Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143603.roa
File: AS143603.roa (raw, json)
Hash identifier: Hza4EVdrCSZDY3mfWNDDNpw1SVTIOUHyWaOOHt9WCxo=
Subject key identifier: A0:7F:7D:B2:23:52:27:88:6E:8C:2C:50:B3:3F:09:BD:ED:31:35:18
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 23960A95E1BE84B9ED2608BEB3C284305340422C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143603.roa
Signing time: Fri 22 May 2026 06:45:56 +0000
ROA not before: Fri 22 May 2026 06:40:56 +0000
ROA not after: Fri 21 May 2027 06:45:56 +0000
asID: 143603
IP address blocks: 240a:a3b9::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:96:0a:95:e1:be:84:b9:ed:26:08:be:b3:c2:84:30:53:40:42:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:40:56 2026 GMT
Not After : May 21 06:45:56 2027 GMT
Subject: CN=A07F7DB2235227886E8C2C50B33F09BDED313518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:be:a6:b2:51:ca:b5:c1:8c:23:64:d6:a8:5c:
09:7d:9d:37:13:8a:c4:71:81:7d:d5:16:c3:b7:29:
67:ea:d7:30:f2:10:6a:d4:29:f3:45:79:ac:1e:3e:
89:87:92:96:96:7b:fc:a4:6a:cb:2a:08:bf:b0:f3:
1d:72:13:a0:69:e5:e6:ef:e0:b6:93:ad:42:be:b2:
2d:af:93:55:f8:aa:25:86:58:30:e1:0a:1c:71:78:
0b:75:26:6f:4d:9a:d3:cf:2a:03:cc:5c:a4:e8:15:
e8:1b:29:f0:ce:dc:58:7d:7b:bc:4f:99:37:85:21:
b2:6c:ca:e9:89:e3:56:82:d5:c2:45:86:03:d9:0b:
cb:55:83:ef:40:f3:b7:9c:39:0e:26:24:06:2a:07:
91:e2:85:6e:ff:3b:ee:8d:9d:44:1e:0e:df:62:0a:
92:bd:96:2a:a2:65:92:d8:a5:be:20:aa:86:45:19:
97:25:aa:0b:e5:3b:94:10:ea:72:42:b6:9f:25:90:
db:ab:27:de:5a:42:b8:e3:91:17:5d:4f:d3:73:4e:
61:aa:40:f7:3c:fd:70:c2:70:cb:a8:f7:29:b9:94:
1f:d3:60:81:15:59:62:1b:cc:25:54:df:59:fe:90:
de:65:57:1c:9f:08:10:c3:db:46:91:e4:5c:46:4d:
73:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:7F:7D:B2:23:52:27:88:6E:8C:2C:50:B3:3F:09:BD:ED:31:35:18
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143603.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3b9::/32
Signature Algorithm: sha256WithRSAEncryption
a9:e3:c6:a7:0c:1a:c0:01:99:ad:d0:5b:de:9e:e8:5f:df:a4:
f0:f8:0d:9b:d7:45:41:88:9f:cd:69:2b:23:8c:5b:94:07:bd:
e2:d4:81:3d:35:b3:0c:70:81:df:52:3c:a9:35:7d:a6:4b:b5:
96:c4:9f:46:7a:5f:c7:71:c7:d4:07:b1:19:c6:c8:bc:c6:21:
b0:fe:e8:d3:cb:59:01:57:1f:b8:b8:f2:02:29:56:29:92:28:
65:b4:6c:55:ed:a6:fb:7c:8d:22:cb:7a:be:2a:74:0c:ac:3e:
71:c9:be:9d:f3:f0:86:81:13:69:8a:a7:60:08:94:1f:92:64:
92:ec:4a:ba:18:16:b8:e6:ca:22:a9:7c:86:de:b7:bc:eb:32:
e7:01:b9:96:55:b8:63:41:52:1b:6c:2a:48:0a:a4:0d:bc:cd:
aa:27:7b:04:df:ca:91:43:a3:ff:fc:93:e9:14:47:78:d1:e8:
8a:76:46:3f:1f:82:31:dd:30:ef:fe:32:29:22:ac:35:f7:9c:
69:2d:64:3a:2f:ad:9c:e5:5a:ce:06:a2:73:a7:47:aa:7e:6f:
23:d3:98:ad:68:78:c8:38:01:27:13:a4:d5:86:86:48:ed:d0:
8e:9c:a9:a2:75:0d:4b:4c:8b:50:14:48:aa:a1:a1:49:29:c9:
e4:93:a8:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:20 2026 by rpki-client