Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143385.roa
File: AS143385.roa (raw, json)
Hash identifier: xrlrL/qi1f/k7WrX+NFrjj6ayMpRX+GNqquctdzkHSE=
Subject key identifier: FC:D6:C7:7A:C8:3F:41:70:D3:F3:C5:E2:6E:41:9A:38:75:43:ED:67
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 19C6DE2E354C6C362E60C5A08DD30C2B36E60BCB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143385.roa
Signing time: Mon 25 May 2026 01:51:06 +0000
ROA not before: Mon 25 May 2026 01:46:06 +0000
ROA not after: Mon 24 May 2027 01:51:06 +0000
asID: 143385
IP address blocks: 240a:a2df::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:c6:de:2e:35:4c:6c:36:2e:60:c5:a0:8d:d3:0c:2b:36:e6:0b:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:06 2026 GMT
Not After : May 24 01:51:06 2027 GMT
Subject: CN=FCD6C77AC83F4170D3F3C5E26E419A387543ED67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f7:8d:4f:c5:84:09:c4:a0:48:c7:24:cf:6c:
9b:3d:1f:29:d2:41:ee:0e:b2:86:10:31:f7:6b:70:
7d:fb:49:b6:99:03:13:4c:96:fd:fc:29:f4:54:4d:
85:d1:6c:c4:c1:71:c4:18:ef:d1:3a:23:75:25:15:
24:28:02:a7:46:06:19:0c:40:01:ac:5d:c4:fc:5d:
6b:f1:c1:ab:81:aa:ab:1e:0a:02:24:ef:48:03:d2:
9b:84:4d:b9:37:4a:e1:41:e6:93:b6:cb:4f:c4:80:
8f:61:14:ec:1e:8f:70:ab:e9:3a:b1:fa:b4:01:4e:
d2:32:0d:e8:38:b3:ab:61:8a:80:95:31:02:f3:0c:
cc:61:37:2e:ef:f7:c5:08:48:82:53:0a:e7:1a:5c:
02:c3:78:e1:8e:8d:53:2d:93:75:e5:6d:0a:f3:3b:
26:5a:99:74:0d:53:13:bd:6f:bc:ae:b1:61:f9:56:
60:e1:60:29:d1:17:ac:b6:eb:79:76:76:30:3e:23:
ef:7a:03:53:24:99:7e:ca:dd:6b:f7:71:f3:d1:b6:
0e:a5:8f:49:47:6a:5e:66:68:33:ab:81:2b:80:14:
53:62:f5:d8:73:85:37:ad:0b:2d:1f:e7:78:03:eb:
76:ea:5b:00:99:ea:03:37:6c:48:63:06:8c:8d:d3:
3b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D6:C7:7A:C8:3F:41:70:D3:F3:C5:E2:6E:41:9A:38:75:43:ED:67
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143385.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a2df::/32
Signature Algorithm: sha256WithRSAEncryption
b7:b6:00:52:34:14:b4:91:48:64:15:f8:61:c2:82:d6:25:11:
85:76:8c:c6:c0:63:a2:8f:52:fa:84:3a:1f:33:d1:d2:2f:7e:
7e:9d:d5:71:a9:74:cc:0b:59:a7:24:6f:6d:79:db:55:96:ec:
de:4c:1e:32:03:e9:12:65:d2:28:3f:59:11:91:2d:ad:3d:f2:
01:7c:d9:ed:08:74:18:eb:14:9d:b6:90:5c:3e:48:f0:e1:c7:
fb:b4:e6:7e:92:49:7c:b4:16:51:0c:26:b8:96:bd:97:8a:02:
66:3c:9b:ea:d5:18:b6:1e:65:bf:d8:d0:07:8d:fd:fe:c4:00:
0f:c5:fb:73:22:cd:b7:74:66:3e:24:56:d7:d8:22:21:c1:2b:
e7:56:92:2f:ec:56:a8:2f:f8:dc:22:06:12:b0:24:0e:d4:af:
a5:db:93:8c:3a:2d:df:cd:6b:59:7a:64:cd:a8:03:53:40:7a:
ee:b4:b3:6c:f7:d3:12:8d:68:0f:02:54:a1:75:bf:de:18:34:
02:f2:06:3b:93:ec:96:1b:f8:fb:a6:21:44:70:74:d2:76:81:
30:09:17:b4:95:a3:ae:15:d4:df:40:08:0e:bf:90:0c:5e:47:
4b:81:fe:df:36:2c:b8:1e:43:43:29:a6:c3:c6:13:23:3c:22:
9f:03:de:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:28 2026 by rpki-client