Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143427.roa
File: AS143427.roa (raw, json)
Hash identifier: CoTbLT6gCaBQZxet3zV45QwfYQIAv1gijm6nI6NjTJY=
Subject key identifier: 68:52:2C:C1:E4:F1:94:76:10:71:7D:E7:ED:EE:E9:8D:98:DB:E1:C7
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1DA96E35F68E78093A95131BDB922E61991C61FC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143427.roa
Signing time: Fri 22 May 2026 07:09:10 +0000
ROA not before: Fri 22 May 2026 07:04:10 +0000
ROA not after: Fri 21 May 2027 07:09:10 +0000
asID: 143427
IP address blocks: 240a:a309::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:a9:6e:35:f6:8e:78:09:3a:95:13:1b:db:92:2e:61:99:1c:61:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:04:10 2026 GMT
Not After : May 21 07:09:10 2027 GMT
Subject: CN=68522CC1E4F1947610717DE7EDEEE98D98DBE1C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:36:b6:8b:72:4c:54:e4:75:b0:54:00:f7:94:
c1:5a:20:a3:5f:54:ed:07:a9:31:db:b8:7f:fc:8c:
85:57:9e:96:ba:fd:3c:22:26:e5:45:07:78:2f:c9:
0a:f4:66:bf:f5:6c:6b:b6:8c:42:68:84:d3:43:c5:
32:15:21:54:e6:27:2b:cc:6d:ff:df:37:92:c0:0e:
a2:ad:b4:64:ac:8b:15:c7:bc:4d:99:90:8e:60:4b:
cb:0b:67:fb:83:d6:b0:00:fb:c6:02:22:36:29:60:
8c:4b:5d:72:99:94:0d:8c:cd:06:54:b0:d5:ff:c9:
96:c7:fe:67:da:8d:03:9f:95:ef:e4:89:42:ca:05:
cd:f1:aa:ef:d9:26:5b:92:98:d0:9d:1c:9e:68:35:
79:e9:fc:89:4c:55:d6:e7:5b:a4:28:e5:b4:35:45:
c5:c1:9b:01:8f:86:72:fc:6d:66:72:09:a8:0d:00:
1b:ae:70:78:b4:af:b3:f3:ff:a2:ec:f3:59:1f:7e:
08:21:3a:5d:b4:6a:38:80:1b:eb:bd:90:ef:11:d6:
82:5c:c6:1c:2a:68:80:8d:18:3f:13:df:8c:6a:ca:
6d:a2:1f:d4:f2:d2:37:44:09:5a:b4:ef:4c:9f:1c:
d8:cb:0a:a1:a9:47:51:8c:04:d8:76:30:cd:e0:95:
a1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:52:2C:C1:E4:F1:94:76:10:71:7D:E7:ED:EE:E9:8D:98:DB:E1:C7
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143427.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a309::/32
Signature Algorithm: sha256WithRSAEncryption
2b:e9:41:35:92:a0:fc:d3:3a:3d:39:62:a1:b9:1d:8d:45:43:
11:e4:7b:e1:60:4b:4c:59:36:da:bd:d0:11:66:01:63:da:8a:
12:18:2f:b4:90:fa:16:79:a5:b9:4f:71:b3:a2:8e:31:a5:95:
85:37:9b:e3:6f:2c:1e:10:69:d6:ae:07:2e:3f:e4:dd:2a:18:
61:c0:56:09:3a:07:17:2f:81:05:c6:bf:5c:06:5d:0f:8c:15:
b9:df:f6:65:f5:e8:e8:29:01:58:12:6c:15:f4:98:f2:90:5f:
91:bf:92:20:12:49:90:ae:03:e6:6f:cf:69:4e:e7:13:b2:ff:
7d:58:d9:30:94:fc:6a:75:ae:a8:61:b3:11:51:b3:02:9b:4b:
af:b5:59:a1:af:0e:4a:21:37:3d:b4:09:a2:cf:ae:72:70:40:
f7:55:7e:77:1d:e0:6e:2b:16:c7:d6:9b:3d:09:62:1e:20:01:
de:f8:e8:ee:d9:1a:06:20:8c:ea:05:bf:b5:c8:d0:4d:6c:3b:
5f:e1:27:fd:75:b3:8d:29:03:6e:ee:5d:17:63:d5:fe:21:f3:
36:4e:32:d7:77:61:08:02:a7:8c:5b:76:24:89:ac:5e:d0:75:
a3:4d:38:86:9e:30:b0:7c:14:68:32:76:28:28:b3:5c:b6:f6:
f3:c2:ca:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:00 2026 by rpki-client