Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143626.roa
File: AS143626.roa (raw, json)
Hash identifier: 2nBprgSVhal/FcVvmVGRqsTFddin9twynUyQ84Ts/pI=
Subject key identifier: 28:63:10:68:8C:B2:73:27:8D:DC:F5:CE:34:D7:D7:FF:2C:8F:CD:CD
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 138E2D863DBD54B2AB2134B7A650DD12B3DE5BB6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143626.roa
Signing time: Mon 25 May 2026 02:22:31 +0000
ROA not before: Mon 25 May 2026 02:17:31 +0000
ROA not after: Mon 24 May 2027 02:22:31 +0000
asID: 143626
IP address blocks: 240a:a3d0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:8e:2d:86:3d:bd:54:b2:ab:21:34:b7:a6:50:dd:12:b3:de:5b:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:31 2026 GMT
Not After : May 24 02:22:31 2027 GMT
Subject: CN=286310688CB273278DDCF5CE34D7D7FF2C8FCDCD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f7:91:4f:c3:94:f3:ec:6f:dd:65:d6:9c:37:
52:09:64:c6:11:15:48:b4:1c:8b:d7:d6:45:7a:0d:
60:45:35:57:8b:7b:27:f6:fb:65:9d:d7:9f:0a:66:
fe:ac:db:c6:ea:1e:d9:5a:01:33:3b:58:61:4e:a4:
63:88:e4:fd:0d:1c:d9:73:54:02:fa:c0:c4:02:0d:
3a:e0:ed:ad:65:d3:a2:55:69:ce:b4:90:fd:cc:47:
f9:c4:be:7f:32:ea:7a:54:d4:50:35:41:bf:b2:3e:
0c:0e:7f:11:ae:69:41:19:b3:98:9f:f1:d2:31:8a:
1b:ca:37:60:ad:54:43:2b:97:c6:de:e6:f0:8e:29:
fc:b3:99:86:a3:04:fa:67:0f:d7:6d:96:2f:5e:c7:
b7:91:47:10:0d:ec:3b:93:0e:70:09:29:33:57:25:
9c:17:70:92:93:81:64:f3:de:99:34:75:ba:50:76:
4f:5c:71:82:10:c9:50:e5:06:29:4c:50:f8:42:ad:
57:5c:a6:dd:3a:41:bd:5a:bc:ac:b7:66:ad:6a:ed:
95:d6:7b:8f:ac:14:56:a6:6b:b3:c4:2f:fb:a2:2e:
d5:d2:18:18:9d:26:93:08:f1:54:d4:27:4b:eb:fb:
0d:80:0e:78:fc:4b:44:82:26:8f:b9:6b:27:70:90:
94:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:63:10:68:8C:B2:73:27:8D:DC:F5:CE:34:D7:D7:FF:2C:8F:CD:CD
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143626.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3d0::/32
Signature Algorithm: sha256WithRSAEncryption
ae:1f:c3:26:0d:c6:db:c9:54:06:96:9a:86:c0:d8:57:6f:66:
77:20:14:1b:56:d3:c4:ff:45:38:f0:eb:0a:81:9c:66:05:3e:
89:92:24:73:c9:75:44:06:55:36:84:2c:08:56:6d:c1:fa:94:
42:a3:6b:4f:ef:e8:77:c7:6d:9d:16:0d:eb:82:6a:7d:5c:d0:
9c:cf:a7:a9:37:a0:85:3d:ff:ee:ef:bb:3a:6b:ca:d3:03:f0:
58:e6:27:6e:44:4c:c2:6b:f9:51:03:fc:73:cf:ed:a9:e3:24:
0f:fe:0f:66:44:48:b6:d8:9b:eb:75:e2:3f:fb:5a:1d:45:d6:
6b:ae:80:68:1f:39:37:61:a2:85:7a:47:d8:3a:1a:2d:dc:62:
aa:47:1e:9c:8c:2f:51:e0:4d:25:f3:7e:fa:75:65:22:6e:96:
4d:8c:88:55:6f:71:6c:28:2d:d4:8c:3c:4b:7d:2b:b4:40:8c:
1b:50:a5:ce:c4:74:24:3e:6f:7e:d4:78:cc:12:b5:eb:f7:4a:
a7:39:d9:11:c0:92:0c:6b:f7:0d:c7:b3:d8:03:e9:73:5e:8d:
ee:17:fc:d1:d1:3c:78:70:0d:ec:8d:50:1e:d6:88:a2:8e:e0:
78:b1:94:43:15:e7:d4:f6:3d:4e:34:91:80:d5:04:51:71:ac:
ca:5d:de:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:44 2026 by rpki-client