Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143390.roa
File: AS143390.roa (raw, json)
Hash identifier: X7h05BJ0GOXh5Gj7q3PW631Q3TjDwcNdWcsdmZcQvuU=
Subject key identifier: 22:EB:BE:9F:4E:03:03:C4:AD:90:72:76:F6:CB:CC:C8:8F:46:B3:56
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 381723A303F4B4B36D9447262287E68DEC5699BF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143390.roa
Signing time: Mon 25 May 2026 03:19:38 +0000
ROA not before: Mon 25 May 2026 03:14:38 +0000
ROA not after: Mon 24 May 2027 03:19:38 +0000
asID: 143390
IP address blocks: 240a:a2e4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:17:23:a3:03:f4:b4:b3:6d:94:47:26:22:87:e6:8d:ec:56:99:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:38 2026 GMT
Not After : May 24 03:19:38 2027 GMT
Subject: CN=22EBBE9F4E0303C4AD907276F6CBCCC88F46B356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a2:ef:e6:ff:25:25:dc:01:70:87:74:66:17:
d8:22:20:6b:df:4b:ba:49:10:d9:ee:3f:e8:fc:d7:
60:1f:4c:e4:49:60:0c:04:90:8e:6d:6c:70:e8:5c:
dd:90:4f:d9:cd:af:98:25:e9:53:51:dd:a3:81:1c:
35:46:a1:16:7e:a5:de:cc:5a:a3:bb:68:d6:bf:c6:
8d:a3:a7:65:6e:14:09:d7:33:e4:3b:6c:7c:9c:4a:
3c:10:c2:7b:57:a0:49:4c:c9:d0:97:25:16:08:cc:
22:91:fd:dc:fc:51:57:0d:1f:40:b0:ca:e9:53:fe:
ed:bd:59:6f:3f:97:55:de:ee:b3:65:5e:96:7a:8f:
a6:2d:83:66:e4:6d:40:89:46:3f:98:e2:9e:67:35:
7a:eb:e3:95:20:16:a9:3f:af:7d:87:78:21:b8:3d:
be:6f:66:92:af:b7:8c:4e:9d:70:a0:01:bb:9d:07:
e1:1c:2b:d9:d8:27:e6:63:9b:d6:b4:e2:ee:5d:68:
2c:d9:42:93:e6:f9:42:d1:05:1d:40:54:3f:76:5f:
7a:e7:82:fe:36:30:23:9f:a0:c1:b0:e1:a6:d4:47:
27:95:0d:8e:68:f8:34:3a:4a:33:4f:96:db:fe:14:
a0:b4:41:c0:e4:f8:95:86:e3:99:98:9e:bf:f6:a1:
1e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:EB:BE:9F:4E:03:03:C4:AD:90:72:76:F6:CB:CC:C8:8F:46:B3:56
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143390.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a2e4::/32
Signature Algorithm: sha256WithRSAEncryption
4a:7b:3d:54:f7:03:2f:4d:b6:53:8a:80:da:b9:10:1f:38:47:
e7:f6:af:45:5a:74:25:3b:62:0d:93:a4:58:f5:9c:27:9e:6e:
58:87:5e:a6:97:1c:df:0c:b2:8b:1c:0a:0b:09:34:5f:9f:58:
8f:2c:01:36:27:84:45:bf:6e:77:25:47:79:c5:90:cb:06:64:
a2:06:04:83:66:ca:00:1a:55:8d:f0:c7:c7:34:22:91:68:40:
b0:55:f2:49:8f:9b:75:48:08:98:fc:3d:fa:d7:aa:d9:2d:9d:
cd:d7:cb:4e:30:dd:10:d2:f2:bf:42:db:f3:8d:38:ff:b9:69:
b8:68:9b:45:c7:4e:bb:64:8f:45:04:22:ba:c4:ef:7d:41:09:
15:29:a4:13:2c:32:d9:2a:3b:27:f7:4b:5c:2d:e4:9c:5b:86:
41:06:eb:6d:43:e9:5c:2d:54:bb:8f:12:8b:0b:db:e0:d3:58:
9b:c6:f9:5d:c2:3d:e8:97:2b:43:1e:7c:8e:a1:be:71:8a:1a:
a3:fc:7b:ac:d5:0d:19:f8:24:78:32:49:61:09:0b:88:d8:73:
ad:37:cc:f1:d8:df:7d:3f:fa:8c:c8:f7:c6:e7:42:0e:df:c5:
37:64:e5:2a:73:76:58:51:6e:19:e5:44:ad:69:64:37:c2:2b:
2e:b6:58:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:09 2026 by rpki-client