Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143410.roa
File: AS143410.roa (raw, json)
Hash identifier: 4mPo8Ne22P+31tEqJ2o/rUVvV2vqnRsKLDpzb8g218I=
Subject key identifier: D2:9E:3F:09:CF:4D:C1:B9:51:40:78:81:AA:98:FD:55:98:A1:2D:02
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 60FB7F29471D2D165416CFA3CBB61D325F5A61D4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143410.roa
Signing time: Fri 22 May 2026 07:09:18 +0000
ROA not before: Fri 22 May 2026 07:04:18 +0000
ROA not after: Fri 21 May 2027 07:09:18 +0000
asID: 143410
IP address blocks: 240a:a2f8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:fb:7f:29:47:1d:2d:16:54:16:cf:a3:cb:b6:1d:32:5f:5a:61:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:04:18 2026 GMT
Not After : May 21 07:09:18 2027 GMT
Subject: CN=D29E3F09CF4DC1B951407881AA98FD5598A12D02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3b:14:00:7e:ce:0b:e2:d0:ad:be:b4:de:58:
5e:5b:fb:64:fd:ea:50:e9:0c:f4:e3:3a:e3:05:aa:
c3:2b:93:dc:27:e4:b5:a9:23:10:b0:f4:93:ff:ed:
ac:22:25:37:9d:0b:49:ee:60:eb:c4:a8:07:df:47:
d9:8f:39:9f:f7:94:e2:96:ef:0d:83:20:3c:3d:25:
db:c5:3d:3c:99:2d:d4:97:55:ee:50:d1:1b:20:03:
57:5d:0f:ac:2c:da:78:ed:b2:4a:a9:a6:78:32:49:
a9:20:89:fa:45:75:ce:f9:43:c9:73:57:12:c4:02:
a0:7e:34:c3:93:f9:f4:88:32:5f:b3:0d:d6:81:9b:
76:3f:43:01:85:73:d7:29:68:0b:38:aa:3f:5b:ed:
51:17:67:bf:37:8d:df:99:df:25:ff:d3:2a:5e:ad:
1f:b2:5b:7d:89:a3:d7:98:a8:a0:a7:5e:0e:2f:2d:
80:02:c9:d5:1c:78:14:fb:91:c3:61:a9:a4:51:39:
de:3c:f4:66:3d:92:a8:28:15:9d:38:0d:a1:b5:af:
0b:94:f2:a2:3c:4f:69:18:d3:14:2f:c9:51:40:cc:
e3:70:af:7b:d9:6f:11:c9:c1:2b:20:fe:a2:3d:fe:
ea:b6:e3:d0:f5:98:c3:a0:2d:e0:98:40:70:0c:d5:
62:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:9E:3F:09:CF:4D:C1:B9:51:40:78:81:AA:98:FD:55:98:A1:2D:02
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143410.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a2f8::/32
Signature Algorithm: sha256WithRSAEncryption
7e:1b:37:6e:cf:ae:fa:5d:95:76:ab:4d:e0:e3:aa:c1:e7:c5:
08:8d:77:25:49:15:e5:06:4a:a4:15:4a:77:98:22:e0:b0:8f:
0f:47:87:76:16:7b:c8:b0:54:e8:bd:58:15:b4:c4:c5:88:2e:
30:96:60:76:69:96:96:7a:5a:cb:70:88:db:4c:68:ab:a3:e2:
cf:68:9b:8d:41:8e:81:37:66:93:0c:8c:eb:53:5e:a6:5f:90:
c7:bc:df:51:69:44:4e:82:d6:82:10:15:cc:d8:33:02:47:33:
b1:42:d0:41:e4:b8:64:06:fb:35:fb:0e:3a:70:b3:28:83:60:
5d:b7:f3:a7:9e:b2:cc:c6:c1:fb:76:68:14:d9:82:72:aa:15:
51:e8:a6:4b:7f:28:31:36:e3:52:32:de:b7:f6:02:d7:f2:84:
8f:70:57:36:5f:3b:3a:f8:a6:16:65:69:b8:8f:b4:c5:77:db:
cc:0b:3e:d3:70:af:2c:df:21:d2:36:dd:5d:b9:a6:82:f1:f1:
16:02:30:76:ab:83:45:5e:35:27:ec:3e:b9:a8:ac:28:33:4b:
6f:90:bd:9e:8b:e3:18:3c:e7:28:6c:8e:b9:b2:69:eb:d6:de:
64:88:4f:a8:3e:56:d8:a2:90:92:17:11:69:63:54:d4:ae:a4:
56:d5:24:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:37 2026 by rpki-client