Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143481.roa
File: AS143481.roa (raw, json)
Hash identifier: mDtmITSFLsjR37R1uOvQm/G9dZRbLts+vyPTJOoB6v8=
Subject key identifier: 01:2F:EA:AC:24:DD:C4:00:B5:23:AE:30:56:99:E1:5A:0E:13:87:0C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3D5E94B33F2E52BA21F17210644D2CF243FEF1BE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143481.roa
Signing time: Fri 22 May 2026 02:47:49 +0000
ROA not before: Fri 22 May 2026 02:42:49 +0000
ROA not after: Fri 21 May 2027 02:47:49 +0000
asID: 143481
IP address blocks: 240a:a33f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:5e:94:b3:3f:2e:52:ba:21:f1:72:10:64:4d:2c:f2:43:fe:f1:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:49 2026 GMT
Not After : May 21 02:47:49 2027 GMT
Subject: CN=012FEAAC24DDC400B523AE305699E15A0E13870C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f7:f5:72:fa:de:3f:3f:66:fa:f2:99:f9:10:
86:bf:88:83:e1:62:15:58:e1:56:18:fc:75:d9:0b:
8f:0d:28:b5:fa:4c:a4:10:4f:24:7e:05:cb:e7:16:
6b:9b:4b:10:68:f2:c3:96:10:7a:71:8b:84:99:a0:
fc:d7:6f:b4:1c:8c:28:e4:a2:92:23:9a:54:c6:f2:
3e:94:9b:3d:d9:58:e8:97:40:01:a3:00:70:f1:33:
99:11:70:d3:f6:23:66:f0:5f:43:e9:79:5c:64:ed:
95:04:9a:50:db:a4:5a:71:bc:44:f6:e8:be:7b:3f:
3f:a6:35:11:ce:03:0c:97:65:7e:03:57:1a:9b:05:
1e:ae:bf:1f:6b:10:56:c6:00:c8:51:69:66:b9:16:
8b:dd:b5:71:e8:cf:c8:36:bc:c5:91:11:f9:7a:8d:
25:43:3a:01:29:ec:49:61:d1:37:fb:e6:eb:3e:b4:
c8:94:9d:9e:bb:19:01:4b:00:43:ef:5b:f3:a2:ca:
fb:a0:0b:fe:f5:dd:97:06:46:96:db:51:27:01:23:
9a:6d:e7:cb:46:b4:3a:08:52:63:48:6d:ee:f6:f7:
c3:18:ec:5d:e3:ab:9d:e1:9f:1c:c3:a7:a2:84:f5:
c6:10:16:ba:3e:d3:c5:8e:df:66:8d:17:0f:b9:cc:
ba:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:2F:EA:AC:24:DD:C4:00:B5:23:AE:30:56:99:E1:5A:0E:13:87:0C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143481.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a33f::/32
Signature Algorithm: sha256WithRSAEncryption
8b:68:88:61:15:6e:2e:9e:54:58:68:dd:fc:43:18:71:9c:26:
e1:a0:28:68:96:13:20:3b:1c:b6:83:64:12:4a:df:0e:3a:1a:
90:d8:0e:52:11:18:b8:71:6b:7a:e6:8d:ad:c3:1f:9c:c1:8f:
73:c9:0d:3a:84:94:29:c3:71:9c:eb:74:1d:1a:1a:62:48:a2:
d0:ba:99:22:cb:5c:44:f2:1b:29:11:aa:26:ff:42:31:85:22:
aa:af:7b:73:43:19:91:63:69:82:6e:d1:53:9f:98:5b:a0:a7:
d6:a3:5e:52:9b:63:c2:08:97:01:2d:df:bd:96:1e:ad:5d:b8:
a0:bd:38:d2:7a:66:65:8b:16:15:ac:77:ad:0d:e5:f8:3e:11:
73:75:8b:48:08:37:c1:62:7b:6d:3d:35:0c:4b:23:b3:56:a0:
63:51:ce:50:bb:c3:73:f4:6e:9a:b1:70:37:c4:f0:48:c6:7f:
d3:32:3b:4a:34:bd:da:43:7b:44:ee:26:c4:b4:e0:29:af:03:
78:75:99:5b:3d:7d:2f:5c:26:04:81:db:b6:21:7e:bd:b6:8a:
29:5f:fa:79:61:22:c3:0d:27:ef:27:2e:27:c0:8c:3f:4a:63:
3a:03:e6:77:66:c6:57:d4:eb:cf:7b:0b:52:6b:2e:ed:99:aa:
d5:1e:f0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:27 2026 by rpki-client