Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143356.roa
File: AS143356.roa (raw, json)
Hash identifier: BhOHhcNHy0RuP64ZFoCWKe0JQdCT52EU3E6a3XdcA1I=
Subject key identifier: B0:0A:2A:A8:7A:EA:A1:9F:05:8A:38:24:B9:8E:ED:81:3D:10:AE:7D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6C9C3F4ECE53081D4009CADE434F648F095D10D4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143356.roa
Signing time: Tue 26 May 2026 06:30:50 +0000
ROA not before: Tue 26 May 2026 06:25:50 +0000
ROA not after: Tue 25 May 2027 06:30:50 +0000
asID: 143356
IP address blocks: 240a:a2c2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:9c:3f:4e:ce:53:08:1d:40:09:ca:de:43:4f:64:8f:09:5d:10:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:25:50 2026 GMT
Not After : May 25 06:30:50 2027 GMT
Subject: CN=B00A2AA87AEAA19F058A3824B98EED813D10AE7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ef:3d:3e:c5:8e:c8:98:a4:74:29:a9:ba:ce:
73:33:69:50:d3:0b:bf:d4:60:79:6a:3e:0d:db:0a:
26:ae:6d:90:97:c8:ba:fd:71:ee:87:99:47:8c:17:
31:73:04:af:bf:d8:22:b5:3e:14:d4:27:75:1d:f7:
7c:c5:dd:bf:c6:12:07:f2:77:69:71:5a:2c:49:47:
0a:23:57:e2:ba:e8:b3:f2:50:fc:c3:76:b7:1b:ea:
f7:24:b9:52:3b:05:2d:53:d4:93:ec:ae:ba:c4:1a:
45:a2:85:69:7d:e7:f3:00:7d:54:a7:14:65:2b:3f:
ba:94:e0:4a:71:3b:0f:6d:25:06:a6:7c:ad:7d:28:
b9:8a:a7:c1:5c:af:34:da:20:56:13:95:3d:82:e0:
8a:be:ff:40:ca:02:87:3a:59:6e:08:19:be:9c:3c:
3d:ca:7f:77:13:e7:6d:6c:ce:f7:6a:42:74:ce:d4:
e8:f7:5e:82:ab:1d:5a:c5:5a:15:9a:53:c1:66:2f:
dc:a3:24:63:54:bb:78:77:4e:c2:cd:91:ba:cb:24:
15:80:d9:23:46:eb:f5:9e:05:64:c1:c4:94:96:9d:
47:3d:5f:5a:2e:6a:04:32:12:f2:fe:01:70:93:16:
29:25:3c:bf:58:fe:f6:24:50:e0:0f:d4:f3:d8:c1:
fe:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:0A:2A:A8:7A:EA:A1:9F:05:8A:38:24:B9:8E:ED:81:3D:10:AE:7D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143356.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a2c2::/32
Signature Algorithm: sha256WithRSAEncryption
1a:f4:3e:8f:86:3b:3c:00:7f:f9:2c:1e:e4:8d:2f:71:a7:16:
09:c8:6b:3a:9a:46:08:8c:b3:e4:60:c3:ec:24:9a:28:14:7c:
ff:28:dc:26:1d:46:9f:6b:03:0c:3a:44:69:e1:45:1a:17:bb:
36:92:07:9e:66:9b:8c:fb:01:77:7c:e2:e2:5b:f2:57:d5:c3:
9f:34:18:0c:58:ca:80:74:58:39:77:5e:e5:25:5c:c7:66:0d:
74:16:15:61:ab:6b:ab:75:13:4b:fa:ec:ec:27:73:97:10:95:
46:6c:a9:fd:4b:c6:30:bb:a6:ce:2f:c3:ac:6c:ae:92:70:08:
56:99:ef:60:00:e2:00:9d:fa:9d:ac:69:67:48:8a:9f:fa:15:
43:71:99:1b:4d:22:b8:f2:db:0b:4f:1a:73:67:45:55:97:34:
e9:89:97:b0:ef:55:39:1b:bc:3c:72:2d:ed:45:3b:8f:cf:d6:
d0:03:29:b7:13:2e:b5:20:91:d4:ea:b6:6b:44:58:4a:84:32:
bf:82:bf:49:b0:9a:b2:98:64:6c:44:f4:cc:bf:90:b9:52:27:
8d:34:84:0e:7e:1d:82:3f:8e:44:c3:2c:c9:bc:6b:1f:67:4f:
55:1d:13:28:4f:eb:d0:9f:15:d0:cc:e1:ec:0a:11:dc:36:b9:
c3:ef:97:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:18 2026 by rpki-client