Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143595.roa
File: AS143595.roa (raw, json)
Hash identifier: 3AtlqYZ58LVbEFNu+rWHbLcR6SJPXLapTErxX6vLbZs=
Subject key identifier: BC:8B:D5:23:28:9D:0F:38:18:F1:13:CE:21:7B:AF:23:44:A5:13:1A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6B60A21D2C879300241C67B228B0EA83A2796E27
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143595.roa
Signing time: Fri 22 May 2026 02:48:03 +0000
ROA not before: Fri 22 May 2026 02:43:03 +0000
ROA not after: Fri 21 May 2027 02:48:03 +0000
asID: 143595
IP address blocks: 240a:a3b1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:60:a2:1d:2c:87:93:00:24:1c:67:b2:28:b0:ea:83:a2:79:6e:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:43:03 2026 GMT
Not After : May 21 02:48:03 2027 GMT
Subject: CN=BC8BD523289D0F3818F113CE217BAF2344A5131A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:42:b7:75:97:5f:bd:95:5f:33:93:18:a6:49:
cd:de:06:a6:55:4d:b6:2c:6d:fb:ba:ec:bb:a7:6f:
5f:d3:09:7b:39:9f:4f:4d:af:ff:67:da:ce:49:e0:
4b:c5:e5:7a:9d:be:c6:2f:da:59:5d:4f:57:07:37:
56:90:46:bf:3f:7c:87:11:fa:12:f3:c0:0a:ed:09:
3d:51:67:12:a5:fe:a3:e1:66:9c:a3:6e:a7:97:0a:
dc:b1:5f:99:99:95:fd:b4:e9:9d:9c:f3:02:7e:20:
11:32:4b:b6:10:a0:51:19:c8:cf:7a:7d:c6:82:fc:
b1:d3:78:14:0d:4c:46:98:e5:b1:12:da:06:f0:20:
a3:8a:56:1b:19:55:39:04:7b:7d:bd:18:52:3f:5f:
22:ec:fd:78:20:c4:d9:7b:9d:39:aa:eb:72:81:b3:
b5:4a:f0:3b:b1:28:84:01:0a:89:96:6d:28:b0:c7:
f0:60:52:fd:78:cf:1b:45:b8:dc:ee:c1:b6:8c:3a:
0d:ba:ae:e5:5d:34:b5:df:d8:76:d3:39:b3:d8:ab:
68:a3:84:08:21:49:3d:33:0c:bb:44:80:a1:fd:cd:
a4:a2:c9:ee:93:4b:fb:18:c6:90:95:12:15:dd:5c:
ec:8b:25:72:14:aa:cd:ba:ce:c2:49:37:12:6f:9c:
e5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:8B:D5:23:28:9D:0F:38:18:F1:13:CE:21:7B:AF:23:44:A5:13:1A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143595.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3b1::/32
Signature Algorithm: sha256WithRSAEncryption
5d:ba:a9:d4:d0:2d:df:0f:22:18:67:0c:60:56:6c:29:fe:07:
34:85:17:06:ab:fc:4a:c7:71:50:07:06:87:dd:db:3e:a6:75:
55:e9:1e:85:d6:68:eb:e9:05:b0:f5:8b:8f:f4:6e:a3:dd:89:
f8:10:54:70:a2:18:47:1b:16:37:9f:96:9a:e1:80:f4:6a:fe:
12:15:c6:a8:4e:48:a0:8d:22:c3:2b:71:12:3e:2f:9e:f0:72:
d4:85:ad:56:35:a7:76:24:87:27:c9:c9:93:c8:8b:c4:31:ec:
41:3d:9c:a7:0a:1e:55:7a:d4:6d:40:62:d7:62:4f:d6:ef:98:
03:d9:60:a6:e7:fe:1e:b6:15:0f:36:c0:9d:aa:58:b5:96:5d:
17:cc:94:37:89:b5:eb:5c:1f:02:97:87:1f:d3:ee:c5:f9:a0:
6d:8f:0b:0c:69:da:9d:ec:ca:ef:5d:36:50:f5:84:60:0d:4c:
1b:b2:08:9b:91:a0:cc:70:e6:22:ae:f7:d7:d4:4b:2f:b6:7e:
72:7b:3e:bc:3c:ba:69:5d:d3:86:a7:e4:0c:c4:a3:b0:86:4c:
72:66:e5:ce:4b:1d:8b:dc:70:8e:50:8d:10:1a:75:71:fd:f6:
2d:42:e0:ab:26:e8:a3:14:bd:40:4d:0d:3c:12:c6:45:e4:98:
18:bd:11:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:18 2026 by rpki-client