Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143594.roa
File: AS143594.roa (raw, json)
Hash identifier: UIA8quwS7c32oR8jw0gT7NcoPgjBM1e7ko8HzTt6q5Y=
Subject key identifier: E6:A3:26:83:71:63:B2:BF:F8:3B:8D:21:43:CD:83:7C:FF:66:D2:88
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 16F343A95E516D2C469D53EABA367441E4DF59DB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143594.roa
Signing time: Fri 22 May 2026 07:40:48 +0000
ROA not before: Fri 22 May 2026 07:35:48 +0000
ROA not after: Fri 21 May 2027 07:40:48 +0000
asID: 143594
IP address blocks: 240a:a3b0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:f3:43:a9:5e:51:6d:2c:46:9d:53:ea:ba:36:74:41:e4:df:59:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:35:48 2026 GMT
Not After : May 21 07:40:48 2027 GMT
Subject: CN=E6A326837163B2BFF83B8D2143CD837CFF66D288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:42:3c:93:88:dc:cf:ff:27:e4:fc:62:d0:7b:
2b:18:5d:80:e5:52:02:9f:13:b2:28:19:98:90:79:
76:75:07:cb:0b:8d:ca:df:c9:58:ad:74:c6:30:f2:
0d:0c:a0:12:07:fe:36:99:ad:62:83:b8:f9:da:65:
3c:1a:38:a7:03:2b:56:bb:cb:fc:5b:65:be:c4:57:
66:2b:dd:c2:26:ab:0e:75:41:bd:97:40:91:43:f1:
d1:d6:5c:eb:88:a3:7c:6d:ab:16:94:4f:80:04:63:
12:be:73:31:9c:67:59:aa:e3:00:6d:19:da:f3:46:
b5:ab:da:42:b7:98:af:f7:7e:b3:e1:0f:30:b0:a5:
bb:62:61:cc:c1:a9:5f:12:36:05:b2:19:e2:d0:1c:
c0:b0:a8:4d:cd:28:e4:c8:c4:ca:fa:07:b8:b8:45:
0e:89:01:ce:14:2b:01:f7:68:f2:69:70:93:c4:e2:
27:99:f5:44:fa:ff:4b:bb:fd:53:22:b9:bb:8b:37:
73:9f:b3:c1:41:03:08:a7:66:9a:0a:77:b6:04:ee:
91:3a:da:d8:93:fb:93:cb:0e:3f:1f:8a:a7:52:06:
27:4f:42:1a:11:7d:c7:24:15:4f:a8:32:21:ce:90:
60:cd:a9:2b:cb:db:bb:03:61:b2:65:78:bf:0d:58:
5f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A3:26:83:71:63:B2:BF:F8:3B:8D:21:43:CD:83:7C:FF:66:D2:88
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143594.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3b0::/32
Signature Algorithm: sha256WithRSAEncryption
2b:6f:6d:bf:bd:75:96:95:04:08:c2:6c:3b:8d:e6:4a:53:e6:
a3:f5:86:ac:f6:33:ab:9c:a2:bd:33:9d:76:70:f4:0b:3c:95:
15:a1:ed:fa:30:df:94:5a:d8:8d:86:f6:b7:25:87:d2:ff:7c:
48:c0:a7:7f:a2:c5:d2:a4:3e:83:c1:a7:82:bb:40:96:f7:5d:
ca:c9:85:de:7a:38:91:a0:a3:55:8a:f9:62:e0:68:78:49:2f:
0a:60:b8:0f:fb:91:8b:bd:cf:63:90:bb:45:bb:79:de:33:a4:
6e:9e:6f:a8:ee:a1:73:7a:1a:06:7f:26:b9:2a:e0:60:91:68:
58:80:dc:9f:2b:52:62:c2:95:4d:44:80:d9:1e:d5:cb:9f:9f:
fa:a3:8d:6c:59:d2:33:d5:09:e0:13:02:02:71:c6:a6:de:93:
a7:47:89:d1:6d:1b:dd:9e:7d:48:0f:9f:2c:ce:9a:68:62:49:
b1:b9:19:21:f5:d1:32:b3:5c:13:b1:b7:9e:aa:93:99:49:04:
4c:26:19:2a:46:6b:1e:71:c3:93:93:02:c0:17:21:04:7c:04:
70:31:1f:81:eb:c2:8b:ef:c5:2f:e5:ac:01:19:bc:b5:8a:22:
41:88:92:11:37:c3:93:c7:a5:84:ba:5b:38:01:5c:30:85:2b:
f6:21:c0:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:11 2026 by rpki-client