Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143423.roa
File: AS143423.roa (raw, json)
Hash identifier: DRTcqpclZXifW3RYNJJqecrozlpQibi6RaVl2A2GNTA=
Subject key identifier: CF:20:D0:96:AB:8F:E9:E1:06:1E:28:1F:81:57:CA:AC:0F:4B:B6:B4
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 378664E816631ED50136FF01011A6AC9966E5E66
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143423.roa
Signing time: Mon 25 May 2026 06:28:39 +0000
ROA not before: Mon 25 May 2026 06:23:39 +0000
ROA not after: Mon 24 May 2027 06:28:39 +0000
asID: 143423
IP address blocks: 240a:a305::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:86:64:e8:16:63:1e:d5:01:36:ff:01:01:1a:6a:c9:96:6e:5e:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:39 2026 GMT
Not After : May 24 06:28:39 2027 GMT
Subject: CN=CF20D096AB8FE9E1061E281F8157CAAC0F4BB6B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:01:18:19:3d:25:6e:df:cc:72:c5:e9:00:7b:
d0:c0:9e:81:dc:db:a9:8b:9b:ca:2b:f4:a1:14:70:
b9:f5:eb:46:1b:af:69:5a:6b:8e:c6:98:8a:bc:50:
a4:46:12:8d:63:2b:47:60:76:96:42:10:36:a7:3f:
a6:38:cf:69:17:25:22:0d:d7:6a:11:81:78:19:d4:
3f:ab:99:8d:1c:e2:8c:2b:18:c8:e1:bc:aa:af:f8:
53:ee:16:67:52:0f:73:e7:76:91:60:31:70:a9:fe:
5d:cd:a3:cf:4f:f4:3c:3f:32:0d:50:de:ee:ca:a7:
03:a7:a4:2a:fa:74:21:1c:40:aa:c2:72:fa:70:35:
de:4d:17:3f:c3:ab:05:a8:15:e3:10:a8:88:d1:bf:
d7:39:4e:cc:e8:22:4c:12:25:73:d9:47:d3:09:e5:
ba:55:be:cc:36:bb:d9:90:68:e8:3e:b2:4c:8f:a3:
79:c9:6e:e9:b5:b1:da:39:74:85:f1:b7:9f:60:d7:
41:d9:54:11:e9:de:07:f7:da:c0:90:89:20:df:f3:
c9:70:b1:d4:f0:ff:0e:a9:20:2f:e6:ff:20:c2:50:
2a:d6:eb:2b:17:2f:0c:41:16:8d:6a:31:e1:73:e7:
7e:b2:e5:1c:14:5a:8a:8c:45:ee:75:43:e5:f8:bc:
b7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:20:D0:96:AB:8F:E9:E1:06:1E:28:1F:81:57:CA:AC:0F:4B:B6:B4
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143423.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a305::/32
Signature Algorithm: sha256WithRSAEncryption
64:41:67:0b:4a:ef:f1:24:b2:98:d5:9a:8f:0b:e6:45:e6:ee:
ae:ec:78:5e:4a:cf:70:04:a2:a3:0c:f3:40:e8:fd:42:0f:f0:
8b:01:a8:9c:55:f6:f6:bc:ce:89:a3:ad:f9:ce:c6:88:ed:a3:
1e:5e:df:81:1e:83:a3:e4:7a:8c:8f:41:ac:4f:e7:92:0b:8f:
7d:77:d7:1e:5a:55:49:61:11:fb:cc:99:20:ed:bf:84:04:0c:
c1:30:f9:ad:ac:94:f1:22:5d:75:3e:a8:8b:17:7b:d5:6d:5f:
ae:61:f5:03:87:97:fe:b0:a6:99:33:d0:b4:84:6e:92:83:02:
b5:11:b5:3d:3e:d9:5d:31:70:cb:94:93:b2:1b:e7:2a:6c:f6:
8f:4a:03:9d:66:74:cf:84:8d:cb:c6:53:b0:3c:26:61:fa:1d:
1c:22:31:12:17:a7:38:d8:38:93:8c:47:67:05:ce:ee:18:16:
3e:59:73:2e:e9:93:7c:40:be:58:05:75:01:e1:9c:ff:c1:98:
68:33:e7:26:a7:71:32:19:3b:99:e7:4f:ee:67:30:01:cb:e8:
ff:91:d1:4c:66:aa:74:a8:98:9a:35:5a:60:75:6e:a7:f1:58:
bd:02:32:59:c1:dd:87:e8:a7:4f:93:22:d9:08:12:24:b0:a7:
d5:8c:ff:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:43 2026 by rpki-client