Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143399.roa
File: AS143399.roa (raw, json)
Hash identifier: 5tluyQGoou+oG9TReut72K/FpyC83lPQmmnf8rb9ma8=
Subject key identifier: C4:A0:E4:52:CF:57:4B:67:B3:FC:60:87:99:E5:5E:84:9A:01:0C:A6
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3B8462E11FCA5410DDD5A162E69A14EAEBAFE1FE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143399.roa
Signing time: Tue 26 May 2026 06:30:45 +0000
ROA not before: Tue 26 May 2026 06:25:45 +0000
ROA not after: Tue 25 May 2027 06:30:45 +0000
asID: 143399
IP address blocks: 240a:a2ed::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:84:62:e1:1f:ca:54:10:dd:d5:a1:62:e6:9a:14:ea:eb:af:e1:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:25:45 2026 GMT
Not After : May 25 06:30:45 2027 GMT
Subject: CN=C4A0E452CF574B67B3FC608799E55E849A010CA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f8:2e:53:c1:17:94:08:d4:14:ed:2f:01:5d:
58:7c:0f:e9:7c:7a:e5:1c:be:9c:66:d4:b0:9c:b3:
0f:fd:20:22:b3:9a:64:68:bb:b4:29:d9:4c:d8:9b:
ad:87:70:34:ed:1a:29:06:ee:31:b6:7c:c7:2e:25:
8f:ff:d0:e2:e1:99:2f:39:d3:fb:50:b7:51:08:a5:
8f:a2:1f:d6:0e:9f:77:22:8f:4e:d2:a4:b0:c4:94:
e2:b1:3f:84:98:3c:0a:b7:c9:0d:ee:5c:92:d0:df:
50:a4:b6:69:67:63:c5:d4:12:a2:20:19:67:0e:cb:
b3:46:ab:80:7c:19:91:ac:7d:b6:52:54:97:ee:98:
62:77:cd:ff:18:59:76:13:53:21:68:07:03:77:c7:
aa:9b:cc:1c:6c:cc:bc:14:57:03:48:e9:76:18:54:
be:84:b9:2c:71:8c:f4:e7:50:52:d0:5a:fa:1d:bb:
51:7e:02:c9:01:91:84:58:5f:2c:53:7c:bd:99:33:
f1:2d:de:be:f3:20:f1:03:18:cb:15:90:8f:67:f2:
54:ca:28:c0:3f:db:5d:0e:56:05:68:d6:bb:d7:61:
51:c3:0a:ee:72:cc:2f:65:2d:a2:de:7e:0a:65:68:
60:09:4f:a4:23:62:01:c9:10:7b:7c:c1:ad:b0:64:
69:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A0:E4:52:CF:57:4B:67:B3:FC:60:87:99:E5:5E:84:9A:01:0C:A6
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143399.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a2ed::/32
Signature Algorithm: sha256WithRSAEncryption
be:0f:ff:a1:68:56:0c:45:58:28:ec:aa:c3:e2:e6:8b:03:2e:
0a:a4:3c:d6:a7:95:7f:1b:dc:3d:fc:dc:ff:42:ab:1a:e7:54:
5f:48:5f:ac:71:45:71:3c:b4:e6:a1:cd:fc:f8:ef:5e:a9:ee:
a8:f8:90:a9:ea:7f:35:68:a2:b0:90:80:e3:2a:85:05:fd:f6:
16:44:1a:cf:b0:e4:7f:8d:ee:53:d0:68:9e:5b:9f:46:85:d8:
9f:95:c3:a5:7e:ac:11:3a:57:d3:81:e7:c4:c0:71:3f:90:51:
0e:89:d6:08:e1:a5:b8:a9:36:b7:ea:f8:f0:c0:6f:27:e3:fd:
c0:ae:21:18:28:1c:ed:c3:7e:aa:fb:75:ed:4a:ef:3f:d3:2c:
93:46:31:c4:ed:35:74:6e:8a:4d:10:de:8c:93:f7:92:2e:23:
71:00:5f:07:98:04:9f:ef:b2:89:b2:dc:60:6b:7a:71:85:35:
ff:f9:6b:ae:2b:55:08:d4:b2:34:9f:11:f2:e3:db:24:fe:72:
d4:8f:82:f4:71:59:fa:6f:fd:e8:a9:83:b6:e3:11:4e:5f:4f:
28:c7:e5:5f:20:8b:ec:4e:a0:bc:4a:cf:c2:34:ab:02:78:b5:
d6:67:99:d5:12:ef:84:2d:cb:c2:26:05:69:dc:e9:a1:da:0f:
88:cf:4e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:41 2026 by rpki-client