Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143350.roa
File: AS143350.roa (raw, json)
Hash identifier: bdAwe8wEpW/1QNrrM6qnwxMGv9lBXiVQCF+60U9v9GQ=
Subject key identifier: 99:28:31:90:8A:FD:C9:95:38:B2:15:2E:D1:65:2C:17:41:6C:37:F4
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 091C4B8B28F7F11BA21C40B4562B949CF02B3B9F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143350.roa
Signing time: Fri 22 May 2026 01:50:30 +0000
ROA not before: Fri 22 May 2026 01:45:30 +0000
ROA not after: Fri 21 May 2027 01:50:30 +0000
asID: 143350
IP address blocks: 240a:a2bc::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:1c:4b:8b:28:f7:f1:1b:a2:1c:40:b4:56:2b:94:9c:f0:2b:3b:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:30 2026 GMT
Not After : May 21 01:50:30 2027 GMT
Subject: CN=992831908AFDC99538B2152ED1652C17416C37F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ca:06:c2:71:27:72:a1:3a:0c:46:a4:1b:e7:
d8:4c:50:03:5c:2a:38:58:f2:75:38:68:7a:15:5b:
82:70:aa:7b:6c:6d:3c:41:1b:c2:69:73:13:8c:2f:
1f:98:5f:b2:60:b7:24:d0:b1:cc:d4:9d:d0:1e:86:
a8:2b:9b:99:ad:fc:70:08:de:14:2d:3c:88:0c:8c:
ef:eb:e3:4d:bd:ab:2a:9d:13:8e:a7:87:fe:0c:04:
a0:9a:90:d5:6d:4d:59:98:8f:c4:dc:b5:85:54:9e:
9c:56:45:4b:c1:11:52:91:b3:94:97:5d:1e:33:da:
d5:4c:5b:18:10:07:b7:f6:68:4f:a4:ca:87:9f:a2:
ea:80:e8:3e:8d:70:15:7c:c2:b0:e6:75:f6:e3:25:
2e:0f:58:9d:72:5a:10:92:94:bb:bb:9b:c6:3f:b2:
71:c5:6c:cd:e3:74:ec:02:dc:c7:98:a4:49:bc:21:
8c:23:f8:55:90:be:9c:e2:bf:01:4d:7e:a5:ec:41:
0c:0f:4c:08:d2:50:12:4e:7f:17:1c:be:83:fd:ea:
c0:16:1d:7f:48:af:79:0b:d7:4b:5a:51:1a:7e:e9:
2d:7a:d3:40:ea:d9:13:73:70:a8:6e:4f:21:97:27:
12:3b:b1:c0:f9:af:56:cc:25:7b:7f:90:b7:5c:d4:
d3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:28:31:90:8A:FD:C9:95:38:B2:15:2E:D1:65:2C:17:41:6C:37:F4
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143350.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a2bc::/32
Signature Algorithm: sha256WithRSAEncryption
0f:b9:29:e0:e3:83:a8:4f:e6:33:a0:da:06:5d:18:71:88:6d:
f3:0e:90:a4:1e:fd:ea:e3:b8:c2:0f:bd:53:03:6e:83:89:37:
56:ae:38:95:89:fb:02:b9:01:9d:9d:66:e2:94:f6:c0:5f:23:
1d:62:3f:f8:00:f7:be:47:ba:a4:49:06:9d:c7:ff:d3:7e:19:
93:f8:0f:b5:09:e6:da:86:fa:e6:ba:c1:f5:00:af:21:d0:ef:
d3:db:42:f2:19:50:46:db:ba:b6:7e:3e:aa:65:e5:47:e1:3d:
2d:c5:0f:a6:6e:52:ce:53:93:42:a8:67:95:10:5c:1b:7b:24:
9a:34:51:e9:a5:27:20:df:1b:26:a6:76:2c:70:d2:0e:5f:17:
9e:4f:c3:dd:9d:30:f9:76:8d:91:b8:25:08:60:6b:d7:8c:12:
37:aa:f1:80:a3:8b:4e:e9:6e:70:0f:d0:99:d8:a3:f3:27:ac:
be:30:01:13:46:be:af:25:d4:26:46:3f:85:a9:7b:cc:d6:e9:
ef:cb:5b:cd:56:a9:d2:34:a5:91:40:88:94:94:24:09:e3:59:
8f:6d:46:16:cb:0e:44:56:0b:f5:3f:c6:6c:4f:1f:42:68:e7:
47:08:83:ad:ee:62:58:9e:4b:59:a0:03:79:8b:17:28:c6:1d:
12:fe:84:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:14 2026 by rpki-client