Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143371.roa
File: AS143371.roa (raw, json)
Hash identifier: N/OfDKiE1WuIal4hOgcP3Napo/svKcbLs/61XvYnxAc=
Subject key identifier: 88:B1:1B:BF:A1:29:73:E2:52:33:53:FE:11:5E:6C:F1:3E:8A:5F:07
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 76606E766C1DFC9B1CA7E9FB51E6942F0EDEE789
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143371.roa
Signing time: Fri 22 May 2026 07:08:40 +0000
ROA not before: Fri 22 May 2026 07:03:40 +0000
ROA not after: Fri 21 May 2027 07:08:40 +0000
asID: 143371
IP address blocks: 240a:a2d1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:60:6e:76:6c:1d:fc:9b:1c:a7:e9:fb:51:e6:94:2f:0e:de:e7:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:03:40 2026 GMT
Not After : May 21 07:08:40 2027 GMT
Subject: CN=88B11BBFA12973E2523353FE115E6CF13E8A5F07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:a1:0f:64:2e:90:b1:68:c4:eb:9c:d5:e1:36:
1b:48:ea:42:50:ed:7c:74:87:ea:b5:c5:b6:30:b4:
86:f5:5a:91:c1:8f:30:e9:d0:9a:b8:c7:36:8f:f6:
88:d9:77:a8:23:cc:63:e6:35:00:4e:49:6e:d9:58:
2c:18:e2:03:30:ce:b3:83:3b:65:cd:08:ad:70:f8:
33:92:11:d9:09:a2:d4:de:2b:ea:b9:6e:94:32:7f:
c3:fd:43:7d:20:22:64:a5:cc:fe:e8:bd:e9:ca:12:
64:02:0d:62:05:86:39:c7:bf:a1:6b:da:41:cf:78:
a1:79:22:ee:f8:64:44:0d:74:4d:41:2d:7b:a4:89:
52:da:6b:c6:09:0c:c7:e1:e1:20:53:06:0f:ff:fa:
7a:8d:e7:44:e8:0a:bf:96:97:4e:96:1e:bb:b4:6b:
b9:3f:e6:92:ad:91:27:8b:a3:a9:09:f6:01:c1:63:
6a:31:fb:d9:7c:c8:ca:1c:cf:c5:54:14:fd:86:99:
62:fc:85:eb:fc:a0:79:9d:c3:70:4c:6b:b2:41:0c:
84:31:59:f1:8c:90:c5:a3:03:03:8c:c2:02:9b:50:
52:0a:7e:9d:33:69:f0:c9:f4:47:c0:5c:98:fb:bf:
d0:c4:63:07:66:23:fd:dc:d9:44:76:d9:61:64:e0:
05:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B1:1B:BF:A1:29:73:E2:52:33:53:FE:11:5E:6C:F1:3E:8A:5F:07
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143371.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a2d1::/32
Signature Algorithm: sha256WithRSAEncryption
a2:12:e0:40:62:aa:3d:2d:fc:13:29:67:6f:5f:de:fb:84:ac:
7a:26:4e:9a:04:a1:eb:09:59:86:74:e6:92:72:5c:d6:ab:5d:
3c:bb:b2:e0:d0:a2:d5:56:47:14:8c:f4:60:1d:65:36:81:ee:
b7:1c:e8:36:3e:be:20:3c:07:88:52:c2:ad:9b:5a:0a:9b:4d:
8c:9f:28:8b:36:0f:49:39:ec:19:60:b5:a6:99:9b:65:c8:01:
de:42:74:dd:cb:8f:ba:27:32:d7:6c:80:78:b2:93:16:5a:20:
cc:45:4d:79:f0:48:fd:df:22:51:43:9b:68:19:aa:0f:eb:3f:
62:b4:36:7b:b6:f9:45:78:56:d9:75:d1:17:5d:91:31:7e:b1:
11:ee:52:db:e9:87:e1:d3:bf:bd:fc:04:82:d6:89:72:6f:af:
aa:c7:c3:ff:13:c9:60:f0:47:ac:85:a1:ed:08:d0:a5:83:6b:
45:59:a1:f3:02:fa:55:ae:b9:da:45:de:9c:d2:4e:ab:1c:80:
b3:82:61:52:34:73:7d:11:75:e0:e9:0f:62:00:48:fe:01:29:
b0:04:a0:01:12:e3:76:98:12:dc:87:95:cd:09:e7:77:a4:7e:
82:e5:eb:3e:ff:91:37:8d:2a:10:af:47:b0:40:36:ff:f4:64:
fb:6f:2e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:41 2026 by rpki-client