Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143386.roa
File: AS143386.roa (raw, json)
Hash identifier: 883jx5zybA1s5OR7wPF1Bu/jOkIWp8PKKeX7bS6Glvg=
Subject key identifier: C3:DC:7A:BA:BC:D3:7C:DF:1D:FC:06:AF:71:77:89:95:A6:00:81:CD
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2B3263463106AAC1C7CDE1F95A92686FFFB27F26
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143386.roa
Signing time: Fri 22 May 2026 01:50:31 +0000
ROA not before: Fri 22 May 2026 01:45:31 +0000
ROA not after: Fri 21 May 2027 01:50:31 +0000
asID: 143386
IP address blocks: 240a:a2e0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:32:63:46:31:06:aa:c1:c7:cd:e1:f9:5a:92:68:6f:ff:b2:7f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:31 2026 GMT
Not After : May 21 01:50:31 2027 GMT
Subject: CN=C3DC7ABABCD37CDF1DFC06AF71778995A60081CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:0c:c0:4c:05:26:70:c5:95:c4:9a:de:95:2c:
0d:36:d4:1d:5c:be:fc:0d:9c:fe:5a:10:9c:60:47:
5a:a8:7e:52:60:4c:e7:97:42:ed:4a:b2:14:fb:11:
42:db:73:c8:e7:8c:42:1a:3c:04:dc:3b:e9:6a:ec:
43:fd:aa:6f:42:00:a3:bd:c7:34:9b:77:ed:af:ff:
99:c1:45:39:e6:4b:c2:22:35:b4:eb:bd:9b:c6:74:
2e:c9:fa:a1:20:f7:65:25:ee:12:19:e1:cc:38:58:
b7:4f:ee:3a:3c:c0:56:c9:fe:5f:45:99:21:4a:91:
de:b3:3c:f7:b5:1f:a8:b1:4d:96:0f:f0:ff:d3:cf:
55:52:28:78:90:71:a6:11:f5:77:77:ad:6c:62:19:
37:7f:5d:be:50:eb:7f:7d:c1:e9:57:b1:e5:4c:83:
3f:e0:bf:87:84:56:1f:9a:c7:52:db:1d:9e:42:57:
fb:c7:37:84:9c:da:63:91:2a:69:fd:29:15:04:6b:
10:16:a6:34:ab:b6:9e:64:c1:c0:76:39:23:37:73:
00:b9:ee:40:41:2d:01:45:94:c7:32:44:7c:47:1c:
a8:1d:4e:c6:5a:39:89:3b:11:59:5e:bc:06:b4:66:
c6:01:26:35:ca:1e:8d:6e:39:e5:7b:fd:32:9d:ba:
c3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:DC:7A:BA:BC:D3:7C:DF:1D:FC:06:AF:71:77:89:95:A6:00:81:CD
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143386.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a2e0::/32
Signature Algorithm: sha256WithRSAEncryption
68:79:dd:0b:29:59:ff:d6:86:45:a9:e4:91:82:c8:49:15:b1:
38:9b:7d:cb:45:b6:c0:bb:62:5b:61:be:54:b2:74:7f:74:84:
fc:be:2a:e0:bd:3e:a6:5c:21:86:13:07:59:43:c9:3a:78:b4:
08:15:a4:86:74:d6:9c:eb:72:6f:7b:37:9d:b6:18:d9:8d:ab:
25:22:86:52:bb:12:b6:6a:51:ec:ff:d6:85:76:69:e6:13:40:
2d:17:23:62:b5:33:11:96:29:bb:76:68:22:1a:53:2f:dc:62:
e2:1b:e2:07:b9:a4:bb:68:85:76:eb:dd:3d:94:24:bc:b2:68:
12:2b:84:dc:5e:0c:49:0c:77:72:b2:d5:f3:e1:6c:36:70:6c:
3c:50:28:ac:b2:fe:42:08:15:07:aa:1e:c2:0c:f9:ac:d5:3c:
95:09:fc:b9:57:72:ed:a8:e7:a5:e1:c1:b4:ca:10:b8:f3:36:
14:e4:d8:5b:f6:3d:86:ec:9a:c1:05:dc:b8:b0:3f:5e:06:97:
ac:93:06:27:29:c4:9e:b4:eb:49:bc:b9:e4:5e:fe:99:35:bb:
ec:f3:2e:95:b4:46:25:ee:9f:66:27:2e:86:79:d7:fd:9f:f6:
07:83:d9:90:9e:27:e4:bb:e8:aa:05:34:bf:23:c0:e1:32:14:
8e:90:fd:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:09 2026 by rpki-client