Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143560.roa
File: AS143560.roa (raw, json)
Hash identifier: rsa4yhh56VcIP7EK7aTzMLoolHVSuuognkmcg98FPSU=
Subject key identifier: 7A:DC:55:BB:43:32:15:63:A5:DD:E2:70:AD:CC:EF:97:79:21:85:23
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3683A256C0A1E0BA7DC7FBF3DB03AE3E9D6AB707
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143560.roa
Signing time: Fri 22 May 2026 06:46:34 +0000
ROA not before: Fri 22 May 2026 06:41:34 +0000
ROA not after: Fri 21 May 2027 06:46:34 +0000
asID: 143560
IP address blocks: 240a:a38e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:83:a2:56:c0:a1:e0:ba:7d:c7:fb:f3:db:03:ae:3e:9d:6a:b7:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:34 2026 GMT
Not After : May 21 06:46:34 2027 GMT
Subject: CN=7ADC55BB43321563A5DDE270ADCCEF9779218523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:57:35:c9:62:0b:fd:ad:aa:cc:93:99:7e:7a:
fa:6a:6b:d4:10:23:66:88:dd:13:31:58:22:fc:0a:
e7:2d:2d:d0:7f:39:e7:78:d4:6c:4c:7a:1b:df:ef:
6b:3c:c9:c5:f1:7f:22:95:3c:11:c4:73:7c:61:a1:
b8:46:43:b3:35:09:6d:ec:41:e7:b5:70:bc:4b:0a:
3f:aa:ff:bd:22:2f:64:8f:13:fe:f6:37:5c:68:12:
88:19:d9:4f:ab:ac:94:cc:84:97:fa:58:ab:ab:21:
2d:19:7b:f5:59:8f:06:71:a7:33:cb:3a:15:f6:82:
fe:8b:60:6d:82:80:4b:c1:30:5a:f3:37:67:b6:42:
a4:31:8b:04:6b:d0:73:28:45:9b:d3:3a:8a:ca:ee:
89:7b:c7:d4:a8:dd:4f:ad:d1:ad:21:0c:5b:4e:3b:
b4:44:d4:34:96:36:56:b7:18:33:ce:b1:ec:57:93:
37:63:14:6c:aa:6f:86:b9:29:65:b8:77:d8:85:21:
c9:8f:cf:f5:63:02:e7:26:d0:ed:89:a8:81:0e:2b:
ac:f5:42:aa:33:3e:61:87:71:2d:d5:44:52:4b:eb:
a6:91:3a:77:c7:4f:11:73:d3:e8:86:76:c9:2a:58:
84:98:27:a9:fe:98:fa:43:1a:5f:eb:0e:63:69:69:
49:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:DC:55:BB:43:32:15:63:A5:DD:E2:70:AD:CC:EF:97:79:21:85:23
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143560.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a38e::/32
Signature Algorithm: sha256WithRSAEncryption
3f:b6:6c:34:cc:a8:a9:70:bc:10:86:0e:9a:17:2c:82:83:30:
fc:28:ab:53:d6:46:df:a9:8a:8e:6b:ae:56:35:5c:50:47:66:
f5:a4:00:5f:2b:83:fa:ff:5c:57:40:ce:5d:10:54:7f:aa:34:
5c:93:c2:f9:61:93:73:c9:b0:45:94:5b:f3:74:dd:35:63:0d:
bb:17:a9:43:4f:43:92:0e:7e:6d:76:65:0b:21:a5:29:dc:b3:
1c:61:38:8a:3e:83:a4:c4:54:36:7d:b8:df:e8:d9:8a:4a:40:
cd:bc:a2:4c:07:f2:5f:14:52:60:73:7d:44:36:c5:8c:80:b9:
0a:49:a6:68:44:ac:3e:68:eb:0e:77:e8:0a:9a:76:cf:24:48:
0c:c1:9c:75:42:a4:be:06:f4:3e:53:a4:48:84:4d:1f:fe:f5:
03:13:55:74:fb:6d:87:67:45:cc:5b:38:71:14:bc:3d:e1:3a:
32:ef:98:d6:0e:87:75:84:03:dd:85:89:41:4a:f8:35:71:61:
18:b0:0f:4f:95:51:d4:c8:99:3e:c3:01:9d:6f:59:74:31:8a:
f0:a4:88:ff:bb:c7:d7:9b:b8:e9:29:11:37:57:8b:d8:8b:42:
a0:63:e4:48:30:16:17:6f:a2:c8:d0:e7:73:c4:ed:0e:36:2d:
79:e1:1f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:09 2026 by rpki-client