Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143592.roa
File: AS143592.roa (raw, json)
Hash identifier: QaBE4DwWSQLEePJuzqY/bOM3RFmJGwQfed9ib0Vj1mY=
Subject key identifier: 3B:66:19:97:76:4A:96:5F:A2:E9:D1:07:A8:3F:4B:9A:79:AD:3D:82
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 31E4AEC87C77DFA66A17D2D6600BB72962F8F996
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143592.roa
Signing time: Mon 25 May 2026 06:48:53 +0000
ROA not before: Mon 25 May 2026 06:43:53 +0000
ROA not after: Mon 24 May 2027 06:48:53 +0000
asID: 143592
IP address blocks: 240a:a3ae::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:e4:ae:c8:7c:77:df:a6:6a:17:d2:d6:60:0b:b7:29:62:f8:f9:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:43:53 2026 GMT
Not After : May 24 06:48:53 2027 GMT
Subject: CN=3B661997764A965FA2E9D107A83F4B9A79AD3D82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d8:6f:01:f3:f9:9f:de:e1:dc:3a:bb:1b:22:
54:10:ba:17:c9:a7:1d:8b:5a:7e:52:2e:aa:24:0c:
d1:1c:7d:53:f2:ac:18:ea:a6:e9:56:04:d1:02:59:
3b:32:ff:67:67:86:bb:fe:14:cf:7b:04:5c:56:a0:
16:31:fc:5b:2c:9f:40:33:e0:2b:37:0b:82:aa:86:
80:e4:4b:a6:4f:6e:62:19:1d:12:e2:8d:3a:ab:e6:
d5:3a:eb:86:9f:67:c9:e7:32:6f:a9:4f:60:0c:ad:
1a:2c:7b:d4:fb:2a:85:24:46:ea:b9:e7:04:aa:fd:
f0:1d:b4:57:88:a1:08:04:8f:1e:41:3b:00:51:5f:
cf:a3:bd:bc:4d:36:ce:e3:5d:36:67:63:ec:00:7d:
97:7b:6b:8f:82:4a:3d:5b:bf:6e:84:75:d9:4c:fe:
70:5f:21:34:cc:18:f2:1c:1a:98:87:4c:12:f2:a4:
bd:3d:9b:20:b8:63:00:2f:a9:c9:d3:0e:6d:38:66:
34:69:98:dc:ae:c7:23:45:07:39:f1:e5:bb:b5:97:
24:8a:4d:d3:0f:3f:b6:b0:26:7a:32:8d:10:1d:5f:
4c:a9:81:be:2b:56:94:cf:bc:84:46:27:70:16:cf:
93:25:ff:ed:a5:44:02:f7:50:4a:42:a8:00:c0:f9:
70:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:66:19:97:76:4A:96:5F:A2:E9:D1:07:A8:3F:4B:9A:79:AD:3D:82
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143592.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3ae::/32
Signature Algorithm: sha256WithRSAEncryption
3b:8b:c3:a6:0b:9b:13:72:c5:81:42:da:a8:f8:b2:7a:64:0b:
4d:c8:fe:0e:55:e5:d3:0b:76:82:5e:ae:18:50:98:8d:0e:34:
98:43:12:60:50:63:85:59:01:a4:9a:3f:50:80:e9:67:22:cb:
55:7c:eb:de:b9:ee:95:84:9a:f5:7f:54:bc:cb:b5:62:96:63:
c2:95:90:18:30:df:45:ca:0b:2b:be:70:ae:eb:b4:40:65:57:
45:65:83:1a:5c:1b:26:4e:61:f1:19:24:0a:65:ec:92:d6:3a:
ad:19:37:08:a4:47:c6:dc:9a:05:64:21:39:f1:dc:d9:e4:3c:
cf:1c:72:10:a2:c6:12:c0:2a:73:4a:cc:2f:34:11:2c:18:16:
c6:e6:66:c5:2d:1e:57:d7:4a:a6:e4:72:d2:0b:2b:21:d3:3d:
4c:5f:73:d4:21:ba:8e:1a:f8:3a:00:90:11:6c:1b:1a:07:e6:
6c:9a:a0:1f:a1:42:ba:12:a7:0c:2e:49:2c:f1:f4:40:a9:da:
94:c0:08:9d:e3:82:29:c9:b5:ac:bb:2f:47:2c:ac:6e:43:eb:
09:29:5e:c3:ee:58:83:8f:b5:e9:f0:d2:b7:c3:f9:1c:f0:c3:
64:e7:37:66:e1:17:9b:e4:08:63:fd:f9:46:c9:15:02:4a:a9:
85:8e:62:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:44 2026 by rpki-client