Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143391.roa
File: AS143391.roa (raw, json)
Hash identifier: E8rbwSj7pPCsqlOSoVzOTy5zm/GiMtdwQwcpHd+DIqU=
Subject key identifier: FA:F1:81:8C:BD:E7:1E:22:CE:FC:29:F2:C0:6F:AB:F3:F2:C4:2F:B6
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 68160ECEFBF06C4D35BCE9B7BFC4E01D17293C7A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143391.roa
Signing time: Tue 26 May 2026 01:13:26 +0000
ROA not before: Tue 26 May 2026 01:08:26 +0000
ROA not after: Tue 25 May 2027 01:13:26 +0000
asID: 143391
IP address blocks: 240a:a2e5::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:16:0e:ce:fb:f0:6c:4d:35:bc:e9:b7:bf:c4:e0:1d:17:29:3c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:26 2026 GMT
Not After : May 25 01:13:26 2027 GMT
Subject: CN=FAF1818CBDE71E22CEFC29F2C06FABF3F2C42FB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1e:dc:a3:02:b7:d8:ec:c5:cb:fc:b6:ae:f8:
66:db:f9:a6:a4:96:e3:86:84:d4:93:95:72:e9:3f:
a8:d7:ea:3a:59:a6:e8:fa:f0:63:68:ba:b9:ad:ed:
91:ba:67:7b:8c:ae:09:09:58:14:ed:59:80:5e:cc:
42:2f:4d:23:b8:4f:b2:89:fd:ac:48:15:4c:6b:20:
d9:92:52:5d:85:bd:61:40:24:ba:be:30:47:44:fe:
e9:9e:a1:51:74:50:19:3e:35:62:82:7d:ea:e6:81:
69:c1:44:d3:22:5b:31:d1:85:d5:f4:df:5f:50:6c:
d9:6f:44:d6:23:88:74:f6:af:63:83:7a:06:65:55:
fb:99:6d:f7:28:51:b2:22:c2:b3:58:eb:7b:45:33:
17:eb:34:c4:57:69:30:7d:af:53:f9:d0:8b:e1:0c:
85:2f:c4:00:03:ae:37:ab:b8:22:d0:29:86:b5:f2:
7a:99:de:39:21:aa:56:a4:84:1d:8a:4c:b9:5b:35:
c8:8a:49:89:b0:8b:eb:32:55:7c:34:32:ec:3c:7d:
9e:82:2e:05:a6:4f:f8:d9:17:82:14:5f:cc:e4:07:
27:32:ee:a0:2d:1d:50:2c:61:7d:07:98:cc:50:b9:
1d:7b:f1:c1:81:e8:6f:f5:c6:c7:57:99:89:02:0d:
16:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F1:81:8C:BD:E7:1E:22:CE:FC:29:F2:C0:6F:AB:F3:F2:C4:2F:B6
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143391.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a2e5::/32
Signature Algorithm: sha256WithRSAEncryption
bb:f7:bf:0d:7a:b5:70:a5:a2:c3:73:f2:90:9c:d0:25:10:28:
7c:81:ff:38:bb:a5:78:fc:f1:92:83:2b:2b:09:92:f1:82:e7:
89:33:43:ab:ad:44:ea:e6:9d:af:e0:24:3b:04:fb:12:b2:af:
48:82:eb:c6:72:89:ae:fd:bb:e5:db:8e:4e:02:ea:c9:59:bc:
30:b9:cb:13:bd:02:f2:0c:8e:05:74:76:a6:3b:10:eb:40:f2:
8a:b5:4e:9f:ab:55:1a:f9:1d:99:3f:2f:f8:12:15:3b:33:8e:
16:26:19:e3:10:34:6d:cf:a7:62:39:3a:14:93:fe:84:ef:5e:
77:a5:5e:d5:92:47:b8:c2:17:79:ba:7a:1b:dc:08:10:95:2d:
f2:b3:ba:b6:56:30:eb:99:6f:85:45:7e:5e:53:da:98:cd:82:
c7:2d:8d:4b:90:b6:af:20:6d:b4:91:c1:9c:5c:2e:08:4c:72:
4d:79:98:fa:4b:b3:be:c4:8f:7d:ea:12:9e:4f:b3:c5:9a:cd:
14:12:aa:c2:4d:1f:6a:5e:0a:90:48:d5:99:ac:11:1c:9f:df:
42:6a:8e:0b:66:44:38:06:4a:42:e9:a4:b3:52:29:b1:fd:dd:
2a:a6:b2:1f:e8:f0:f1:f9:74:49:5d:5c:e5:52:11:3f:de:54:
84:62:ca:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:58 2026 by rpki-client