Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143405.roa
File: AS143405.roa (raw, json)
Hash identifier: +GVx5OwBnsdZCtBz/X3dzmAJiUelnQF6lkaC+31I64U=
Subject key identifier: D9:EB:91:65:C7:16:78:55:BD:AD:0D:C9:FD:3A:F7:73:22:E3:A9:8A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 33CF992792C8C07E7B6E2EC2E62A295D38B9D6AE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143405.roa
Signing time: Mon 25 May 2026 01:51:04 +0000
ROA not before: Mon 25 May 2026 01:46:04 +0000
ROA not after: Mon 24 May 2027 01:51:04 +0000
asID: 143405
IP address blocks: 240a:a2f3::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:cf:99:27:92:c8:c0:7e:7b:6e:2e:c2:e6:2a:29:5d:38:b9:d6:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:04 2026 GMT
Not After : May 24 01:51:04 2027 GMT
Subject: CN=D9EB9165C7167855BDAD0DC9FD3AF77322E3A98A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:62:63:07:54:7a:e7:da:e2:ce:a5:66:b5:58:
92:47:3d:37:2e:f5:20:cf:0a:98:cd:c2:ad:55:3c:
dc:33:52:9a:65:08:c0:83:3c:2e:41:80:15:3d:7f:
1a:c7:44:5e:3f:6d:b5:76:48:90:f5:47:8d:be:7b:
fe:5a:e0:8a:df:1f:ea:7d:a2:69:4b:c2:e3:3a:93:
8a:aa:74:34:b3:d6:f0:25:66:4a:28:95:71:f4:f3:
3e:5b:59:59:27:2d:3a:00:92:5c:7d:62:a0:8b:bf:
cc:ee:c0:7c:3c:ca:46:a7:23:b1:69:6f:13:2e:68:
54:31:b5:34:74:08:37:80:8e:70:5d:ad:78:8c:7d:
77:97:2e:b4:c1:f8:e2:30:b5:4e:d9:8b:a1:e0:29:
33:02:51:9c:71:46:b9:87:aa:f0:4e:de:62:ab:f7:
f2:ba:9b:0e:e2:d4:06:66:a3:13:51:fa:19:5e:fc:
4b:db:e7:77:70:6e:35:b4:1a:e6:bf:e4:5a:02:37:
6e:31:37:6e:7b:c5:85:d5:65:14:cc:bf:6b:6d:50:
d3:86:e6:3c:e2:88:12:be:47:01:92:3d:91:9d:f8:
82:ed:37:2e:01:9b:12:3b:77:71:52:35:d2:ac:9a:
14:e7:52:c9:68:c5:ce:ad:d6:a5:b1:6f:cc:98:04:
06:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:EB:91:65:C7:16:78:55:BD:AD:0D:C9:FD:3A:F7:73:22:E3:A9:8A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143405.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a2f3::/32
Signature Algorithm: sha256WithRSAEncryption
16:55:48:2d:e3:bd:0f:d9:fd:33:9b:0d:66:ba:2c:46:ea:60:
c4:5a:d6:32:f3:7b:df:fa:34:e1:88:84:d8:18:f5:37:0d:33:
05:e7:47:dc:fd:02:f5:a3:1f:21:ea:fd:64:44:da:5b:1a:11:
c8:89:b9:c8:e8:16:eb:d9:25:7d:81:55:54:5b:6f:72:6d:fb:
ae:87:e1:b6:40:90:d8:e9:02:f2:92:c7:ec:e1:c5:b2:1c:4d:
f7:6d:98:90:14:24:ec:d2:b3:de:29:c1:11:04:67:cd:bd:18:
a3:23:be:5e:e4:28:65:65:f5:6f:d1:b2:52:80:c4:22:ba:a8:
0c:84:92:03:7d:18:b0:b9:1f:af:2e:fe:1a:c0:c1:9a:b3:6a:
a1:70:4c:60:ac:00:ae:8f:a5:f3:37:91:ad:c8:9c:70:45:23:
6b:e1:f1:3f:dd:ea:26:c1:30:51:33:d1:09:88:a9:c5:19:9f:
73:6f:6a:0f:e4:b8:b8:71:fd:70:a5:39:2f:44:37:03:eb:d5:
2b:2f:86:96:3a:6e:18:0b:c7:01:93:c9:21:69:8e:4f:fc:fb:
8c:36:c4:d6:69:f6:df:bf:62:27:0f:33:10:ad:b5:97:52:6c:
65:3f:e0:67:42:8f:fc:9c:19:49:f6:84:71:ff:ad:a4:74:ce:
f1:9c:22:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:17 2026 by rpki-client