Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143602.roa
File: AS143602.roa (raw, json)
Hash identifier: vA5J+TyyTE45yCc20Ys3SXH4Km/xmq63yfMY2IpXJAU=
Subject key identifier: 48:4F:80:3C:43:62:FE:E9:C8:79:24:A9:95:4C:68:79:CB:A6:EB:B2
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 06D13DC858E6DA18EB5430EF4EE9605BD815B537
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143602.roa
Signing time: Fri 22 May 2026 06:46:20 +0000
ROA not before: Fri 22 May 2026 06:41:20 +0000
ROA not after: Fri 21 May 2027 06:46:20 +0000
asID: 143602
IP address blocks: 240a:a3b8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:d1:3d:c8:58:e6:da:18:eb:54:30:ef:4e:e9:60:5b:d8:15:b5:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:20 2026 GMT
Not After : May 21 06:46:20 2027 GMT
Subject: CN=484F803C4362FEE9C87924A9954C6879CBA6EBB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:29:99:e8:f7:06:eb:d9:b6:76:48:de:b4:8a:
bf:8f:67:b7:2c:fb:ff:0a:e2:e8:da:4c:a1:48:a0:
46:39:c7:8b:e5:4a:e6:cc:6e:ba:72:d9:30:55:77:
4d:88:d1:f3:14:69:26:fd:91:4f:85:e5:52:5e:9d:
82:1a:59:c7:3d:03:9d:29:e6:7b:e7:f3:14:5a:97:
48:85:cb:0a:96:57:a5:cf:0a:1a:50:6d:10:92:ee:
22:22:42:d9:83:3e:2b:0b:cf:c4:db:c7:bb:01:55:
c2:50:3e:38:a1:89:da:1a:41:e3:78:fd:ba:1c:e1:
75:40:1b:b7:aa:6a:f5:f4:e2:8a:b8:66:ee:d7:86:
1c:af:7f:1b:3a:98:ef:7f:0a:a5:da:45:fa:98:0d:
a3:f4:89:84:2f:3d:1d:e5:c5:0e:1a:0d:da:c5:7b:
e4:78:19:5c:42:ac:c5:00:6e:6e:65:cb:4a:24:31:
a8:cf:4c:62:10:65:80:c8:59:d9:96:92:01:3b:e3:
80:d9:85:2f:81:7d:40:66:51:a8:85:7b:52:b0:11:
4b:9b:07:9d:92:62:76:f6:a8:43:d0:a8:eb:9b:9a:
72:27:37:ca:40:61:93:92:98:0e:df:58:38:f5:6d:
9a:db:2f:af:8c:e8:f4:d0:15:9e:fc:19:fe:62:7f:
e9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:4F:80:3C:43:62:FE:E9:C8:79:24:A9:95:4C:68:79:CB:A6:EB:B2
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143602.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3b8::/32
Signature Algorithm: sha256WithRSAEncryption
37:0a:4d:f1:67:8e:59:b3:e9:61:a6:7e:84:d1:04:7a:82:38:
2f:d6:d8:fa:78:4a:ad:c5:f9:57:48:00:30:1c:0b:0e:04:3c:
3f:24:d6:75:2b:8d:b0:60:cf:d8:12:dc:34:bd:56:97:01:1e:
ce:f3:d0:b8:7a:ca:20:7f:50:31:ad:45:4d:5e:d5:f0:3f:6d:
67:15:0c:2a:69:cb:7e:c6:cf:23:57:37:f7:fb:47:af:6e:65:
61:26:80:29:1d:a9:21:c0:2f:e7:ee:e2:03:85:e2:9a:1b:a2:
28:b4:ab:2b:44:6a:68:08:06:3c:b0:bf:b6:ee:29:94:8f:6c:
85:f1:3f:c7:24:b2:4e:dd:05:bc:6a:34:c7:ad:80:93:d2:68:
8b:c7:f7:9e:8c:fc:25:5a:d6:9c:a7:1c:76:96:7f:3e:50:3f:
9c:08:90:55:fe:db:4f:aa:14:98:e6:67:37:d2:f8:ba:05:87:
73:85:32:ee:65:b8:5b:3c:ef:af:ce:4d:e0:70:1a:01:e9:5e:
0d:86:31:04:90:da:d9:88:b5:a2:70:38:c5:e4:75:30:08:19:
35:8c:61:c1:9e:68:fb:a1:8b:13:a0:b6:a3:e9:35:66:5f:6c:
76:46:21:8d:95:25:e0:3a:10:97:c8:58:19:d4:55:7a:5a:c5:
cc:f0:e3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:54 2026 by rpki-client