Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143355.roa
File: AS143355.roa (raw, json)
Hash identifier: +nLqP1gp9GaLOXAcTFufOYoseSmeGItb57QMu+phH28=
Subject key identifier: 73:02:ED:27:8D:2B:7A:38:46:15:6D:A4:01:DB:9B:17:51:D2:8D:51
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3158BC670508D7C6C22594C649B6084F084B0695
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143355.roa
Signing time: Tue 26 May 2026 01:13:20 +0000
ROA not before: Tue 26 May 2026 01:08:20 +0000
ROA not after: Tue 25 May 2027 01:13:20 +0000
asID: 143355
IP address blocks: 240a:a2c1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:58:bc:67:05:08:d7:c6:c2:25:94:c6:49:b6:08:4f:08:4b:06:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:20 2026 GMT
Not After : May 25 01:13:20 2027 GMT
Subject: CN=7302ED278D2B7A3846156DA401DB9B1751D28D51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:76:38:f4:3b:4c:49:89:d4:bb:cd:2c:63:68:
81:ee:c7:77:a6:7a:e4:b6:29:e8:65:fe:ae:12:78:
e4:fe:96:df:9d:ff:17:eb:44:73:00:9f:f1:25:72:
58:36:10:55:73:e9:27:fa:83:84:1b:0d:55:53:2d:
f8:55:dc:c5:09:e4:90:92:b5:f5:dd:89:b0:59:58:
c3:22:ee:43:95:66:ad:73:ec:b3:cb:5d:23:f3:c0:
40:5f:c0:12:1a:36:46:b0:e7:b8:ce:27:34:d5:a4:
5d:1b:88:42:16:f9:e4:1b:dc:d4:ad:d1:5d:f5:d3:
fd:db:e6:fd:8f:73:a3:26:0b:0e:36:31:a9:1b:31:
e9:2d:bd:b2:14:13:3e:9b:9c:67:42:d9:5c:a8:f3:
0a:5f:16:a4:be:f1:a6:30:79:8a:e1:62:c0:c3:ee:
6c:39:06:96:f1:db:f7:b5:bf:1f:58:d2:8f:45:bf:
cb:8d:1d:ea:fa:07:aa:d8:f4:c7:67:90:ca:6a:35:
ad:66:c0:7a:d7:b6:f4:d7:62:be:7a:d2:39:1d:e0:
8f:a1:64:2f:34:27:69:37:b5:db:e8:cf:8e:42:f8:
32:d1:7a:ef:c8:1e:e7:8a:11:9f:ea:35:58:f3:54:
f9:09:b7:00:d5:b6:d1:61:34:15:ab:49:d0:13:62:
dc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:02:ED:27:8D:2B:7A:38:46:15:6D:A4:01:DB:9B:17:51:D2:8D:51
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143355.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a2c1::/32
Signature Algorithm: sha256WithRSAEncryption
6b:34:a8:07:f6:47:cf:31:f3:dc:e1:7d:25:59:dc:73:c9:f8:
26:e3:20:30:3b:c6:5d:fb:67:d5:1c:ce:57:17:be:9c:b4:04:
17:8a:06:ba:c6:4a:90:c7:12:89:73:72:fd:6b:41:d0:8a:08:
66:29:c5:90:a6:99:19:6d:cb:6e:df:98:28:27:9e:4d:02:a2:
4e:fb:40:ee:6a:44:1a:1f:80:b8:43:fc:f5:d0:b9:b4:a5:2e:
6b:1b:d5:4e:c8:f3:97:26:c8:84:63:8d:63:60:35:0a:1e:d7:
50:55:1a:f8:cf:c5:50:9d:4e:d8:7c:dc:77:83:be:8c:ca:f5:
13:84:2c:56:9a:6a:24:03:e4:a5:92:ea:9e:2b:e9:3f:3c:61:
63:5d:a8:67:8d:80:35:0f:c2:8c:74:0c:f0:1d:9f:00:e6:23:
af:00:b4:ae:22:0d:48:00:dc:fe:6e:ec:b9:d0:f5:21:46:f5:
ee:bc:11:11:8e:71:86:47:d3:29:89:91:3e:b2:f0:d9:cb:ee:
0f:c1:83:98:89:5e:6e:2a:d8:47:71:d6:e8:fd:66:da:a3:64:
24:5f:8e:72:fa:dc:e6:5e:69:27:b2:a8:c4:1d:59:0c:88:bc:
76:a9:f8:40:57:84:39:40:a2:46:e0:99:ce:fc:23:64:7e:cd:
61:d0:67:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:41 2026 by rpki-client