Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143367.roa
File: AS143367.roa (raw, json)
Hash identifier: XilF3Ev1Hq+oek90ZtpOtNSYx73PIMoKbbaTh5O36+U=
Subject key identifier: 2F:B5:76:82:2B:C4:EC:43:A5:24:D0:C0:F8:E5:5B:8E:EE:21:F5:A5
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5B164041B1853DC889EAD91A78ED7A7A1FC21F0C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143367.roa
Signing time: Mon 25 May 2026 06:28:23 +0000
ROA not before: Mon 25 May 2026 06:23:23 +0000
ROA not after: Mon 24 May 2027 06:28:23 +0000
asID: 143367
IP address blocks: 240a:a2cd::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:16:40:41:b1:85:3d:c8:89:ea:d9:1a:78:ed:7a:7a:1f:c2:1f:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:23 2026 GMT
Not After : May 24 06:28:23 2027 GMT
Subject: CN=2FB576822BC4EC43A524D0C0F8E55B8EEE21F5A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1d:79:ac:8b:e0:4c:b9:bd:01:01:a8:cc:09:
13:46:e4:d1:4f:09:7a:bf:b7:a5:79:ba:43:f4:d6:
0a:52:88:bb:a8:4c:36:75:6e:99:bc:11:9d:ca:7e:
7f:cb:12:dd:c7:8f:6f:cc:0a:5f:f1:d1:29:4e:1c:
cb:ad:90:0b:13:35:7d:94:2d:70:e2:e6:31:ef:34:
c0:c5:7f:12:0a:bb:b6:35:6c:8e:45:ed:a1:85:60:
75:c4:b1:d0:f8:20:42:f4:2c:92:ea:57:23:d4:8e:
e6:58:9a:b9:33:24:83:6b:48:58:32:cf:48:fb:7a:
b0:76:92:0c:ae:ab:5e:ae:11:35:4f:9b:bd:cd:5b:
93:3a:1e:f8:da:48:7e:7e:72:29:8c:b2:73:ef:53:
8f:8d:11:27:71:c2:38:cd:fa:77:32:27:4f:e1:87:
dc:40:9b:b1:83:81:e2:ec:47:71:01:05:36:4b:f8:
4c:7a:eb:ef:72:d2:7c:b4:d6:8d:9c:51:07:5d:b8:
b0:c0:97:7a:22:34:79:16:b7:a3:08:04:de:7f:17:
99:3a:cc:3f:0e:10:fc:6d:63:a9:2d:26:cd:c6:22:
56:2f:7e:6c:6f:03:53:d3:70:ac:a9:4f:31:3d:72:
c2:4c:16:1d:2a:f7:0f:e7:86:b0:e0:48:54:8f:7a:
e4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B5:76:82:2B:C4:EC:43:A5:24:D0:C0:F8:E5:5B:8E:EE:21:F5:A5
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143367.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a2cd::/32
Signature Algorithm: sha256WithRSAEncryption
00:d8:6a:91:5a:5b:9c:1d:51:6a:19:be:a9:4e:0b:24:3a:eb:
85:d3:84:20:3b:1f:8d:54:a7:79:33:30:47:28:1b:a1:3b:9a:
27:ce:52:4a:9b:1f:d6:b7:a5:bf:81:15:95:12:a8:7a:d6:f9:
ca:61:ca:38:8d:0a:cd:63:e0:22:f8:57:f2:b9:41:a4:4e:c8:
bc:54:dc:4b:f8:26:90:b4:b0:86:14:00:3e:91:12:9a:61:2a:
9b:ad:d1:0e:2a:8d:bd:e1:6b:c9:71:b0:d4:80:df:af:5f:e3:
b3:7e:d7:3b:2e:f9:df:b9:0a:db:f7:ee:2c:3c:5b:d7:a2:94:
82:fa:78:63:17:de:47:aa:6b:b5:87:44:c8:d1:49:15:2d:45:
60:f5:32:e7:87:28:7b:f7:f3:f9:b9:19:a1:fe:c0:5a:e7:c2:
15:3b:41:a8:0b:ba:23:25:c1:4e:c8:06:a1:2a:c5:60:b2:73:
29:0e:2c:7a:b7:b3:90:78:83:4c:90:62:b9:8e:e7:b4:d5:9f:
b9:0d:cb:48:37:3b:a3:a4:82:a6:d2:ac:d6:31:0f:06:f8:ab:
f0:c2:5a:1c:27:7e:24:ae:a7:1e:db:2f:c0:e8:13:56:26:bd:
16:ee:89:96:3d:43:1c:ba:e0:d3:1b:bf:e7:ce:6e:42:50:1c:
6c:02:c3:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:42 2026 by rpki-client