Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143589.roa
File: AS143589.roa (raw, json)
Hash identifier: RghMf9G5/mliRs68F7ctRUnYK8mVHdHk+RwjZAR6O08=
Subject key identifier: 94:C3:FB:E6:6C:8B:5C:AF:A3:5D:C3:26:66:30:92:F2:61:DA:11:A4
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 133D994FEC5712F8BE89A1346A34D946767C8729
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143589.roa
Signing time: Fri 22 May 2026 04:27:04 +0000
ROA not before: Fri 22 May 2026 04:22:04 +0000
ROA not after: Fri 21 May 2027 04:27:04 +0000
asID: 143589
IP address blocks: 240a:a3ab::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:3d:99:4f:ec:57:12:f8:be:89:a1:34:6a:34:d9:46:76:7c:87:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:22:04 2026 GMT
Not After : May 21 04:27:04 2027 GMT
Subject: CN=94C3FBE66C8B5CAFA35DC326663092F261DA11A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b6:2e:fe:3f:8e:ee:72:14:2b:c4:60:84:df:
97:b9:a9:6f:1e:70:3a:5e:e8:7d:2f:3a:3d:e6:49:
fd:d5:1b:40:09:48:74:d1:7e:8e:79:85:51:b0:a6:
a4:46:8f:78:44:22:15:c1:21:c0:20:9a:b5:62:81:
92:8e:9e:54:6b:8f:f8:4c:52:d5:e6:a7:ed:ab:29:
2d:a6:4b:71:32:58:bd:fb:9a:e5:95:c9:f0:25:03:
a4:45:1e:3e:9f:88:ae:dc:39:4a:49:38:91:6a:4b:
56:1f:e4:f1:3a:9d:ff:39:2d:1b:e7:50:a2:a8:45:
4e:e6:fb:7a:7e:a1:a2:65:0a:1c:1c:9f:33:bd:4b:
76:39:ea:9f:57:3f:25:5c:57:fc:5b:cd:89:d4:be:
b8:fb:27:60:ff:a7:50:1f:34:16:39:8c:d0:b7:34:
6d:6c:83:06:50:c1:38:31:80:77:d7:62:9d:18:36:
b4:63:70:b8:5a:2c:c1:2f:9b:88:12:b4:a3:51:5a:
97:0f:e4:23:95:b6:87:be:ae:dd:0a:27:7e:88:a2:
e8:47:54:8a:bb:1f:3c:93:3a:4b:9a:be:75:da:4b:
44:34:24:62:a8:be:d7:d0:5e:06:99:27:2f:49:39:
d8:b0:d7:cd:76:79:65:cf:95:b5:72:af:72:98:49:
22:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C3:FB:E6:6C:8B:5C:AF:A3:5D:C3:26:66:30:92:F2:61:DA:11:A4
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143589.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3ab::/32
Signature Algorithm: sha256WithRSAEncryption
94:7a:0a:ca:0c:a9:45:73:a5:e1:39:94:38:c7:bc:21:57:59:
5b:cd:f1:ef:b9:f2:c5:7a:f9:a3:10:41:cb:8e:24:1a:f4:39:
71:1c:46:65:88:6e:87:98:4c:18:4e:59:81:1c:1d:89:67:99:
42:11:fb:eb:72:86:7d:2c:b2:98:11:1e:f4:e0:44:b8:17:17:
21:8e:86:05:d4:6f:ca:aa:1f:9c:06:98:fa:9a:4d:6d:8d:35:
e4:26:ed:54:ec:a4:14:e4:af:c3:a3:e4:96:ab:ba:02:80:16:
86:65:b2:6e:2b:b9:3f:04:85:a6:27:aa:7c:8b:34:65:18:e0:
57:aa:4c:2d:fc:51:b5:27:af:80:16:7b:cd:62:38:a8:ab:e2:
7e:e8:7c:65:9e:bb:c1:dd:6f:82:08:13:40:34:44:85:2e:16:
bf:84:eb:db:cd:60:d8:28:20:77:44:e5:fc:17:13:ef:ec:27:
b3:ff:80:9a:db:32:37:0f:0c:13:1e:9c:16:08:68:e4:9a:59:
c4:c8:b5:aa:02:b2:3b:10:06:1a:cc:d0:26:be:32:1d:a5:f2:
c0:c4:65:34:8a:9f:15:bc:26:4c:5f:46:e6:c8:79:29:a8:ee:
87:17:f3:f5:ab:2e:08:66:b0:13:30:67:6e:48:5e:b9:3b:a8:
ee:74:19:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:31 2026 by rpki-client