Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143360.roa
File: AS143360.roa (raw, json)
Hash identifier: hTN2aAoLrVR0YvXR+A77TuHjbSx6Hn1glAJCn6qhY9o=
Subject key identifier: B6:95:8B:A9:7F:4A:13:74:1E:1E:F1:F1:37:19:80:73:5D:41:D9:E0
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 080CBE63930298EB1BDACE30E4A06DA6DCBDE4FC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143360.roa
Signing time: Mon 25 May 2026 01:38:35 +0000
ROA not before: Mon 25 May 2026 01:33:35 +0000
ROA not after: Mon 24 May 2027 01:38:35 +0000
asID: 143360
IP address blocks: 240a:a2c6::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:0c:be:63:93:02:98:eb:1b:da:ce:30:e4:a0:6d:a6:dc:bd:e4:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:35 2026 GMT
Not After : May 24 01:38:35 2027 GMT
Subject: CN=B6958BA97F4A13741E1EF1F1371980735D41D9E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3a:92:9d:99:89:8b:58:18:39:18:f3:a7:59:
6f:9b:76:79:50:93:fc:ef:14:5f:4e:f5:6f:df:d2:
05:eb:a2:b4:84:bd:88:cc:de:cc:3d:09:7e:bb:43:
e7:57:dd:15:10:ad:0e:1e:30:f9:73:0b:10:b1:c9:
30:99:84:9a:f2:10:0c:d7:cf:56:f9:17:20:26:41:
a9:dd:fe:7b:ed:50:c7:26:cc:34:84:2b:6a:f5:b3:
d3:b6:12:b0:ea:f9:c0:12:80:48:50:d3:77:13:6a:
ca:80:bd:c6:99:60:01:31:24:ef:6f:7b:9d:35:6a:
5a:67:81:de:72:d0:07:97:20:b8:fa:0d:94:0f:80:
43:60:71:a8:06:95:49:5b:70:50:18:f7:5e:bb:75:
4c:10:89:76:55:97:fd:03:df:53:16:dd:80:d6:62:
fe:e9:92:73:59:bb:f1:a0:40:7c:36:fa:56:b2:74:
5b:01:81:49:b5:dd:ad:1b:dc:96:ed:00:2a:4e:9b:
3e:c4:ad:59:77:de:44:ba:e8:f3:55:e0:94:78:8c:
76:f7:28:ba:8d:0c:fc:c5:1b:7a:72:f1:e6:3c:19:
24:37:bd:1f:db:1e:d8:00:d1:57:b9:a0:36:1b:39:
9e:eb:db:16:28:7f:35:01:09:54:18:e1:0d:a8:2a:
e2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:95:8B:A9:7F:4A:13:74:1E:1E:F1:F1:37:19:80:73:5D:41:D9:E0
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143360.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a2c6::/32
Signature Algorithm: sha256WithRSAEncryption
33:9c:24:cf:38:b8:fd:74:42:1c:40:a9:b5:58:d2:2a:40:00:
6a:3e:a5:f2:cc:c7:6c:e9:92:c6:7a:ae:11:00:01:b6:25:e4:
e8:64:75:ec:29:6f:be:f0:39:6f:fb:0e:9d:8d:dc:2f:63:22:
a2:fe:0b:59:44:b5:f2:87:ac:ff:92:34:74:ba:35:0c:31:b9:
63:23:2e:5b:83:2e:ca:5e:3f:c1:59:62:38:46:79:40:2a:ea:
99:a9:d6:69:36:85:e5:b6:87:3e:3f:7c:5d:43:4d:ed:28:87:
e8:78:83:6c:2c:ed:a6:89:7b:0b:09:e8:00:24:fd:fe:46:3d:
1a:70:9a:89:7c:f3:5d:bb:19:7b:28:98:bc:c1:61:7a:8b:4f:
dc:6e:1f:71:93:63:c1:bf:39:bc:d0:f3:42:f2:5f:b1:c2:5f:
22:20:e5:63:d3:af:39:60:41:ce:e9:3f:58:af:e9:ea:c1:fd:
24:93:18:9d:4c:66:0a:b8:3d:fa:4c:b2:c0:0d:cc:98:ee:a5:
89:c6:84:8b:57:b1:22:37:52:8b:2b:e9:6c:92:09:6e:44:00:
d1:0d:60:34:80:4a:c8:db:89:02:e9:85:75:c4:35:94:ce:de:
b8:54:db:bb:1c:ae:73:28:ca:a4:a6:19:cc:b5:5a:49:4d:cf:
38:10:c1:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:49 2026 by rpki-client