Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143376.roa
File: AS143376.roa (raw, json)
Hash identifier: VEiyh0YRnhgDdVqUErEIxippriCBg4NqGKv9N15RD9k=
Subject key identifier: 38:2D:43:E7:7C:A4:27:82:E7:06:65:12:B6:85:34:24:05:2B:28:EB
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 393DCBD1449E30DD053F2C5A1C4B49CA789B4798
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143376.roa
Signing time: Mon 25 May 2026 01:51:18 +0000
ROA not before: Mon 25 May 2026 01:46:18 +0000
ROA not after: Mon 24 May 2027 01:51:18 +0000
asID: 143376
IP address blocks: 240a:a2d6::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:3d:cb:d1:44:9e:30:dd:05:3f:2c:5a:1c:4b:49:ca:78:9b:47:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:18 2026 GMT
Not After : May 24 01:51:18 2027 GMT
Subject: CN=382D43E77CA42782E7066512B6853424052B28EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e6:97:ad:10:a3:06:9f:0d:57:31:5d:38:b7:
de:c8:2f:61:b6:7d:f0:80:8a:05:fd:89:72:44:a2:
82:7a:33:9b:16:5c:c8:09:14:e0:cc:32:1e:fd:46:
64:02:81:b7:41:88:2d:76:51:ff:7b:5f:bd:af:8b:
37:38:d0:af:18:34:3a:3f:24:53:7a:63:95:ab:8a:
e3:5f:48:22:c4:04:07:59:51:0b:e3:2c:05:57:ab:
9d:23:5d:be:dd:6f:71:22:b4:f7:8a:ad:a7:41:ca:
c1:ad:f6:e0:00:7f:eb:87:0c:6c:ab:ad:d6:28:8e:
9d:f6:2e:ba:e4:66:5f:a8:bd:c3:1f:95:ca:8a:6d:
6c:63:e4:5b:e3:22:23:9d:ea:ae:5d:23:bc:24:50:
76:8c:df:37:be:07:2b:dd:47:5a:82:6f:4e:41:e4:
fb:06:d8:33:5f:be:eb:18:a5:ad:e8:b2:8b:b7:4c:
00:c1:09:1f:b0:e6:de:09:5d:82:0a:52:5a:c3:45:
13:24:4b:2a:3b:0b:50:3a:82:b9:89:0e:81:8a:b8:
85:d6:81:1e:8b:9f:32:b4:31:6a:e9:4a:fc:76:3d:
9a:37:85:2f:c5:9f:d4:84:b3:01:63:67:80:6b:b1:
4c:7f:d9:19:e2:b0:a5:21:ab:18:d3:e3:fc:27:b3:
29:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:2D:43:E7:7C:A4:27:82:E7:06:65:12:B6:85:34:24:05:2B:28:EB
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143376.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a2d6::/32
Signature Algorithm: sha256WithRSAEncryption
5b:f5:b4:8b:60:7e:f8:27:42:63:18:d4:2a:66:1e:41:1a:2f:
74:77:03:bf:cb:ff:3b:96:50:3e:a0:68:b9:76:c5:c5:04:63:
0d:b2:6b:3c:ee:b0:b4:01:7c:79:e6:3f:3d:f8:56:ee:43:33:
b8:70:6f:2e:2e:fd:af:1d:2e:1f:d9:10:89:56:a7:bb:11:5a:
cb:00:2b:fe:a7:46:e0:4f:b0:e3:51:95:a2:2c:65:ad:b9:5a:
54:96:a9:0d:2b:45:b8:68:3e:79:7e:d5:1e:9d:5a:a3:ba:b9:
94:42:dc:23:64:5c:08:fa:e5:3e:83:2f:b2:36:e9:7f:43:07:
f3:ef:49:2a:84:a8:f9:b3:1a:02:ad:f9:9c:32:0d:29:30:07:
09:63:a0:0e:2c:70:60:25:8d:c5:30:d4:05:02:8d:a3:e6:d9:
4a:b1:ae:19:c9:29:79:9a:5d:02:8d:b3:7a:3a:83:d2:40:09:
83:ed:f9:19:e2:cb:13:49:a2:ae:39:3b:77:22:d6:f9:7f:f8:
72:3a:8b:ea:7a:7c:5d:12:39:12:83:cc:b6:92:c2:d3:3f:cb:
9c:dd:50:f3:ce:b0:62:c3:80:d8:18:15:88:0b:95:2f:a8:29:
67:5f:72:c4:78:60:9e:17:d9:59:f3:20:b0:95:3b:c1:3c:d1:
3d:97:42:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:40 2026 by rpki-client