Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143590.roa
File: AS143590.roa (raw, json)
Hash identifier: jLavZaaQoxA/9xoV78fOkKFzdGE0UlXraXmRDGv27po=
Subject key identifier: 1E:3D:BA:6B:3B:36:DD:F4:B0:89:50:AF:D6:6A:5E:8C:AD:C3:65:F2
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5C6C4C6E195C5E4E49AF06EC2A1353A70AE4986D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143590.roa
Signing time: Fri 22 May 2026 06:05:39 +0000
ROA not before: Fri 22 May 2026 06:00:39 +0000
ROA not after: Fri 21 May 2027 06:05:39 +0000
asID: 143590
IP address blocks: 240a:a3ac::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:6c:4c:6e:19:5c:5e:4e:49:af:06:ec:2a:13:53:a7:0a:e4:98:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:39 2026 GMT
Not After : May 21 06:05:39 2027 GMT
Subject: CN=1E3DBA6B3B36DDF4B08950AFD66A5E8CADC365F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f2:d0:98:70:0d:58:df:34:8d:4c:01:c1:21:
40:79:50:92:ac:26:d5:43:a8:4a:60:16:ad:01:e6:
af:fe:03:b5:9b:0b:dc:a1:c9:49:1c:8b:67:f9:ae:
3c:be:36:72:29:57:b4:99:7d:59:6a:8a:bc:ab:de:
14:a5:56:0f:50:87:09:59:39:5a:67:0f:21:49:58:
c3:9a:44:5b:59:1b:69:f3:07:e1:e0:ab:04:f0:69:
75:67:94:69:88:62:db:dc:b0:5a:b2:52:f1:75:75:
6b:7d:d1:89:5f:cf:62:e7:35:1e:04:91:69:dc:31:
0b:56:f8:b3:b6:dd:c5:fe:67:e2:d3:60:01:84:50:
2a:9e:59:15:2c:74:c1:95:95:96:56:9b:d8:38:30:
c9:ab:8c:28:0f:a3:8c:a5:5a:23:62:0b:9c:7f:3c:
af:7b:5e:66:db:3a:d5:8f:ac:8b:fb:02:47:e6:4b:
f4:61:46:c5:2d:71:1f:c0:0b:a2:54:0c:25:59:8c:
c7:59:51:32:57:10:38:23:d6:9b:5f:1d:e6:e6:fe:
30:17:91:45:41:d6:0f:63:4f:e6:d7:b8:32:75:db:
11:3c:86:a7:ca:61:ac:de:d7:34:de:e6:2f:10:24:
3a:c2:57:63:45:8d:70:fc:e5:5f:f6:58:37:b4:5e:
9e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:3D:BA:6B:3B:36:DD:F4:B0:89:50:AF:D6:6A:5E:8C:AD:C3:65:F2
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143590.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3ac::/32
Signature Algorithm: sha256WithRSAEncryption
5e:28:ab:92:de:7e:86:b0:51:1b:77:51:09:5f:0b:88:69:77:
7e:68:58:b9:c2:f8:55:29:7b:4c:c4:72:c1:4c:7a:10:b4:96:
9b:e7:f5:75:6b:d7:c0:63:c1:25:e2:eb:6a:27:c5:2e:c6:62:
c3:84:78:ca:d8:f5:49:19:ed:f3:fd:31:7f:1a:2a:b7:95:02:
23:49:c4:fe:4f:6b:29:40:fa:e3:e1:d4:4f:3b:42:83:5f:02:
17:7d:91:14:77:a3:84:af:72:d7:70:1a:01:a9:ca:91:35:64:
2a:c3:41:18:2f:7f:89:22:86:a6:b7:a9:5f:b9:cd:67:e6:f5:
53:ce:be:8e:ee:68:9b:4b:22:73:4d:95:d5:07:33:b1:bf:31:
19:e1:11:25:9c:01:dd:de:12:c8:c7:3f:b4:ba:fb:03:fb:d9:
8e:b3:d7:e0:c7:2a:07:ac:7c:ad:98:e0:88:d3:0c:b3:d7:47:
6e:74:08:27:bb:e1:5c:a1:30:85:06:63:33:85:ae:72:bc:bf:
45:8e:f7:02:4f:10:9c:45:44:0a:07:25:a8:c2:7e:c2:c0:46:
1d:16:74:13:78:9f:36:6b:dc:79:77:0a:4a:a9:1a:00:29:25:
b7:17:69:79:ee:bf:14:71:48:e9:88:4d:38:6b:bd:cf:a1:2d:
61:43:f2:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:23 2026 by rpki-client