Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143600.roa
File: AS143600.roa (raw, json)
Hash identifier: 2RqePz4qBObsalUG3UnaKi9Egf1NDbXqBfb17HMPv7Q=
Subject key identifier: 78:03:9D:4C:1F:CE:4B:48:AC:5B:03:7E:AB:DF:63:3B:D3:77:DB:84
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 08A1C63F3200894399ECC70ECF624EB952C24CA8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143600.roa
Signing time: Mon 25 May 2026 06:28:48 +0000
ROA not before: Mon 25 May 2026 06:23:48 +0000
ROA not after: Mon 24 May 2027 06:28:48 +0000
asID: 143600
IP address blocks: 240a:a3b6::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:a1:c6:3f:32:00:89:43:99:ec:c7:0e:cf:62:4e:b9:52:c2:4c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:48 2026 GMT
Not After : May 24 06:28:48 2027 GMT
Subject: CN=78039D4C1FCE4B48AC5B037EABDF633BD377DB84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1e:bb:ed:69:a1:a3:6e:16:20:3e:01:e7:ed:
1c:77:fc:5e:c8:55:f3:03:b3:57:a5:24:6c:c2:fe:
12:f0:19:fd:dc:13:95:20:c9:ae:01:f0:3e:f5:29:
88:88:45:3f:73:76:73:7c:53:7c:0e:65:1f:09:dd:
a8:7b:6c:1f:95:d3:40:e4:35:c5:9b:40:7b:46:b9:
21:1d:83:75:d1:3f:d2:e6:ad:96:61:3f:bd:c7:3f:
95:e5:a1:d0:69:9e:c1:26:e2:3e:d2:a5:a6:10:1a:
18:de:90:54:ee:fc:3b:f1:62:45:b5:14:48:6f:ef:
ee:54:f6:4c:87:e0:e3:4b:0d:c8:38:52:de:50:8c:
44:a4:4d:13:91:cb:89:5c:c5:4b:b1:c3:46:89:99:
70:67:0c:09:05:ed:64:6e:6c:64:97:87:eb:63:b0:
3f:3a:82:d8:ee:b1:11:83:e8:c6:01:e6:5a:b6:6a:
93:0f:e2:55:32:03:ef:ca:53:bb:93:5a:8b:b0:04:
7d:8e:de:e6:42:35:8e:4b:9b:ea:4b:24:96:3e:ea:
f6:21:62:94:4c:49:5a:da:48:1b:b6:f0:1a:da:db:
21:c8:01:30:4b:dd:aa:99:17:08:34:ad:a8:dd:d7:
34:37:37:66:85:c2:f3:fd:c2:94:c5:e7:85:2f:79:
6c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:03:9D:4C:1F:CE:4B:48:AC:5B:03:7E:AB:DF:63:3B:D3:77:DB:84
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143600.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3b6::/32
Signature Algorithm: sha256WithRSAEncryption
95:21:a0:3e:7c:c6:54:fe:28:42:35:d7:51:15:e8:79:b4:74:
1c:d2:e9:2d:19:9d:4f:80:c9:3e:0a:f2:84:b4:0a:c0:56:73:
d3:e9:6a:df:03:89:9c:17:18:af:f5:4c:ce:83:4c:2d:7e:be:
94:e4:5f:07:41:e6:53:49:e3:e5:9a:4b:a4:78:85:eb:db:9c:
30:77:0e:31:e3:d1:01:98:95:ac:20:8a:a0:60:ec:7f:6c:19:
5a:57:b1:8d:49:39:5c:02:50:06:aa:49:6b:8a:3f:39:3f:57:
51:4a:04:77:ab:06:b4:56:04:3e:91:c4:ff:2e:d9:6e:35:a0:
4e:6d:e6:16:b1:ab:b8:c1:a0:14:00:17:a8:0a:6a:06:b1:85:
55:89:9c:3b:d0:ac:c8:fd:60:e6:0a:e4:b5:92:52:07:55:1a:
2a:f3:4b:bf:66:50:cb:ee:f4:3e:43:35:7a:6a:7b:96:b4:94:
79:13:ad:ec:ec:06:ab:4f:23:71:49:61:cb:67:e7:c2:09:a2:
19:2f:4b:13:c2:b2:42:90:8e:21:e6:a6:2a:f9:24:b3:02:cd:
b9:08:fa:a3:e1:42:67:df:54:2a:0f:c3:7c:12:4a:eb:15:04:
4a:d5:86:38:bf:3f:cf:6a:98:b9:0e:4e:d3:7d:c2:a1:53:8d:
79:e8:02:fd
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUCKHGPzIAiUOZ7McOz2JOuVLCTKgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwNjIzNDhaFw0yNzA1MjQwNjI4NDhaMDMxMTAvBgNV
BAMTKDc4MDM5RDRDMUZDRTRCNDhBQzVCMDM3RUFCREY2MzNCRDM3N0RCODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHHrvtaaGjbhYgPgHn7Rx3/F7I
VfMDs1elJGzC/hLwGf3cE5Ugya4B8D71KYiIRT9zdnN8U3wOZR8J3ah7bB+V00Dk
NcWbQHtGuSEdg3XRP9LmrZZhP73HP5XlodBpnsEm4j7SpaYQGhjekFTu/DvxYkW1
FEhv7+5U9kyH4ONLDcg4Ut5QjESkTRORy4lcxUuxw0aJmXBnDAkF7WRubGSXh+tj
sD86gtjusRGD6MYB5lq2apMP4lUyA+/KU7uTWouwBH2O3uZCNY5Lm+pLJJY+6vYh
YpRMSVraSBu28Bra2yHIATBL3aqZFwg0rajd1zQ3N2aFwvP9wpTF54UveWxtAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUeAOdTB/OS0isWwN+q99jO9N324QwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzNjAwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqjtjANBgkqhkiG9w0BAQsFAAOCAQEAlSGg
PnzGVP4oQjXXURXoebR0HNLpLRmdT4DJPgryhLQKwFZz0+lq3wOJnBcYr/VMzoNM
LX6+lORfB0HmU0nj5ZpLpHiF69ucMHcOMePRAZiVrCCKoGDsf2wZWlexjUk5XAJQ
BqpJa4o/OT9XUUoEd6sGtFYEPpHE/y7ZbjWgTm3mFrGruMGgFAAXqApqBrGFVYmc
O9CsyP1g5grktZJSB1UaKvNLv2ZQy+70PkM1emp7lrSUeROt7OwGq08jcUlhy2fn
wgmiGS9LE8KyQpCOIeamKvkkswLNuQj6o+FCZ99UKg/DfBJK6xUEStWGOL8/z2qY
uQ5O033CoVONeegC/Q==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:44 2026 by rpki-client