Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143398.roa
File: AS143398.roa (raw, json)
Hash identifier: ylyAxhRocOjGU44rXmHvf2vRB/Y89tUXeIazrDHJmbE=
Subject key identifier: 91:97:16:EC:85:4C:82:0C:54:6B:27:B3:7C:68:18:F4:DE:EE:21:48
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 16D9E2D150797F0A3553F49CEF0F482118C9BFF3
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143398.roa
Signing time: Fri 22 May 2026 06:58:19 +0000
ROA not before: Fri 22 May 2026 06:53:19 +0000
ROA not after: Fri 21 May 2027 06:58:19 +0000
asID: 143398
IP address blocks: 240a:a2ec::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:d9:e2:d1:50:79:7f:0a:35:53:f4:9c:ef:0f:48:21:18:c9:bf:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:19 2026 GMT
Not After : May 21 06:58:19 2027 GMT
Subject: CN=919716EC854C820C546B27B37C6818F4DEEE2148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ae:18:64:82:61:ab:50:32:07:a6:1a:3f:8f:
53:34:36:a9:3e:a6:3f:d9:a6:bf:95:96:c3:6f:07:
42:3b:01:92:e4:d1:e4:7e:a2:cb:98:a6:42:eb:7a:
78:e0:ca:3f:25:fa:fa:97:d6:38:c2:4a:36:26:6d:
73:e4:da:24:3e:35:75:7e:4f:bd:37:1d:12:32:a0:
b5:59:0f:71:cf:94:6d:25:5a:6b:d6:ab:7d:d4:48:
9d:71:e0:cb:c9:3c:e8:e4:6c:54:a0:7a:c7:fb:ab:
0b:0e:f9:77:4b:8f:07:f3:78:65:42:fc:0d:ff:5b:
bf:bd:40:30:6c:10:82:dd:f4:19:05:39:d9:ac:d7:
47:b0:5a:e1:eb:78:d9:26:cd:44:68:6b:ff:b8:bc:
42:12:8a:9f:20:0b:3f:44:a7:f5:9c:77:36:d0:6f:
15:d0:fb:de:72:b5:ad:f9:30:2f:d0:f4:9a:90:6f:
49:36:1e:a9:66:bc:eb:18:13:2d:f7:44:26:53:0a:
d2:65:55:70:88:ed:5f:95:81:cd:ec:31:08:96:a2:
eb:49:51:23:0c:39:d4:7b:52:ba:01:8b:1c:80:b1:
23:eb:e7:66:09:56:e9:22:30:5d:dc:70:20:88:8e:
c0:c1:97:95:94:ea:a9:ef:30:1a:fd:d3:18:7e:43:
d1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:97:16:EC:85:4C:82:0C:54:6B:27:B3:7C:68:18:F4:DE:EE:21:48
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143398.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a2ec::/32
Signature Algorithm: sha256WithRSAEncryption
56:7b:a1:3b:65:a5:7f:48:4b:a4:90:e0:a2:8a:0e:d4:5b:7f:
87:86:b8:1a:2b:3d:c7:19:5d:55:45:0a:36:4c:9e:b6:66:ce:
ad:d2:8a:c5:72:a6:95:ee:2c:1f:cc:80:1a:6b:87:24:f6:6d:
06:82:4d:c1:23:11:72:7d:95:b6:23:15:07:4e:00:0d:5e:eb:
02:9d:52:4e:35:ff:57:a8:68:61:e6:18:69:37:3c:81:d7:34:
9e:3f:1f:23:4b:34:5a:66:bd:3e:54:d0:6b:a4:54:18:c2:1b:
5f:d2:88:bf:58:d4:37:5a:db:11:d9:f2:a1:eb:ae:d2:bc:cc:
cc:31:b7:4b:4e:13:9c:c8:9e:4c:e8:a5:31:d4:f3:08:0d:6a:
24:f2:37:ce:8b:dc:57:e4:88:60:50:0e:f4:d3:ec:6e:c7:8a:
71:d5:4f:7d:a0:e8:f3:d0:4d:e2:0f:94:6e:0a:e8:bd:ec:7e:
67:2d:2c:60:0c:4d:53:c2:78:a2:e5:d8:21:bb:df:80:a0:c2:
45:d4:27:8c:9a:7e:2f:46:83:26:3c:d1:cb:2f:8c:01:9a:0b:
b7:2d:13:f9:6f:26:3d:0a:69:31:33:8f:1e:0b:34:b5:c3:e9:
36:79:28:48:83:60:f3:70:b1:9a:8c:91:01:59:62:9e:86:87:
08:6f:7f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:50 2026 by rpki-client