc:98:90:
10:5f:50:f6:75:b0:13:26:90:11:b5:5d:4f:80:38:fe:58:79:
fd:bd:8e:8e:b8:6f:5b:27:4e:1d:44:49:13:00:22:20:3d:26:
65:3a:1b:0c:61:ac:69:fd:d3:67:df:25:3d:1c:26:b5:09:ee:
e9:45:42:4e:4e:af:3c:66:28:96:7c:e8:b3:4c:5e:31:2d:97:
84:00:66:26:7e:f4:b5:5a:27:76:f4:3a:4a:cc:3b:42:76:3c:
3f:49:3b:ae:6d:5e:bd:ba:42:fb:70:80:24:4a:e3:8e:c5:d1:
fc:ae:e4:7d:15:d2:9c:b0:e1:41:43:ee:ff:e1:0d:7b:38:4e:
38:9f:0c:e5:80:69:e1:34:be:19:60:af:f3:ea:94:41:16:1a:
84:5f:df:df:85:f1:0b:43:97:6c:12:48:e4:a0:8b:35:12:b8:
e7:a1:b2:4b:a5:cb:4f:ff:d3:a4:9b:d3:d4:04:a3:58:7c:ce:
0c:44:3a:17:2e:9f:d7:d7:e8:b3:75:f6:10:0a:bd:4e:e0:be:
f5:eb:b0:d3:61:41:4f:95:7a:e1:29:8d:65:de:4e:85:7a:e6:
e5:e2:d0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:33 2026 by rpki-client