Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143605.roa
File: AS143605.roa (raw, json)
Hash identifier: rarx0PVD2B4bycf1All2x2sFgkZ53VC6raI1KkRLD5A=
Subject key identifier: 8D:DE:51:82:4C:A9:AD:60:4E:07:9B:74:A8:73:1E:A9:CC:80:6C:B3
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 78CC03931FCF721D2B4C104134A2B12591FFDA8D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143605.roa
Signing time: Tue 26 May 2026 02:35:14 +0000
ROA not before: Tue 26 May 2026 02:30:14 +0000
ROA not after: Tue 25 May 2027 02:35:14 +0000
asID: 143605
IP address blocks: 240a:a3bb::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:cc:03:93:1f:cf:72:1d:2b:4c:10:41:34:a2:b1:25:91:ff:da:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:14 2026 GMT
Not After : May 25 02:35:14 2027 GMT
Subject: CN=8DDE51824CA9AD604E079B74A8731EA9CC806CB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:34:0e:85:3e:11:94:0d:bf:3d:1a:fa:74:99:
d7:4f:ba:f2:c6:a5:ee:04:e7:be:58:f2:89:bb:70:
16:bc:af:73:aa:57:ae:05:66:40:ad:f1:77:b9:67:
91:56:a3:70:18:58:07:97:6e:89:2d:b5:6d:62:63:
bd:ff:c5:be:9b:c9:c0:73:4b:37:51:a3:af:93:60:
d3:76:86:b9:6a:46:09:2c:47:93:e5:60:75:50:32:
f7:7e:d6:73:0c:09:13:6c:7a:82:be:02:cf:ce:5a:
f9:59:d8:37:28:d4:90:aa:5f:98:8d:9b:7f:22:7b:
77:81:2d:86:f2:46:4e:cc:6d:8d:1b:a6:94:a9:cc:
71:c5:b9:5e:15:27:a2:fa:22:5e:5a:c6:b3:cb:33:
49:3b:a8:0e:cf:4a:73:c6:86:e1:52:4c:27:04:e3:
86:30:e8:ce:dd:cb:7d:89:ca:f2:ab:07:02:b8:3e:
29:d0:87:b4:92:07:ff:62:c9:ba:5b:6e:41:f8:c4:
24:65:64:37:83:22:8b:63:6b:01:0a:bb:62:8b:9c:
0a:1e:78:84:6f:02:3e:b7:ed:8d:62:36:a7:3f:a7:
94:6c:7b:10:ae:ca:f4:ed:c3:9b:6f:fc:0a:11:37:
49:96:90:a5:32:63:92:ea:2c:d3:44:f4:3d:67:da:
1f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:DE:51:82:4C:A9:AD:60:4E:07:9B:74:A8:73:1E:A9:CC:80:6C:B3
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143605.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3bb::/32
Signature Algorithm: sha256WithRSAEncryption
46:06:59:d7:a3:9a:a2:9a:75:d6:bb:08:b9:ef:8a:fb:95:06:
3a:7a:2b:89:07:a5:0d:05:2f:2d:3c:49:5f:4f:1d:39:29:91:
f8:38:cf:ee:e8:43:0b:b8:c3:66:98:37:ed:c4:9e:1a:8a:60:
18:3d:69:38:5a:c1:f8:9d:f1:70:0b:ee:f8:b9:e6:29:fb:06:
57:53:2a:6d:57:05:a2:4e:5b:6c:9b:33:f1:68:04:9b:37:d5:
42:8b:a5:84:64:34:03:18:36:8f:da:a3:00:ce:ea:92:c5:e4:
29:ca:c6:31:cf:ac:48:bc:37:3e:b3:4a:59:c5:d0:72:50:67:
95:ea:50:97:9c:21:f4:b2:2d:50:24:a0:d8:22:18:6c:35:b9:
d2:61:1a:d1:81:b9:7b:b7:30:ee:b0:2a:62:07:1e:23:72:a2:
4f:43:17:99:6d:46:d3:07:ec:21:f6:37:ff:4f:15:0f:f3:02:
11:2a:61:be:bd:0d:87:69:22:5c:ec:b8:a8:f1:56:21:b2:7e:
32:2a:2d:0c:de:2f:fe:2d:17:57:29:bc:42:ef:4a:81:8f:e2:
fd:e6:09:56:6b:21:a0:a7:cd:0a:a9:a0:9b:e3:f5:5f:e4:10:
08:5c:86:6c:b0:14:bf:bc:2b:8e:ca:64:90:b2:2f:64:f9:1b:
0c:4f:b4:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:30 2026 by rpki-client