Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143591.roa
File: AS143591.roa (raw, json)
Hash identifier: hrWkQTVjJuEphZxTgoaIRaujYQ9dkxUdNu1fbgxRzfU=
Subject key identifier: DF:17:A0:91:7A:4E:96:F6:13:65:4C:3F:D6:DC:A6:43:4F:D2:BF:8E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 332876E87B315A30C42CDB95B018E6EC3F6788C5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143591.roa
Signing time: Mon 25 May 2026 02:22:35 +0000
ROA not before: Mon 25 May 2026 02:17:35 +0000
ROA not after: Mon 24 May 2027 02:22:35 +0000
asID: 143591
IP address blocks: 240a:a3ad::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:28:76:e8:7b:31:5a:30:c4:2c:db:95:b0:18:e6:ec:3f:67:88:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:35 2026 GMT
Not After : May 24 02:22:35 2027 GMT
Subject: CN=DF17A0917A4E96F613654C3FD6DCA6434FD2BF8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:68:c2:76:d7:f0:11:e0:75:6e:5b:42:6d:23:
b3:06:99:9a:3b:e7:1f:8b:b8:23:59:59:53:1e:fe:
c0:94:8e:fd:5b:20:17:f1:2f:af:f3:58:f4:7f:23:
94:2e:f9:80:e1:d2:bf:81:6d:ff:1e:f2:d0:25:58:
50:8d:38:76:6f:fd:58:aa:d9:de:2f:b9:0b:ef:89:
7c:e1:e6:60:03:9d:55:9c:22:50:5c:ed:b0:c8:c9:
1f:ae:1d:1f:02:37:d9:71:00:8a:dc:05:be:ed:09:
25:b7:98:5c:10:dd:12:14:06:2b:27:a0:3f:48:e0:
1d:78:d2:5f:82:fb:98:28:88:15:d7:51:15:88:74:
58:f2:3a:5f:ec:4a:19:f9:d1:ef:e1:8e:2f:54:ba:
68:f4:81:b9:3b:64:7b:55:25:ca:90:ab:6b:b7:64:
b0:cb:08:2c:98:6d:2b:e7:88:93:91:0f:97:00:4b:
fb:69:26:19:dc:cb:4b:62:ac:71:77:16:fd:ab:48:
0f:67:52:1c:b5:0a:23:31:cb:de:c8:a3:58:cc:a7:
ef:73:c8:74:14:83:8d:a5:67:48:d3:cf:3b:05:a4:
f1:bb:3b:62:e6:97:0a:92:66:a0:21:a5:12:cf:14:
da:76:b8:1a:c0:f5:d9:f4:4d:ff:5d:3e:a2:6a:7f:
b1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:17:A0:91:7A:4E:96:F6:13:65:4C:3F:D6:DC:A6:43:4F:D2:BF:8E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143591.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3ad::/32
Signature Algorithm: sha256WithRSAEncryption
4a:eb:b1:08:86:c2:94:85:f4:02:0b:8e:37:20:0c:27:3a:b0:
ba:b5:bc:11:9e:55:2e:1e:af:da:e3:68:54:28:52:39:4b:b8:
e5:a8:12:ea:8a:f3:32:cb:b8:88:b7:24:5b:d2:e2:64:bf:08:
e3:23:03:c1:11:1a:5e:a2:6e:00:1f:e6:7f:a3:01:96:06:59:
a2:d5:55:79:a7:ce:9f:cb:6d:f0:63:b2:fb:c8:11:be:71:e4:
cc:d7:83:3e:35:81:28:f8:bb:54:84:59:58:cd:56:70:69:22:
76:f6:4d:83:b7:4e:48:fb:cf:84:1d:ff:06:95:93:ab:cc:21:
4a:90:8e:57:0f:47:c4:60:74:1c:84:98:e7:a1:22:0d:c8:66:
e2:4f:12:79:52:34:30:6b:71:50:07:0e:33:b8:f6:2a:e9:60:
2b:03:06:bc:a9:1c:39:5f:05:45:b2:cf:9e:c3:06:eb:8c:bd:
2d:5b:32:ed:3c:1b:b2:8d:5a:17:06:2f:46:f2:9f:5d:3d:14:
15:29:f5:ec:1d:c1:3d:73:f6:3b:6f:9a:6b:b2:ca:b7:be:b2:
d2:5d:9b:4b:fa:3e:bc:10:5f:aa:15:65:e8:b8:a8:d8:f1:a0:
88:32:03:d0:02:b1:b4:7f:97:40:e0:71:53:f1:da:59:09:ab:
08:c2:e7:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:25 2026 by rpki-client