Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143668.roa
File: AS143668.roa (raw, json)
Hash identifier: aKd5HACZFTX8r0Owz30ZZ9YApYkWxnv02VQeD1e48AU=
Subject key identifier: 42:F3:30:C7:94:37:19:47:6C:FC:87:42:F7:64:47:86:41:E0:4C:77
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 34A3B77815CAE79EC89D2E833FE0B10904DD85C8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143668.roa
Signing time: Tue 26 May 2026 06:12:37 +0000
ROA not before: Tue 26 May 2026 06:07:37 +0000
ROA not after: Tue 25 May 2027 06:12:37 +0000
asID: 143668
IP address blocks: 240a:a3fa::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:a3:b7:78:15:ca:e7:9e:c8:9d:2e:83:3f:e0:b1:09:04:dd:85:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:07:37 2026 GMT
Not After : May 25 06:12:37 2027 GMT
Subject: CN=42F330C7943719476CFC8742F764478641E04C77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:27:8e:02:5b:cb:d1:40:c1:d2:a4:d3:ed:4e:
43:14:fa:f4:b8:1a:ec:3b:f2:b5:8b:dc:8e:c7:9e:
3d:a4:40:c4:da:33:ec:48:27:9f:50:0f:93:3c:6e:
c5:3a:df:ff:8d:79:7b:01:38:d2:df:f9:fa:52:7c:
d3:39:07:99:e4:63:62:d0:75:01:71:61:44:7d:22:
db:65:e2:bf:3b:15:95:91:0f:aa:29:81:f1:94:34:
8b:95:e1:ce:f4:65:94:88:5b:4f:78:fd:b0:a8:4a:
c8:53:61:76:49:de:ab:f9:71:ba:08:d5:1a:f0:33:
a2:17:ce:ec:01:b0:96:1e:a0:2d:83:2d:6b:3c:22:
da:47:f3:43:3e:bf:63:a9:34:b3:da:ff:cb:86:95:
57:7c:5f:65:c9:f9:31:4d:8a:c4:0f:98:a8:ef:c1:
59:6c:82:bc:c7:6b:59:4d:f5:1c:77:27:ff:94:bc:
eb:96:37:2f:01:b4:36:2e:a7:15:00:99:0c:a1:3e:
d5:8b:76:67:4c:61:eb:a6:81:c9:fa:f8:33:c1:9e:
84:db:5c:67:35:b1:03:90:91:5b:77:d2:b2:b3:94:
ce:c6:6f:dd:9a:06:f9:31:8b:a1:3a:c5:23:63:90:
65:79:6a:da:6a:e9:81:e9:26:f1:a8:6c:de:2e:8e:
d1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F3:30:C7:94:37:19:47:6C:FC:87:42:F7:64:47:86:41:E0:4C:77
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143668.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3fa::/32
Signature Algorithm: sha256WithRSAEncryption
4c:57:94:63:86:0b:c8:c4:23:88:ba:50:78:90:fd:28:c2:60:
a0:b2:8f:04:bb:91:41:1e:cf:ad:d6:d6:60:fa:4c:46:d2:90:
e6:a5:37:1c:21:4d:b6:9e:aa:b3:08:80:b6:e9:23:28:9f:eb:
f8:0c:65:32:45:ec:20:c4:ba:5a:f0:1f:bf:3e:b6:4b:1b:97:
e4:c0:29:1a:72:a2:36:80:f5:1c:50:89:c0:1b:87:89:47:d0:
c0:d6:68:93:94:72:89:d8:8f:31:5f:42:f8:ff:d1:02:49:d1:
e5:3c:f7:2d:9b:b8:84:38:c4:4e:c6:e3:04:2e:b2:cb:89:3d:
eb:03:02:d7:31:a7:92:3c:2b:51:3c:9d:70:b6:8c:38:2a:85:
d8:82:21:22:85:2b:89:ac:f2:08:96:62:34:3d:02:be:6e:81:
9c:d4:a2:a0:8f:be:5b:85:12:e6:bf:17:96:86:95:35:e9:84:
5f:f7:20:fe:40:ce:a6:6e:9d:3d:4c:6c:b8:4a:76:bd:32:b4:
72:21:80:d8:ec:c5:73:ed:ff:5b:04:9f:4c:49:ab:aa:a5:7d:
6c:5e:89:ea:74:0e:ec:7d:7c:7e:bc:08:2d:b2:a8:dd:24:a7:
1b:99:e5:ee:89:84:84:e8:b4:76:a5:9f:2e:20:35:f3:7b:08:
25:42:1c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:24 2026 by rpki-client