Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143381.roa
File: AS143381.roa (raw, json)
Hash identifier: 1OaZPZQ8AIb3Wq/7GWbv45dOzyqU29lz9/kqBkH4NCM=
Subject key identifier: C2:F2:9E:26:0F:91:5C:7C:0F:53:F4:5B:26:97:85:0E:23:D2:5A:74
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2BD1C1EE0DF708008188BF79DC94D3E4BCAE7211
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143381.roa
Signing time: Fri 22 May 2026 04:08:28 +0000
ROA not before: Fri 22 May 2026 04:03:28 +0000
ROA not after: Fri 21 May 2027 04:08:28 +0000
asID: 143381
IP address blocks: 240a:a2db::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:d1:c1:ee:0d:f7:08:00:81:88:bf:79:dc:94:d3:e4:bc:ae:72:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:28 2026 GMT
Not After : May 21 04:08:28 2027 GMT
Subject: CN=C2F29E260F915C7C0F53F45B2697850E23D25A74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:b0:58:4e:5f:95:0f:b5:49:47:c3:b7:45:2e:
db:db:9d:f4:af:84:3b:da:26:83:8a:98:c7:4a:1e:
3c:18:58:08:e7:fc:c1:cc:d2:d6:4d:ee:c5:1a:02:
a0:80:58:47:e3:7c:89:e3:7e:b0:4b:4e:90:97:2c:
13:46:1d:52:b0:62:5d:9c:c5:3a:bc:ed:76:15:49:
2a:83:f6:f5:e9:73:93:1f:48:f0:b0:64:df:3e:4b:
0d:67:65:d2:31:c5:c0:c3:72:24:9e:ee:6c:ef:50:
18:42:5e:fe:0c:ce:24:51:ca:5a:16:86:8e:b7:e1:
f0:3c:89:5f:5b:b5:25:0b:69:41:37:0c:2f:77:a0:
15:a7:12:d0:ee:fb:c0:87:fa:2e:26:8e:40:f2:14:
2e:3b:32:52:ce:c5:b2:bc:e3:b2:fa:fc:26:e7:68:
11:8b:62:1e:b7:78:e7:0b:c8:cc:98:f6:82:64:80:
70:b9:6d:33:b7:e1:06:2e:c2:ee:2a:e0:51:0e:85:
61:c6:44:23:f5:db:87:c1:75:d4:80:28:09:2f:2a:
2e:7d:6a:02:d7:38:48:17:65:9e:23:90:12:bc:8f:
94:2f:06:29:81:7e:8d:3c:fc:d9:58:dc:23:d3:9f:
9b:e4:bc:9f:bc:dd:8e:fa:06:39:6d:77:c9:d9:63:
ca:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F2:9E:26:0F:91:5C:7C:0F:53:F4:5B:26:97:85:0E:23:D2:5A:74
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143381.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a2db::/32
Signature Algorithm: sha256WithRSAEncryption
7d:7d:ea:49:cf:5e:c2:d6:98:98:42:d2:02:2e:45:83:84:1e:
23:8c:fd:a5:67:17:cc:df:75:33:09:54:66:75:f9:09:99:ae:
77:bf:24:e7:77:fe:65:ae:e3:b9:6e:93:79:fc:a1:41:6f:e2:
a9:9c:bc:ad:12:12:4f:d8:be:26:16:11:2d:7d:dc:b5:85:a3:
55:9b:fa:da:9b:87:34:40:16:72:45:9e:22:9e:08:f2:69:8f:
06:2a:7a:4c:ca:ec:ea:d9:c2:81:36:7b:15:27:d9:6d:e5:62:
d0:fc:b3:c4:4d:41:b2:c5:8d:cc:6a:67:80:38:a4:d4:08:db:
03:c4:cc:d1:d8:a1:ce:4a:eb:86:69:94:f5:a8:61:bb:e5:d7:
6e:60:2f:bf:42:37:14:16:e8:13:cc:d9:5e:99:eb:19:0d:7e:
f0:4a:87:45:a5:4b:12:7a:66:87:f0:0e:b2:f7:e1:82:53:15:
6e:62:df:6d:37:22:02:bd:88:2c:40:37:08:94:7d:02:ea:f3:
20:e2:c2:7e:b9:b0:fd:f6:0f:7c:7a:1e:35:c9:1f:83:44:d7:
e0:46:e7:55:e0:21:9a:7f:d5:eb:7b:4c:8c:8f:97:ae:d3:bf:
48:74:9e:40:2e:c0:af:3e:11:61:49:13:9f:f8:87:d5:cd:cf:
07:f1:a7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:23 2026 by rpki-client