Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143601.roa
File: AS143601.roa (raw, json)
Hash identifier: hv9p04a2zdHNWORo/k8zqOX5P4nugII3vAVRDV5izsA=
Subject key identifier: 28:E1:0F:D3:C5:BB:AF:14:88:60:68:0A:1C:CF:64:82:14:9C:3A:34
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 73DEC5ED207C79F43E148D4506760DE1DB80099B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143601.roa
Signing time: Fri 22 May 2026 07:32:35 +0000
ROA not before: Fri 22 May 2026 07:27:35 +0000
ROA not after: Fri 21 May 2027 07:32:35 +0000
asID: 143601
IP address blocks: 240a:a3b7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:de:c5:ed:20:7c:79:f4:3e:14:8d:45:06:76:0d:e1:db:80:09:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:35 2026 GMT
Not After : May 21 07:32:35 2027 GMT
Subject: CN=28E10FD3C5BBAF148860680A1CCF6482149C3A34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:43:99:1a:de:e8:10:dd:58:c6:0e:01:94:39:
13:c2:0f:cb:9b:d8:eb:78:d4:97:fb:cb:6c:0c:85:
b5:ac:67:03:26:cb:a9:c0:2c:ad:50:18:7f:40:c4:
bf:00:fc:cc:86:77:21:c6:a8:e5:35:ea:5a:14:b7:
fe:4d:07:76:d9:5f:04:79:e9:1b:26:b8:9a:61:a0:
3b:d6:56:ee:72:52:c2:71:68:e9:e1:c2:c5:fb:29:
72:50:34:6a:91:53:26:3f:ee:10:39:45:92:19:c2:
5e:64:7c:4e:18:13:f9:a1:22:88:02:15:7c:1b:0c:
c3:bf:6f:02:dd:f6:12:12:bc:49:f6:28:cf:05:67:
0e:51:11:2f:99:9f:42:0c:47:24:ab:9d:2f:5e:51:
1f:38:29:13:9d:f1:84:64:c7:84:de:59:fe:fe:4e:
3b:86:9c:4b:df:16:64:a9:be:79:9e:8c:32:45:4a:
27:89:87:88:ad:0f:ac:83:4e:ab:9f:ef:81:41:77:
75:53:4e:c1:7b:57:de:13:6c:20:fc:d2:ca:a6:4f:
2c:df:97:f5:b1:59:66:ac:c9:eb:90:14:d5:50:eb:
08:e9:80:66:24:98:24:90:36:9d:9b:66:d4:93:7e:
e5:85:8e:4e:50:68:03:77:b8:59:f6:f6:f8:bc:f7:
66:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E1:0F:D3:C5:BB:AF:14:88:60:68:0A:1C:CF:64:82:14:9C:3A:34
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143601.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3b7::/32
Signature Algorithm: sha256WithRSAEncryption
6c:df:4b:33:6f:8b:86:bc:1e:08:23:6b:e2:60:7f:38:47:8e:
41:6c:9f:df:3d:22:b1:8b:43:41:0d:6d:69:8c:4d:29:ad:b0:
b3:45:07:1e:26:ab:15:51:af:88:a3:f6:b5:37:9a:3a:9d:9f:
d5:e7:60:9e:7e:19:7b:f6:93:da:46:99:b5:7d:ee:41:67:90:
f6:74:d4:fb:38:b7:6e:bd:84:b7:23:1d:40:00:87:d0:8a:ca:
be:b1:01:6e:c1:ad:f9:e7:7c:3f:3e:e9:c0:e0:41:65:96:8e:
4f:24:97:e5:28:d2:b8:60:24:90:db:ed:1b:9a:a3:58:e5:ef:
ef:a5:9f:b5:47:0f:95:46:38:ba:c9:c4:0a:e3:a1:42:53:09:
ed:50:13:c3:29:c9:cd:4d:27:69:2b:41:bb:bb:93:15:eb:64:
72:fb:72:57:62:b8:5b:21:15:7e:2c:a5:d2:e2:7c:62:ed:91:
cc:f6:fe:cd:1e:21:04:c1:c2:c7:5d:6e:82:44:9f:f5:33:33:
ff:03:48:44:cd:05:9c:3f:08:19:e5:b8:69:88:83:48:31:38:
a6:8b:28:9f:79:03:1e:cf:9d:d9:01:65:b4:3c:bb:66:b5:fe:
4c:7b:a3:9e:12:e4:43:71:09:04:44:b9:82:e9:1b:1d:06:91:
5b:ad:79:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:18 2026 by rpki-client