Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143366.roa
File: AS143366.roa (raw, json)
Hash identifier: 6+eVv8RUqHXzfOSMloM6/CNaE2QmZVzaf0BMykLzmvc=
Subject key identifier: A4:E7:F5:F4:0C:C2:DC:DE:B6:D4:C0:0C:8E:75:FF:3B:40:31:67:71
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 71F45194B2F466042CE310295603902A0622CFB6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143366.roa
Signing time: Tue 26 May 2026 02:35:13 +0000
ROA not before: Tue 26 May 2026 02:30:13 +0000
ROA not after: Tue 25 May 2027 02:35:13 +0000
asID: 143366
IP address blocks: 240a:a2cc::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:f4:51:94:b2:f4:66:04:2c:e3:10:29:56:03:90:2a:06:22:cf:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:13 2026 GMT
Not After : May 25 02:35:13 2027 GMT
Subject: CN=A4E7F5F40CC2DCDEB6D4C00C8E75FF3B40316771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:00:3f:d8:18:4d:a8:37:8b:82:4c:1f:42:1e:
4d:be:36:e4:05:4e:33:9a:f8:6e:87:f8:f1:47:8b:
8e:fa:a9:cc:a1:28:81:29:af:57:18:fe:42:32:a6:
2a:dd:97:5a:60:1d:78:d2:13:c5:49:09:02:16:f7:
2d:17:60:98:11:49:3a:8a:b5:02:86:d9:8b:50:39:
4d:03:02:91:f9:10:6a:69:b7:94:db:9f:1b:c2:db:
02:02:d5:59:e5:8e:25:03:30:ac:27:77:f5:d0:fd:
d0:18:12:f7:74:ab:50:d2:47:cb:69:db:64:96:e7:
13:5a:f6:65:a0:b3:f0:76:60:c1:ad:b1:7f:a2:66:
08:eb:44:e7:5d:ef:17:d2:52:77:0b:79:87:b0:b5:
9e:a2:93:9f:a9:21:ad:8e:af:20:67:43:69:40:00:
70:2a:0d:11:e6:9f:c9:d7:41:84:69:26:b0:e0:d6:
ca:23:6c:b0:10:f4:58:fc:fe:7a:10:df:3e:61:9b:
5f:a3:c8:8b:b9:6e:0b:a7:c8:af:23:70:98:81:17:
00:dc:0d:4e:21:99:8b:be:1a:e7:2c:1b:b5:13:3b:
1f:7d:06:0e:cf:c5:a7:68:a1:15:4b:a1:96:4a:c2:
78:fa:5f:47:33:45:8d:b9:e3:ef:71:05:c5:25:88:
ef:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E7:F5:F4:0C:C2:DC:DE:B6:D4:C0:0C:8E:75:FF:3B:40:31:67:71
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143366.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a2cc::/32
Signature Algorithm: sha256WithRSAEncryption
08:ac:2d:37:0d:5e:8f:93:cd:5d:35:57:3a:e8:15:92:1b:dd:
dc:42:06:74:85:b7:bb:96:16:39:24:74:0c:b4:32:be:d2:cd:
08:5d:96:63:77:07:f8:27:c5:62:1a:3d:5f:2f:db:45:de:63:
2d:1a:26:ed:b2:4b:0a:72:76:42:7e:5d:a6:0e:b0:ce:e8:f1:
15:96:01:ee:d6:77:bb:fc:27:2f:37:a7:3a:69:6f:59:06:71:
02:21:44:6c:46:9e:8f:89:2e:73:c5:22:fe:82:c0:23:87:5a:
ad:32:06:db:0f:76:dd:d8:ad:4a:37:11:b7:70:5a:85:b1:7c:
70:b9:10:e4:d5:d8:aa:e3:f4:bd:5d:a0:2f:2b:ad:2a:5a:32:
ae:e2:d0:79:f3:bb:ac:15:b4:2f:cb:b2:f1:19:d2:db:36:0d:
72:e7:9f:86:f6:fc:b3:3a:99:78:8e:26:93:78:d4:af:8a:06:
33:83:0c:08:65:2f:a9:7c:47:37:fc:46:c5:65:10:66:6c:82:
fe:d2:c8:11:8e:04:58:6c:98:fe:10:d3:8b:13:7a:04:0c:75:
47:9b:16:5d:ae:d7:7e:97:a7:b5:9a:1a:e3:ad:f2:14:b4:85:
2b:ff:af:e7:e3:59:4f:7a:e1:46:49:d2:aa:a1:41:81:01:6f:
c1:ea:f1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:54 2026 by rpki-client