Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143393.roa
File: AS143393.roa (raw, json)
Hash identifier: ypTR7TZ6+jdHAOxZOy/AQdke/AP6L3wbH7z8BC/FQlg=
Subject key identifier: 9D:FF:20:25:48:C6:C0:F2:26:B6:6E:38:DC:E8:2C:9C:79:F5:82:E2
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4C77E2BABB04EAFFD51C28C4A4BEF8671CD55090
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143393.roa
Signing time: Fri 22 May 2026 01:50:36 +0000
ROA not before: Fri 22 May 2026 01:45:36 +0000
ROA not after: Fri 21 May 2027 01:50:36 +0000
asID: 143393
IP address blocks: 240a:a2e7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:77:e2:ba:bb:04:ea:ff:d5:1c:28:c4:a4:be:f8:67:1c:d5:50:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:36 2026 GMT
Not After : May 21 01:50:36 2027 GMT
Subject: CN=9DFF202548C6C0F226B66E38DCE82C9C79F582E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e0:7e:aa:be:21:a9:d3:27:38:2f:37:4e:95:
73:0b:26:10:80:4b:1b:87:66:a4:06:f5:8a:5a:b9:
cb:4b:b0:54:7d:98:19:53:62:1e:28:e8:35:ed:6d:
b7:f5:79:7e:25:0f:e8:7f:1f:10:00:95:b9:fa:c9:
65:4d:0d:df:9b:8b:05:79:ed:54:3b:cf:a0:ed:e8:
8e:5e:cb:5a:7b:eb:94:4d:cb:20:d9:98:86:a4:41:
f0:df:b2:56:e6:b1:81:9e:02:7c:8b:e5:a8:d2:2a:
1d:69:69:28:03:6e:1a:b3:ee:03:fb:36:d1:5f:ec:
9d:e9:60:ba:eb:8e:95:79:71:a0:10:ef:bb:b3:c0:
59:d8:c9:0e:de:16:59:91:80:d3:fd:6b:b3:a1:f4:
e5:2b:a3:5b:21:9d:ec:1a:db:bf:d1:1c:9d:73:58:
42:4d:bb:79:82:e2:61:c7:07:fc:10:62:c6:e5:84:
69:81:ab:a1:39:b6:6f:28:af:bb:92:df:c1:b6:e0:
d1:d0:d0:72:b4:20:3b:29:59:9f:9a:1d:e1:db:ee:
2a:1c:63:4b:47:7d:1a:48:a8:6e:89:10:f7:bc:3b:
1e:7c:07:77:e8:11:7e:d3:dc:5c:85:91:64:6d:58:
02:34:3b:19:36:8b:3e:43:44:99:c0:48:4b:d7:8b:
16:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:FF:20:25:48:C6:C0:F2:26:B6:6E:38:DC:E8:2C:9C:79:F5:82:E2
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143393.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a2e7::/32
Signature Algorithm: sha256WithRSAEncryption
43:e7:b8:b0:6b:09:64:56:34:31:e2:5e:87:ca:05:03:da:7d:
e4:92:c1:37:c4:30:46:3b:7a:40:04:42:fa:fa:fb:e9:26:ae:
bf:41:90:0b:99:30:29:85:ea:e1:c4:28:64:3e:3c:fd:98:23:
04:e5:4f:7b:56:76:79:2d:ad:cc:1b:ea:50:07:28:71:d5:d3:
c0:73:ea:fb:48:d0:27:19:6f:70:d4:22:3a:20:27:87:a9:cd:
be:a0:cd:76:c9:58:b9:38:46:5e:52:4f:57:ea:ad:8c:4f:e0:
a3:76:82:7b:67:6d:60:f9:47:16:5f:8d:79:19:de:22:12:7d:
d2:30:d4:83:67:de:81:11:51:94:45:8b:eb:6e:41:02:9a:09:
2a:08:f4:54:c4:7f:9c:dd:70:56:5b:f7:76:f9:21:09:23:6f:
48:cf:f4:9c:7a:2d:96:64:78:60:f8:3b:6a:07:86:81:c5:b3:
8a:b6:d4:31:70:2f:86:98:23:69:47:8c:43:cb:b6:37:24:5d:
e4:f2:77:95:ba:7f:af:07:28:80:00:8c:3d:7e:76:e1:14:b1:
3b:08:5b:d2:c0:94:f6:68:ca:ac:f6:b3:10:3e:d9:d8:b1:68:
cf:b9:33:ef:c0:62:b5:8b:f6:02:c2:06:ea:eb:c6:2a:86:1d:
54:d2:c2:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:44 2026 by rpki-client