Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143666.roa
File: AS143666.roa (raw, json)
Hash identifier: i6YOcSLL1UPU5E6Ew75phtgzqlj7Zzp8djDPqs1HpyY=
Subject key identifier: 9D:3D:FE:84:FD:E2:EA:1C:EB:4D:3F:51:82:30:C1:F0:94:6D:E9:63
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5F158D7B19D99A3F9BF7C5E39319C6CF1CF67938
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143666.roa
Signing time: Tue 26 May 2026 06:30:46 +0000
ROA not before: Tue 26 May 2026 06:25:46 +0000
ROA not after: Tue 25 May 2027 06:30:46 +0000
asID: 143666
IP address blocks: 240a:a3f8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:15:8d:7b:19:d9:9a:3f:9b:f7:c5:e3:93:19:c6:cf:1c:f6:79:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:25:46 2026 GMT
Not After : May 25 06:30:46 2027 GMT
Subject: CN=9D3DFE84FDE2EA1CEB4D3F518230C1F0946DE963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:17:4f:1f:d3:75:e7:c3:b5:8c:73:2e:1d:ce:
86:79:e6:f5:5a:66:45:b7:bc:73:ea:3e:53:6d:ac:
61:0e:a1:f6:26:e8:3f:be:81:ec:3b:b7:8b:b3:a9:
d6:47:37:73:9c:f6:9d:2a:60:62:a4:39:49:d7:f8:
86:0d:68:32:16:72:41:a4:c9:ab:df:a7:c3:a9:e5:
ee:a3:90:37:96:e5:56:14:e9:75:18:a1:3e:d7:00:
af:c0:7d:24:a7:45:76:70:0a:0a:ac:e6:9b:93:5f:
5d:9d:2e:9a:7c:91:1f:de:58:1a:fe:cc:ca:cc:e5:
80:28:1a:cd:c2:bb:8b:48:b4:44:b7:1c:d4:7f:46:
39:90:9d:98:72:92:26:39:bf:61:77:90:25:0d:e7:
1d:30:53:3c:5a:64:25:06:d9:1a:e0:45:5c:8d:e6:
02:16:2d:bd:df:81:91:20:c0:38:e1:28:5c:1b:1c:
e4:4d:5f:95:06:5e:4c:27:56:f9:e3:d9:07:6b:b4:
cd:9e:dd:cc:c0:fd:45:2a:af:dc:30:21:37:43:05:
99:eb:b6:f5:7e:c2:02:34:db:8b:37:15:b7:64:e6:
b9:7a:f6:d7:9d:e0:a4:e3:54:cc:46:68:00:96:7c:
fd:e1:09:cd:5d:b8:9b:17:e4:08:46:bb:62:39:f1:
88:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:3D:FE:84:FD:E2:EA:1C:EB:4D:3F:51:82:30:C1:F0:94:6D:E9:63
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143666.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3f8::/32
Signature Algorithm: sha256WithRSAEncryption
1d:35:09:15:44:7b:48:27:19:68:66:17:62:ee:10:2a:6f:79:
ab:79:5f:99:b6:95:24:71:a4:36:e9:8d:64:18:42:19:40:b1:
99:19:3b:7e:74:4f:2f:bb:e1:a5:d2:f7:e8:ea:49:af:51:ce:
6d:a3:20:85:ed:cc:69:ff:86:04:9d:da:b4:e5:95:ff:f8:48:
a8:49:e4:98:f1:ef:d6:1e:d1:d8:83:ef:1e:2f:be:33:98:57:
96:78:87:21:39:17:cd:3d:c9:db:fb:ed:81:40:11:d9:94:f6:
2a:31:60:fb:7c:24:9a:e1:42:dc:4a:1d:71:c0:f2:76:a7:be:
34:81:d9:8a:4f:c6:b0:d5:b5:db:a2:82:57:a5:0b:9a:0d:b5:
1d:6c:1d:08:57:b6:d2:6d:a1:f2:10:d2:fc:31:fd:82:95:c6:
17:24:5c:af:4e:db:d0:24:18:5f:a2:b8:e8:5f:68:b8:ce:84:
e3:2a:c5:fb:38:e9:07:de:a8:f8:ef:c2:aa:58:97:7f:fd:bb:
6e:2a:89:71:19:8d:be:ac:0d:a2:55:c9:c4:43:c8:35:c1:ba:
24:b4:fd:e4:fa:69:8b:15:93:3f:75:52:c9:53:1a:fa:40:3c:
89:b6:33:15:1d:10:e8:46:14:52:c4:82:bf:df:03:6a:87:e6:
6d:9e:11:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:08 2026 by rpki-client