Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143363.roa
File: AS143363.roa (raw, json)
Hash identifier: 2SENeA7qAsXBx31TqBfpAyVlDYsutzrAjeNN0dYiU4c=
Subject key identifier: 16:B4:E6:02:1C:05:AE:E6:F4:16:97:3B:2B:F4:FC:8E:52:F9:BD:13
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 529BEE1C16A98C4EF62E9B2B30699709F443E9A8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143363.roa
Signing time: Mon 25 May 2026 06:48:48 +0000
ROA not before: Mon 25 May 2026 06:43:48 +0000
ROA not after: Mon 24 May 2027 06:48:48 +0000
asID: 143363
IP address blocks: 240a:a2c9::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:9b:ee:1c:16:a9:8c:4e:f6:2e:9b:2b:30:69:97:09:f4:43:e9:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:43:48 2026 GMT
Not After : May 24 06:48:48 2027 GMT
Subject: CN=16B4E6021C05AEE6F416973B2BF4FC8E52F9BD13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b4:fc:92:6a:76:34:a7:cd:a2:01:a8:51:ba:
75:5a:9c:4b:2d:22:f1:52:f6:09:c9:c1:51:d5:cc:
78:e2:fe:14:38:fc:16:e0:58:e0:44:62:15:5c:45:
4f:65:1e:fc:b3:36:20:d4:a6:82:bb:68:2f:e0:ef:
ee:5d:a0:b3:30:5f:ed:93:84:34:ac:42:bc:91:31:
de:1c:4f:9d:38:e2:bc:fa:90:ab:ad:97:bb:94:89:
f5:cb:c9:f2:44:55:35:7a:0a:fb:b4:09:fc:05:de:
d2:63:4a:88:7d:d6:56:71:01:88:88:2f:c2:97:9e:
96:94:97:01:25:e1:6a:7b:f2:60:a7:26:66:e5:3c:
fe:2e:c3:78:7e:ae:77:40:d2:09:db:72:2c:72:92:
97:a8:60:24:de:0f:98:90:e5:ae:50:aa:5b:27:57:
1d:58:3f:1a:16:46:29:59:2b:10:47:ce:eb:3e:4d:
10:46:76:3f:c6:58:1d:8a:1d:e0:c2:5f:3d:f6:10:
1f:20:6d:e4:9c:c4:a7:03:8f:13:c0:2b:42:7b:45:
65:3f:d9:f3:66:bd:dc:15:9e:b8:6d:96:fe:e6:13:
3c:6e:9f:f7:01:fb:aa:59:f9:55:37:f7:55:20:3a:
a7:9b:2f:31:95:70:16:65:da:a4:7f:d1:1d:ce:65:
14:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B4:E6:02:1C:05:AE:E6:F4:16:97:3B:2B:F4:FC:8E:52:F9:BD:13
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143363.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a2c9::/32
Signature Algorithm: sha256WithRSAEncryption
44:a1:99:69:a6:bb:28:00:44:7a:ce:ec:3c:78:46:1d:ee:4c:
9c:a1:3d:94:6d:02:95:14:83:d7:cb:5d:59:57:c0:14:80:7e:
1a:17:ca:72:74:95:33:a4:0c:d6:22:36:e5:90:2c:85:c8:14:
c4:3b:ff:15:11:09:49:5a:8b:2a:3a:e1:a8:0b:14:9b:10:11:
0a:0a:ee:f3:c4:80:48:07:7a:2d:b5:33:f2:de:58:de:db:05:
59:80:fc:03:1c:e3:8f:73:a9:fa:45:81:ad:75:d1:c5:34:b8:
f9:36:69:f6:02:b0:70:c7:1c:7c:a6:67:c2:9b:b3:d0:33:a2:
b1:8c:32:7a:dd:31:0e:e9:d0:1e:74:5e:0d:ee:08:9f:ec:6f:
fd:fe:2f:a5:34:37:46:7e:70:62:a9:42:83:c3:a1:1c:bf:0b:
6a:49:28:1b:d8:aa:1d:50:f5:0e:78:8d:4f:68:ac:a2:fe:a6:
29:8c:da:bf:5c:fa:1b:2b:e1:4f:5e:d9:e2:98:65:f0:ee:dd:
63:81:6a:6f:95:b1:07:9b:25:60:88:ee:02:64:60:6e:c0:c8:
c9:62:47:40:44:de:69:a4:5e:79:9d:47:10:ef:3d:30:06:61:
8f:af:df:b5:af:12:fa:83:bd:cd:85:a7:a2:8a:44:10:df:10:
c0:a6:58:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:32 2026 by rpki-client