Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143578.roa
File: AS143578.roa (raw, json)
Hash identifier: r0gmtDwM2Orb8M4l4v/S/unEkLmbX+2eZcwsB/JVuBE=
Subject key identifier: 0A:04:58:25:37:52:3D:10:2D:C0:E2:DB:FE:9B:6C:A8:C5:36:1D:1B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7DFC24E0EA6259ADA7D2073DB7C9E2475F75378B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143578.roa
Signing time: Mon 25 May 2026 02:22:33 +0000
ROA not before: Mon 25 May 2026 02:17:33 +0000
ROA not after: Mon 24 May 2027 02:22:33 +0000
asID: 143578
IP address blocks: 240a:a3a0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:fc:24:e0:ea:62:59:ad:a7:d2:07:3d:b7:c9:e2:47:5f:75:37:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:33 2026 GMT
Not After : May 24 02:22:33 2027 GMT
Subject: CN=0A04582537523D102DC0E2DBFE9B6CA8C5361D1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:19:e8:38:2c:6d:5b:51:ff:0d:15:a0:dc:57:
13:1d:78:b5:99:69:a0:a6:b4:b5:e7:d6:c4:20:fc:
b1:0f:d3:21:58:15:30:1f:b5:6e:99:05:fd:34:0a:
a8:9b:47:a6:c2:b6:70:c9:2d:73:2b:6e:77:20:02:
12:96:e2:7a:d3:d1:51:45:3f:a9:7d:ef:4e:b0:46:
f5:1a:67:86:85:fe:c7:b8:76:65:34:a7:7f:e8:5a:
0e:55:40:8f:45:0e:58:4e:be:33:48:12:95:1d:49:
0c:84:c4:6f:79:98:63:e1:a1:b7:ca:fa:03:d8:66:
09:bb:0e:be:89:7f:90:b4:17:e0:db:1f:39:1a:43:
ad:03:94:13:dc:30:f3:8b:30:7a:d7:85:d1:aa:05:
13:38:09:23:3d:87:35:2d:5d:c7:86:0e:56:0c:27:
55:da:4d:e7:1e:dd:33:68:5a:cc:de:ce:59:77:64:
6d:1b:64:ce:28:25:00:6f:40:01:66:89:cf:45:97:
b7:34:8c:50:79:64:fa:4f:58:7f:17:21:c4:ca:b1:
e6:ad:2c:ab:85:61:2e:14:3d:1c:86:b9:e0:fc:71:
cc:06:04:9c:16:3f:83:6b:66:c3:53:5d:73:d7:ed:
36:85:0e:20:ae:44:53:27:2f:e0:ef:99:99:74:05:
77:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:04:58:25:37:52:3D:10:2D:C0:E2:DB:FE:9B:6C:A8:C5:36:1D:1B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143578.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3a0::/32
Signature Algorithm: sha256WithRSAEncryption
25:90:2e:c4:58:2b:05:9b:41:6a:9d:75:11:db:d3:6f:08:23:
3b:5a:59:b5:49:c9:e0:2f:62:c5:00:6a:a3:38:b9:93:9e:0e:
8f:9c:14:9a:fc:1c:a0:40:52:1e:33:7c:c3:e4:d8:be:cc:ec:
36:e4:65:02:8a:73:51:e9:2a:32:d1:79:88:02:73:04:2b:e7:
2e:c4:de:bd:2f:1f:c3:95:fd:4c:d5:2b:d0:f6:0b:c9:36:04:
ed:cf:20:0e:4c:8f:27:c8:9d:f7:df:16:3e:6c:bb:db:00:23:
61:da:c4:fe:03:b1:d0:a6:db:aa:82:e1:61:dc:21:94:c0:b8:
60:e2:b5:c1:84:48:3a:d3:b0:82:35:87:23:f1:6c:cd:bc:72:
6f:c5:09:b9:ac:4f:f2:79:dc:c7:8a:84:9a:95:67:aa:26:14:
b6:76:45:0b:32:58:37:b9:f0:16:cb:88:f5:bd:05:5d:f5:94:
d4:ca:87:b8:3a:f3:1a:d4:b1:86:9c:52:ac:78:1f:25:de:cd:
9e:82:a1:5f:69:98:77:ce:24:c9:5c:b8:49:1f:f2:08:43:de:
a6:b2:06:df:ec:34:00:65:0d:c1:30:4b:76:05:b0:77:3b:5f:
9c:e5:47:ee:f0:0a:ff:d9:f9:82:e7:08:d4:ce:0a:4d:7b:ff:
c5:9d:b5:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:20 2026 by rpki-client