Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143382.roa
File: AS143382.roa (raw, json)
Hash identifier: 710Tz/HQdqpoKXkpjlh8ZqSYCoSBKNfTXik3a/pfojs=
Subject key identifier: 58:E4:AC:AF:45:33:31:63:73:67:59:93:3E:01:8A:46:FA:A2:BD:BA
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6CA59C0B31C183E4D60EECFB6CBB10176FEA7D64
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143382.roa
Signing time: Fri 22 May 2026 04:27:01 +0000
ROA not before: Fri 22 May 2026 04:22:01 +0000
ROA not after: Fri 21 May 2027 04:27:01 +0000
asID: 143382
IP address blocks: 240a:a2dc::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:a5:9c:0b:31:c1:83:e4:d6:0e:ec:fb:6c:bb:10:17:6f:ea:7d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:22:01 2026 GMT
Not After : May 21 04:27:01 2027 GMT
Subject: CN=58E4ACAF45333163736759933E018A46FAA2BDBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:24:91:c1:7f:d2:69:03:05:cf:92:c7:20:7d:
10:d6:47:cd:36:ce:11:83:2e:8a:48:b0:38:00:0c:
79:19:64:13:d6:52:4a:4c:33:a2:58:6b:e6:ca:70:
11:e9:cd:1c:1f:d9:54:43:2d:0c:b9:95:fc:10:87:
28:39:a7:54:a1:fb:70:72:6d:3d:ff:05:aa:35:bb:
ed:20:3e:9d:33:0a:45:6a:d7:fd:34:05:95:c1:68:
92:e8:d5:71:ee:52:62:7a:62:75:95:43:97:78:a5:
af:99:02:e1:7d:06:50:a0:e5:5d:c2:9c:b6:01:8e:
65:64:5c:b7:69:e8:96:18:7d:1f:b7:c1:6f:f2:ba:
50:84:ad:fd:10:83:4f:2a:97:8d:7a:c2:4c:c6:d9:
62:b8:a1:d9:14:ab:ae:2b:9d:47:f1:f4:40:94:70:
7c:9f:76:13:f2:35:4c:99:38:0d:29:8d:90:0b:ab:
54:fb:e7:ff:d6:e4:ff:3a:ed:91:45:9c:48:2e:ef:
5d:a0:a1:48:61:77:24:bc:ad:1d:f8:05:5d:3a:3e:
35:5d:a1:3e:cf:49:b9:9f:ea:1b:37:4e:30:89:ef:
e0:c7:42:e5:11:8d:86:e1:4d:a0:a9:db:95:c4:df:
76:ef:4b:25:b2:24:61:9c:1e:76:1a:ba:1b:e7:df:
8e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E4:AC:AF:45:33:31:63:73:67:59:93:3E:01:8A:46:FA:A2:BD:BA
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143382.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a2dc::/32
Signature Algorithm: sha256WithRSAEncryption
3b:30:4d:72:53:87:2a:42:d2:0e:88:e4:4c:bc:1f:95:c5:ea:
e3:ab:d0:57:8f:95:7f:a8:9a:dd:db:ff:d1:0d:ed:33:4e:72:
54:aa:49:20:ea:cc:92:6b:00:37:17:b3:16:a6:8f:ba:15:09:
8e:56:2e:3f:df:76:f4:b3:c0:0a:2b:5f:1f:52:81:90:46:da:
68:f2:e0:d5:22:81:c9:95:7c:95:07:94:46:9b:25:a5:50:bd:
04:da:0f:29:4e:77:09:fb:45:9c:00:c2:87:ea:af:97:fe:e6:
ae:64:eb:ca:eb:9d:df:31:60:28:31:8e:e8:1b:e0:5f:62:8b:
f5:2b:d1:4d:be:ae:81:a7:32:d5:12:3c:51:a4:4f:45:10:10:
38:3e:9d:0a:23:41:3e:6e:f6:9b:90:e6:a3:da:6e:89:55:57:
f5:03:08:a1:a8:1c:f6:31:76:15:dd:fb:a6:20:25:6d:0c:32:
c5:7b:d5:27:39:ef:ec:82:00:3e:3c:60:e6:7b:9c:3f:20:52:
42:3b:42:1e:b6:25:05:dd:40:49:bc:23:05:1c:97:51:48:9e:
c3:83:84:21:a6:46:9c:69:34:28:71:bd:bd:86:50:e0:7a:37:
8c:67:6f:cd:03:35:a0:cf:56:a6:f5:72:90:46:d7:e8:31:ba:
6a:5b:33:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:22 2026 by rpki-client