Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143397.roa
File: AS143397.roa (raw, json)
Hash identifier: o4Z3SqsoYB14Vfuj868uqcn2IwXn5ochav6DUN/14hw=
Subject key identifier: 3A:B8:11:E9:44:61:20:A4:12:A0:D2:E8:51:2F:2C:4E:78:B9:EC:70
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4E9201039997017D936BF89B30F82498E439BC43
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143397.roa
Signing time: Fri 22 May 2026 06:27:42 +0000
ROA not before: Fri 22 May 2026 06:22:42 +0000
ROA not after: Fri 21 May 2027 06:27:42 +0000
asID: 143397
IP address blocks: 240a:a2eb::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:92:01:03:99:97:01:7d:93:6b:f8:9b:30:f8:24:98:e4:39:bc:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:22:42 2026 GMT
Not After : May 21 06:27:42 2027 GMT
Subject: CN=3AB811E9446120A412A0D2E8512F2C4E78B9EC70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:43:b8:e2:58:16:8f:73:f6:d1:c0:0d:14:33:
c1:b1:d9:bb:53:ff:47:43:b8:85:21:9e:8b:b9:f8:
de:4d:41:eb:5d:06:fd:15:87:17:db:b2:b0:e5:60:
6b:f4:1b:f8:74:ab:43:d3:4a:63:26:7f:70:0c:a7:
87:a1:f2:e3:82:61:24:fa:d2:2f:f8:b0:ed:e8:a5:
08:3d:30:63:48:ee:2d:b5:9e:82:86:1b:57:44:15:
a1:8c:d3:c7:20:27:dd:3e:1e:d9:00:69:47:c0:40:
48:22:0a:9c:73:2c:61:c2:a7:1d:cc:60:b3:96:d3:
91:ab:5e:cf:b3:05:38:cb:0b:e2:c6:5e:8a:8c:3b:
7f:65:33:3f:d0:10:c2:83:2c:d4:d2:11:da:3b:53:
94:63:3b:c4:38:6e:f3:5c:73:1b:0e:6e:ea:8c:cc:
e9:d9:e6:c6:5b:ce:1a:6b:9a:fe:fb:01:49:1c:d4:
d4:ab:c5:5c:1a:4f:97:24:e0:da:ba:55:97:cf:c0:
e8:5b:25:2a:16:11:4c:4a:60:cc:13:b9:7a:87:2a:
90:35:4a:dd:bf:18:9f:02:d3:ff:ca:a7:3b:2b:88:
a4:ff:cd:25:91:fe:da:c3:63:c3:c4:e6:a7:26:f4:
5b:f1:37:ad:4e:0e:10:3d:98:2e:f0:06:6b:dd:d4:
39:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B8:11:E9:44:61:20:A4:12:A0:D2:E8:51:2F:2C:4E:78:B9:EC:70
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143397.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a2eb::/32
Signature Algorithm: sha256WithRSAEncryption
2f:f3:e9:a0:50:1d:0d:e7:f4:97:1f:63:0a:65:0d:bd:59:9d:
6a:f0:70:39:6b:4d:2c:4d:4c:49:17:e0:ac:0c:4a:a5:c0:06:
bc:67:3f:ed:64:2b:bf:0b:7a:7d:64:36:29:3c:20:a7:62:65:
2b:6c:2c:39:af:f8:77:9d:a1:34:25:b3:d7:e1:53:86:6d:08:
cb:43:66:23:67:a7:de:a7:ab:0d:88:6c:ef:24:29:b6:69:fd:
a0:b1:fd:c0:b6:48:c1:85:d1:a8:17:70:1a:6c:01:49:34:18:
7c:0b:15:92:d2:f1:c4:e5:5a:f5:5d:5f:e0:d7:9c:cf:d6:d7:
a9:2d:77:32:ed:d0:76:bc:ee:41:ea:7c:08:2f:b8:02:d5:f7:
72:4c:b4:6d:18:83:44:df:1d:a1:a4:7a:03:3c:8b:fe:5c:e3:
ab:6d:68:89:3a:66:66:08:82:14:39:a5:ca:de:fa:e3:2a:92:
b7:56:16:60:a3:76:79:f1:b9:d0:61:bc:db:a4:6c:a4:15:84:
a1:95:05:84:d8:e8:a9:33:6a:a6:c9:bf:18:7c:77:98:78:7d:
27:df:30:ee:06:67:87:87:eb:e9:1d:f5:1e:1d:c6:09:6a:f1:
b5:18:e3:0e:51:aa:db:ba:5a:c6:92:04:67:bb:e9:fa:fb:a9:
21:dd:09:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:34 2026 by rpki-client