Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143353.roa
File: AS143353.roa (raw, json)
Hash identifier: UmIQKv+ckphv/baTpeIXopVyORguIOL4vmzpWorPMUM=
Subject key identifier: C5:EA:EA:27:D5:CB:41:5B:8F:77:F3:FA:A0:09:AC:6C:73:2D:A7:84
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 77D958CEA41E8F5A957E5A1F1D7C33D5A1DC859E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143353.roa
Signing time: Fri 22 May 2026 06:27:43 +0000
ROA not before: Fri 22 May 2026 06:22:43 +0000
ROA not after: Fri 21 May 2027 06:27:43 +0000
asID: 143353
IP address blocks: 240a:a2bf::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:d9:58:ce:a4:1e:8f:5a:95:7e:5a:1f:1d:7c:33:d5:a1:dc:85:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:22:43 2026 GMT
Not After : May 21 06:27:43 2027 GMT
Subject: CN=C5EAEA27D5CB415B8F77F3FAA009AC6C732DA784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5d:ed:0f:4a:0f:6d:7a:3b:ba:f8:13:58:26:
98:31:dc:7f:37:b1:e9:81:b0:69:0b:24:37:a6:6a:
c7:16:f7:dc:90:b9:4a:21:4a:75:bd:20:b2:15:67:
37:2d:5d:1d:be:07:24:c5:97:5f:82:6e:45:d7:1e:
81:49:45:7f:fc:0b:ab:c6:8d:d9:9d:0f:c0:ea:b3:
15:2d:e1:c8:14:9f:1f:02:5e:6d:6e:48:e1:be:7f:
4a:23:97:c5:a4:82:e7:b8:a2:99:36:2b:c1:09:c6:
86:ac:7b:8a:3d:10:19:04:83:72:7e:80:cb:a9:07:
e8:ab:0f:29:bf:df:d5:72:58:b3:6a:ad:fd:15:bb:
85:a9:53:8b:c7:a6:67:39:9e:a0:5c:a5:8f:8a:26:
16:6b:93:bc:37:c5:c2:0b:59:d8:98:40:71:21:b9:
af:8e:1f:cf:f2:de:bb:84:2c:07:04:f8:81:2f:4f:
f0:d7:c3:5d:4d:7b:11:c4:57:17:8b:52:9a:64:59:
33:56:d7:4f:65:be:1d:d0:a7:07:b9:45:cc:9e:84:
1c:fb:4a:c4:ff:ff:e5:7c:0e:c2:78:33:85:03:81:
66:d5:24:24:ed:b5:2a:f6:1d:2e:8f:f0:7f:0a:5b:
2c:40:96:03:31:11:cb:2e:85:b0:c0:58:2d:3b:55:
11:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:EA:EA:27:D5:CB:41:5B:8F:77:F3:FA:A0:09:AC:6C:73:2D:A7:84
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143353.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a2bf::/32
Signature Algorithm: sha256WithRSAEncryption
80:c6:6d:38:fc:15:f8:6b:e3:02:b0:21:7c:cb:21:b3:f6:ec:
e2:a7:34:eb:6f:4d:10:4b:65:d5:cf:02:f5:ca:d0:34:79:d9:
9b:eb:12:de:30:75:3f:53:95:73:25:b8:b7:8d:b1:af:ea:33:
53:b0:17:c5:e6:36:5b:0b:74:ea:23:43:dc:c8:d1:88:2b:67:
42:c2:59:3b:1b:52:72:65:3b:46:6c:15:ba:1b:68:c9:d6:6f:
23:de:b9:37:8f:90:41:0d:54:07:81:fd:02:11:f9:98:fc:6f:
3e:36:d5:fc:fe:e5:67:70:cb:96:34:43:6b:73:18:e9:23:91:
71:61:ca:10:ae:93:ce:14:77:59:30:53:70:30:01:43:3f:1a:
2d:8c:8e:9e:c7:98:b7:12:2b:a2:61:22:92:6f:36:8a:6b:b8:
d7:4f:b3:50:f4:4c:63:54:79:29:d8:75:87:c5:8e:5b:c4:ea:
78:db:84:1c:b0:28:63:ba:96:20:c5:e4:cb:d7:80:c0:0d:1a:
4b:47:3c:c9:ce:48:01:3b:65:b7:48:aa:57:e7:ef:48:bd:29:
51:89:6c:f2:59:01:49:7d:bd:12:8b:44:62:a5:5a:9f:03:77:
cf:56:a3:0c:0b:7d:1d:68:54:eb:1b:60:d3:3b:59:7d:83:ac:
98:b1:21:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:18 2026 by rpki-client