Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143606.roa
File: AS143606.roa (raw, json)
Hash identifier: +AOFAEaGGnbkgJRW8oMdzHQonYzFH6J1X16Pzhh1G3c=
Subject key identifier: F4:CF:EF:63:DB:14:A4:F4:86:ED:E1:86:6F:3D:03:22:24:E2:4F:C3
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 456F14DE357BB0111550D216D69DED8ADEECCFDC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143606.roa
Signing time: Fri 22 May 2026 04:27:02 +0000
ROA not before: Fri 22 May 2026 04:22:02 +0000
ROA not after: Fri 21 May 2027 04:27:02 +0000
asID: 143606
IP address blocks: 240a:a3bc::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:6f:14:de:35:7b:b0:11:15:50:d2:16:d6:9d:ed:8a:de:ec:cf:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:22:02 2026 GMT
Not After : May 21 04:27:02 2027 GMT
Subject: CN=F4CFEF63DB14A4F486EDE1866F3D032224E24FC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:59:3c:89:a2:02:d9:08:c2:34:e4:89:2f:2c:
12:f3:85:c4:eb:3c:8b:0d:85:3c:fb:d6:a6:79:62:
1d:21:1e:1d:c3:12:22:14:9b:a2:43:8b:4f:05:06:
dd:67:77:b9:d2:ac:bd:0a:1a:19:0e:cb:1e:71:b5:
09:c3:43:fc:8e:21:ef:31:f5:33:e5:39:dd:10:0a:
8d:a3:e3:70:d4:04:70:15:bd:27:41:06:79:93:cb:
09:d2:97:f5:53:6d:db:74:4f:97:4a:55:a4:67:c7:
39:ed:47:cb:ef:6e:b6:9c:2d:36:b3:c1:c7:f5:a9:
3c:b8:67:4e:83:33:5f:46:97:59:f2:5a:03:86:f7:
63:6b:7c:2f:26:bc:76:e9:a0:cf:90:df:25:a4:26:
8c:d5:09:60:1d:8a:ec:72:57:ff:a0:64:00:bb:cc:
22:3b:d1:a8:2d:30:22:48:13:5a:e1:6a:36:27:51:
ab:d6:c9:0a:cd:ec:9a:0a:65:70:de:09:f8:c1:ff:
2f:48:83:40:27:ed:dc:d4:0b:40:23:93:88:aa:03:
e8:d2:c1:c5:1f:ef:71:97:17:f7:9a:15:05:d1:25:
80:7d:a9:dd:ac:e9:59:84:ad:b6:4a:1a:b1:56:73:
c3:6f:6a:51:23:4d:1d:9f:92:fa:d3:18:57:49:0c:
23:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:CF:EF:63:DB:14:A4:F4:86:ED:E1:86:6F:3D:03:22:24:E2:4F:C3
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143606.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3bc::/32
Signature Algorithm: sha256WithRSAEncryption
48:e0:dc:16:57:0c:83:d4:9f:ff:9f:5e:72:0a:9e:9c:d6:8a:
d1:32:16:e7:84:c7:d5:ba:f4:b7:a2:84:82:2e:5d:09:f2:24:
60:3c:41:c3:96:96:04:63:e8:61:70:69:df:2a:50:10:56:38:
64:a9:f1:3e:b7:4f:77:9e:f9:16:ef:20:82:cb:29:54:a5:e3:
69:92:e7:f5:d1:a9:25:0c:b9:8d:ce:e5:62:c2:f4:4b:fc:3a:
2e:6e:01:f0:58:dd:ac:9f:c4:4d:28:26:24:0e:ae:40:3e:8e:
4e:97:17:42:fa:9d:9c:a3:2a:7f:2b:ea:42:1c:29:48:f3:80:
ec:ba:42:74:0b:99:10:82:95:f8:6b:1e:57:2d:75:ae:3c:05:
9a:0c:d8:a0:8e:bc:f8:ef:96:4f:f4:82:65:11:2a:8e:13:2c:
dc:8e:48:40:8d:52:2e:1d:ef:8f:56:dc:e6:61:37:dd:8b:5f:
5b:b9:c2:41:85:c4:52:f2:98:01:a0:76:30:71:5d:b3:8a:8b:
8a:8c:aa:f6:8d:28:63:f4:02:98:6b:12:f4:0c:68:cf:d4:3c:
f5:73:96:99:39:5e:e1:ce:b3:2b:b4:0a:ca:7b:30:fa:10:37:
9e:83:7a:88:4b:63:80:07:e1:78:58:bb:ce:2a:14:d9:4e:5e:
93:a6:2e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:54 2026 by rpki-client