Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143598.roa
File: AS143598.roa (raw, json)
Hash identifier: GH95iVHOfdCpUjhnCYNFw16kFDTho0zB/hhdiQqBf+k=
Subject key identifier: 54:70:0D:9E:DD:E2:EF:A1:CE:E0:63:40:D9:B8:9E:2F:24:D2:D6:89
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 01F9E0DE7DC60B2B2E7BFA65E5A98F688C3EC614
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143598.roa
Signing time: Tue 26 May 2026 03:16:53 +0000
ROA not before: Tue 26 May 2026 03:11:53 +0000
ROA not after: Tue 25 May 2027 03:16:53 +0000
asID: 143598
IP address blocks: 240a:a3b4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:f9:e0:de:7d:c6:0b:2b:2e:7b:fa:65:e5:a9:8f:68:8c:3e:c6:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:11:53 2026 GMT
Not After : May 25 03:16:53 2027 GMT
Subject: CN=54700D9EDDE2EFA1CEE06340D9B89E2F24D2D689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4e:62:bc:20:11:84:c4:2b:b3:12:0e:28:46:
72:41:d9:a8:12:13:85:e8:67:c3:3d:a2:36:75:1a:
9c:2e:2c:39:95:19:d3:6d:70:04:db:fb:ba:fc:94:
61:a4:e9:f4:0a:f1:34:83:d6:09:7f:87:dd:35:bf:
09:a5:3d:97:62:6f:7c:5e:f2:d6:3f:ba:64:9c:eb:
48:3f:92:19:d1:58:be:a1:2e:e5:1b:65:55:e4:d6:
73:ae:db:81:ed:bd:ed:37:e9:e6:30:bd:9f:6a:99:
4d:60:1e:b4:b6:ee:4d:8f:a7:0f:f5:07:97:d7:22:
4e:ca:1a:81:cf:ca:78:3d:78:b5:ba:25:b1:83:ae:
60:3c:14:3d:04:a2:9e:e8:ce:4c:e2:54:7b:05:af:
32:58:38:5c:6d:27:9b:30:05:e2:78:5d:20:95:26:
c2:c9:07:a8:1c:6e:11:f7:b2:c4:d6:a8:6e:4f:0d:
f9:0d:d2:8a:31:0b:10:60:2c:3b:58:f8:96:bc:2e:
09:88:c0:27:6d:9e:9b:f2:9c:b5:67:3e:00:2e:3e:
92:19:86:bd:2e:e7:7e:d0:57:ff:4a:69:8e:e6:3e:
94:9c:a9:c5:e8:0c:9f:7e:c4:7e:a7:89:bc:95:6d:
27:90:27:b1:dc:1f:dd:66:b3:9b:52:ae:fb:1d:98:
0a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:70:0D:9E:DD:E2:EF:A1:CE:E0:63:40:D9:B8:9E:2F:24:D2:D6:89
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143598.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3b4::/32
Signature Algorithm: sha256WithRSAEncryption
41:9e:06:ec:4b:9d:45:7b:b5:4c:b7:fb:7c:f5:a9:62:ec:df:
72:c9:1e:e9:bb:23:e5:6c:6a:60:8f:b6:ef:45:08:b8:b1:6c:
12:05:53:f7:84:9e:6d:29:74:39:48:3c:5a:3d:71:1d:82:04:
a1:59:58:38:0e:a9:67:95:d8:43:c3:2e:22:e1:f1:00:c7:9f:
d6:bb:b9:73:31:fa:29:4b:8a:dd:65:76:24:11:c6:a3:aa:3b:
38:a0:37:e5:e2:c6:90:9e:9c:47:ca:f2:bc:40:89:76:b0:74:
12:f2:2f:d4:f6:46:71:9e:fd:f4:6b:cc:5d:00:ef:56:29:c5:
ed:e4:a5:b4:73:6f:1d:74:f0:3d:b8:b7:6b:12:00:a8:09:65:
9b:fa:96:13:1d:27:ec:a2:de:9d:a0:72:d7:a5:9b:ff:88:c9:
2c:e4:f6:ea:e9:13:46:a2:d9:f2:05:2c:54:a4:99:ce:67:cf:
d8:d5:ba:35:1a:89:a6:07:6e:b5:39:09:09:89:83:ee:f2:67:
35:e1:06:13:c6:9a:a9:22:17:b4:6a:7a:e0:3d:27:80:ee:db:
e3:04:4f:5d:f8:a0:40:ab:29:73:1a:31:33:2a:84:d5:7a:23:
3a:39:f8:13:d5:75:99:79:6e:49:0e:7a:df:02:b6:19:d4:fe:
1f:bb:17:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:40 2026 by rpki-client