Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143370.roa
File: AS143370.roa (raw, json)
Hash identifier: S/4c9ltSLcX2dymwgRugjevVPSNYCUAj2TPjPQ7lu38=
Subject key identifier: E5:AA:34:66:16:EA:5D:9F:3A:13:74:92:21:93:91:CB:38:D2:62:0F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 03C2CBD7E2174CB278CC7468D47FC6CA2EDB1D3F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143370.roa
Signing time: Fri 22 May 2026 07:24:56 +0000
ROA not before: Fri 22 May 2026 07:19:56 +0000
ROA not after: Fri 21 May 2027 07:24:56 +0000
asID: 143370
IP address blocks: 240a:a2d0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:c2:cb:d7:e2:17:4c:b2:78:cc:74:68:d4:7f:c6:ca:2e:db:1d:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:56 2026 GMT
Not After : May 21 07:24:56 2027 GMT
Subject: CN=E5AA346616EA5D9F3A137492219391CB38D2620F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:88:1a:56:9e:84:72:c5:f1:7f:66:38:16:95:
10:fe:c6:a6:41:d0:39:5d:4a:eb:78:6d:40:b0:df:
00:58:9e:11:34:6d:cc:3e:9d:6e:37:6d:b6:f6:1e:
7d:51:89:00:f8:62:20:7e:55:da:51:84:2c:66:4e:
08:ae:3c:a3:01:a9:f5:7a:5b:92:c5:bb:64:27:d0:
ba:07:5f:e2:67:30:04:a7:08:23:0f:7a:2f:5e:c5:
26:c9:58:c3:59:29:fe:04:ce:dd:2c:11:9e:74:01:
bb:f7:45:c6:f5:f1:ba:55:bf:6c:33:0b:02:1b:3e:
2e:64:c7:c6:d1:fe:da:66:9d:bf:c4:41:b8:f0:da:
cc:01:4b:a2:d9:80:45:64:0e:57:47:34:b0:39:ae:
08:02:36:e3:43:81:0b:07:11:af:14:7c:a5:aa:f4:
11:31:63:50:ce:3e:2b:66:cf:ee:9f:13:d4:f5:2e:
f9:9d:6c:30:88:c8:42:57:d7:7d:5e:41:14:ef:fd:
8d:db:88:0f:a3:a4:6f:6e:27:5b:4b:23:05:2a:4f:
28:fe:c6:cb:d6:f0:1f:1c:d6:b4:3d:18:44:bb:b5:
87:d3:6d:0e:15:8d:92:ce:09:e1:dd:ed:0e:77:bf:
ac:8f:07:7a:cd:98:d0:2b:26:13:7b:00:72:5f:da:
aa:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:AA:34:66:16:EA:5D:9F:3A:13:74:92:21:93:91:CB:38:D2:62:0F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143370.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a2d0::/32
Signature Algorithm: sha256WithRSAEncryption
74:9a:c6:35:b1:73:1e:94:63:d5:dd:f4:72:fd:89:02:e8:c2:
76:4a:ea:e8:60:6a:c1:73:c0:a7:cd:61:e6:1f:7e:32:16:c7:
14:89:96:4e:d6:78:ae:28:9c:f8:38:50:a7:ec:ce:bf:3a:b3:
b6:c5:e1:f1:d6:b0:32:ae:d7:9c:ad:3c:e0:c4:39:44:4a:8a:
9e:54:05:9f:c9:3a:69:c5:44:e0:cc:61:91:6b:fb:e8:fe:17:
14:5b:7b:e7:1a:02:9a:19:96:75:7e:0d:7b:de:6f:a3:85:15:
80:09:7d:fc:1c:03:79:4b:52:97:45:32:e7:fe:1a:f1:6d:46:
ad:6e:f8:af:47:e5:2f:be:6f:47:f8:03:ba:88:22:97:91:1c:
b2:50:d9:83:57:4f:1a:10:60:29:d0:9f:64:e7:7d:c2:f3:32:
cc:ad:48:9c:ff:4c:71:84:e1:d2:9b:96:9d:c4:83:05:75:0d:
29:3d:ac:eb:b1:1e:79:78:85:fa:13:db:90:69:e3:64:89:ba:
b2:2c:c6:be:b9:5f:42:27:c8:dd:5b:5e:26:7f:b7:1a:78:b2:
99:39:6f:f3:69:13:91:9c:82:ac:36:bf:64:5e:ea:30:6f:dc:
17:e2:07:f8:1f:44:25:b9:f7:9e:d5:ef:bf:0f:cf:32:e4:ca:
de:d6:dd:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:50 2026 by rpki-client