Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143458.roa
File: AS143458.roa (raw, json)
Hash identifier: 2x/N5na9lm8dUuNLnTVMAhlufz4yU2GX6I62LnnKevY=
Subject key identifier: FD:9B:8F:8F:82:8E:5A:41:AC:EB:84:3C:1E:6A:72:17:DD:F4:F0:38
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3CA2BAF4F77FC8D164C369BC78A4FD58DEF865F5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143458.roa
Signing time: Mon 25 May 2026 01:51:27 +0000
ROA not before: Mon 25 May 2026 01:46:27 +0000
ROA not after: Mon 24 May 2027 01:51:27 +0000
asID: 143458
IP address blocks: 240a:a328::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:a2:ba:f4:f7:7f:c8:d1:64:c3:69:bc:78:a4:fd:58:de:f8:65:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:27 2026 GMT
Not After : May 24 01:51:27 2027 GMT
Subject: CN=FD9B8F8F828E5A41ACEB843C1E6A7217DDF4F038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2d:d2:3f:95:bd:2e:d4:c6:99:2f:69:ca:b7:
be:80:60:6a:3e:2a:6a:30:e7:18:94:48:be:c8:f5:
10:38:b0:24:94:a7:b4:ee:d8:c1:d9:4f:f5:05:93:
3a:28:55:79:0f:bd:83:ac:43:e0:29:85:c8:9c:0f:
d6:10:57:93:de:dc:65:d5:3d:ca:a9:d3:7d:50:53:
08:0e:2e:a0:46:f7:c3:f0:6f:48:d9:3e:77:07:43:
7e:5d:4f:e9:84:4f:0f:e6:2e:1f:da:8f:07:f8:be:
5c:75:76:96:c6:45:5c:73:f9:f3:1c:14:54:19:d5:
4b:96:84:8b:e3:b1:6c:09:20:11:8a:f3:56:19:8c:
5d:13:eb:ee:3c:f6:f7:a9:4d:55:c3:94:b2:8a:69:
72:84:6f:ba:5d:df:e9:2b:fe:51:6e:7c:85:a1:ec:
3d:75:9f:8d:1b:af:02:44:64:04:2a:88:a0:56:fb:
38:ce:8f:48:e2:2f:c2:48:06:f0:f0:c9:9b:66:e8:
dd:99:25:8e:85:df:5c:a3:52:c9:2a:86:33:05:7b:
e7:be:44:0a:16:df:f6:34:29:0f:bb:d7:de:c1:23:
5d:42:13:fb:08:fb:b1:ec:e3:28:21:c3:a2:be:62:
99:e4:a7:a5:f1:60:08:6a:b0:6c:61:17:a7:e0:e7:
f3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:9B:8F:8F:82:8E:5A:41:AC:EB:84:3C:1E:6A:72:17:DD:F4:F0:38
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143458.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a328::/32
Signature Algorithm: sha256WithRSAEncryption
62:69:29:49:dc:da:ed:07:25:6d:96:34:98:a1:e8:ee:19:52:
22:04:f1:fc:c3:ad:f1:5b:66:78:a6:d3:27:8f:e9:35:33:d5:
41:ed:ca:88:ee:84:fa:bd:a4:05:56:86:13:78:a7:a2:63:6e:
c1:2f:70:2d:93:6e:a0:86:f9:3a:9c:34:a2:3c:08:4f:9d:79:
77:80:98:3a:25:a5:fc:97:f3:6b:d8:05:8a:e9:1d:dd:20:03:
b5:82:d3:f4:60:7a:5e:35:75:0f:43:c4:8f:14:e5:2a:39:6c:
72:cf:e9:05:27:b3:54:61:b4:02:c6:fd:cb:15:dc:7c:ae:34:
6e:66:dc:d1:4d:0f:f3:2b:f0:6f:c8:0f:90:d7:14:21:96:ae:
d3:37:23:83:20:39:df:05:e4:f4:da:7c:5a:5a:25:40:16:59:
6a:bc:22:e3:8d:a1:c1:38:d2:d8:69:70:44:9f:69:c7:a5:ac:
a4:04:d0:09:a2:89:8a:f9:fa:73:8f:78:55:ca:ea:7b:3f:b4:
da:28:c0:91:8d:dd:b1:a7:a1:c0:4e:db:f7:84:cf:64:30:41:
65:d9:f6:74:29:1d:1f:8d:a5:b4:30:50:04:14:1b:e7:58:b8:
35:13:38:96:6f:51:3a:c4:89:9c:d4:45:7f:91:32:47:85:f1:
de:5e:1e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:51 2026 by rpki-client