Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143347.roa
File: AS143347.roa (raw, json)
Hash identifier: U/2EJ1tuHivBnbuCw2zpnMlO3hYgFOszoT/tuI+jQ+A=
Subject key identifier: 02:C9:19:1B:22:33:76:AF:48:3D:F7:E4:C5:C0:EB:E0:BA:C4:6D:56
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 38782D4485420A4ECD9079DFB2B9B0B8829C156A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143347.roa
Signing time: Fri 22 May 2026 06:27:32 +0000
ROA not before: Fri 22 May 2026 06:22:32 +0000
ROA not after: Fri 21 May 2027 06:27:32 +0000
asID: 143347
IP address blocks: 240a:a2b9::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:78:2d:44:85:42:0a:4e:cd:90:79:df:b2:b9:b0:b8:82:9c:15:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:22:32 2026 GMT
Not After : May 21 06:27:32 2027 GMT
Subject: CN=02C9191B223376AF483DF7E4C5C0EBE0BAC46D56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:11:80:ca:65:41:b6:56:5f:72:3b:c0:f9:a7:
0e:1d:6a:3e:42:bf:2e:75:a1:93:a4:b6:36:62:a5:
7d:d5:d8:db:65:5d:4a:b8:e4:44:68:72:c7:2d:11:
15:7a:00:4a:01:2f:74:8f:1b:13:27:e1:a1:94:07:
95:90:35:dc:a9:52:62:25:72:df:d4:63:9f:33:b9:
0d:85:06:08:3d:9c:a4:53:4d:c4:15:27:b9:06:f2:
a9:05:c3:f8:1c:d4:f3:bb:36:d1:ae:fd:07:56:1c:
1c:68:3c:db:a8:ae:19:76:10:2e:29:4d:3a:68:ba:
5a:86:e7:a3:35:79:cf:71:2d:33:e7:48:d3:6b:98:
ed:7c:e2:de:bc:d7:54:23:e0:c0:0e:be:a5:d9:a0:
24:b9:db:60:26:d8:c4:18:72:ec:04:46:ca:57:09:
e7:df:53:4e:0e:9c:e0:ac:70:6a:86:c5:32:22:a1:
47:6c:c2:9c:f5:20:a9:51:09:0f:5a:53:01:9d:65:
49:87:56:0f:d7:7f:12:4d:71:db:8c:19:73:24:18:
37:1b:b5:a9:81:31:ac:c1:54:01:22:0c:f5:ea:5d:
5a:19:fa:29:8d:14:20:c2:e2:c6:7b:a6:63:bb:55:
92:1f:61:72:48:b8:c0:c3:05:e3:15:5d:4b:2d:23:
3d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C9:19:1B:22:33:76:AF:48:3D:F7:E4:C5:C0:EB:E0:BA:C4:6D:56
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143347.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a2b9::/32
Signature Algorithm: sha256WithRSAEncryption
26:f7:50:f6:8d:a3:cf:c0:79:aa:fc:ef:a8:29:6d:89:2e:19:
fd:e5:81:89:81:84:ee:7a:72:7d:13:c0:0c:e9:fe:4b:ca:25:
95:6e:14:f4:b8:e1:c3:0f:7b:14:e3:d3:47:e8:81:25:ac:2f:
86:24:79:01:08:c0:fa:d2:c3:49:6c:57:99:df:0e:78:b4:12:
3b:a2:af:47:f8:f1:fc:2b:2e:50:f8:ac:28:7c:3e:b3:e8:0a:
8d:bf:a8:26:cd:06:3b:68:dc:50:86:22:d7:80:ad:85:92:b1:
c0:29:6a:8b:73:84:8f:10:70:42:36:70:32:01:73:2d:8a:0f:
b5:2c:e1:70:55:8b:91:cb:2b:5f:5c:e9:d4:d6:8b:d7:9e:73:
7f:a3:09:de:1a:e8:0d:db:89:e6:84:45:bf:bc:73:d1:c0:ce:
29:a1:32:ea:52:2e:e6:59:05:9f:5e:a8:43:6f:93:8f:6e:c7:
46:46:09:29:6b:20:2a:fd:13:bf:f9:86:d9:42:d2:dc:fc:09:
51:2a:aa:ef:7c:8c:5c:a8:66:13:74:2e:99:3f:9a:26:3d:b4:
f3:d4:af:d8:b5:cd:1b:7f:32:0d:9a:34:98:5c:7b:50:70:31:
f8:1e:5d:4f:93:19:9d:44:d9:00:e2:41:8a:60:2d:da:ff:4b:
4a:43:56:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:52 2026 by rpki-client