Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143607.roa
File: AS143607.roa (raw, json)
Hash identifier: xgpD8mrnSssjWk30kPjKXmS8Lx/OswP3+Js5tHieR9Q=
Subject key identifier: 78:67:3D:BD:36:40:D1:5C:5D:55:CE:BB:25:22:92:5A:FB:39:8F:CE
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 406EA5A89D4130BC45F562451111033C6D813E61
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143607.roa
Signing time: Mon 25 May 2026 01:20:36 +0000
ROA not before: Mon 25 May 2026 01:15:36 +0000
ROA not after: Mon 24 May 2027 01:20:36 +0000
asID: 143607
IP address blocks: 240a:a3bd::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:6e:a5:a8:9d:41:30:bc:45:f5:62:45:11:11:03:3c:6d:81:3e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:36 2026 GMT
Not After : May 24 01:20:36 2027 GMT
Subject: CN=78673DBD3640D15C5D55CEBB2522925AFB398FCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:67:15:1a:79:54:a7:c6:bb:01:95:f2:3a:d9:
7a:fa:fe:5d:03:5b:89:b9:3c:95:e4:7d:09:09:88:
e1:fc:4e:4b:d0:58:63:e6:cd:a5:d1:71:8e:4b:3e:
dc:6b:07:77:82:83:bb:f6:c9:97:19:ae:30:0e:bc:
6c:ff:91:b8:f2:ce:cf:92:ea:97:80:0b:cf:4d:18:
75:d5:6f:24:a0:ea:7a:a8:9b:5b:61:fb:3b:57:9a:
7f:dd:fb:6e:3d:8f:21:3d:04:c0:88:61:22:56:f3:
82:0b:c3:17:fa:18:9b:2c:f6:77:04:15:2e:88:49:
59:1c:ac:e2:d2:3a:5c:27:f3:44:7f:f3:1b:43:a5:
5d:20:c5:f4:86:f0:48:7b:1f:92:c7:43:a8:7b:69:
48:91:71:d2:eb:a7:f5:b6:cd:b9:1f:79:7e:fb:9b:
32:6a:fc:09:61:25:b5:d9:a0:07:62:4b:1e:a8:15:
3b:b8:c2:95:72:f4:7a:c1:e1:25:af:ec:86:aa:49:
7c:bc:24:ee:a9:a9:42:f3:15:d1:e0:7e:bc:b2:5e:
56:6b:31:ea:04:db:d7:60:b8:c1:7f:72:68:47:36:
18:2c:ee:90:db:2b:79:6c:15:bf:f2:da:1e:50:84:
28:8b:ea:26:06:51:02:61:79:c2:21:fa:28:ef:73:
22:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:67:3D:BD:36:40:D1:5C:5D:55:CE:BB:25:22:92:5A:FB:39:8F:CE
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143607.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3bd::/32
Signature Algorithm: sha256WithRSAEncryption
69:06:58:e3:7e:93:ef:b5:ee:0f:57:8f:d7:b2:70:55:f3:46:
29:ff:04:38:4c:12:fd:2a:7c:88:0b:4c:84:38:0d:17:d0:dd:
50:b1:d5:f8:5c:98:ba:09:20:a3:13:dc:8e:80:67:e7:5e:f4:
6e:ac:5c:ab:7e:7e:53:58:22:6e:20:24:7e:32:08:84:ee:0c:
1b:51:ea:cb:9a:9d:a5:cf:7a:04:83:56:19:90:fc:4b:f9:5f:
91:bf:4f:de:2f:9c:28:0e:95:06:0d:e8:91:d6:3a:fc:37:d1:
47:9f:b7:ea:9f:fb:6a:b5:80:5a:68:47:a1:c1:6f:59:22:d9:
c1:f9:04:c1:ab:bc:54:c6:4a:7c:df:af:e1:3e:65:5b:5b:07:
c4:ba:be:b8:a5:75:45:42:65:ed:e5:a2:86:70:9f:f0:23:25:
4e:be:9d:92:2a:d9:10:74:c2:67:b4:22:74:fe:af:17:fe:51:
b2:f4:4e:69:67:51:2c:57:ec:6f:0f:f7:3e:ac:fc:d5:57:1d:
af:13:ba:65:ef:e1:ac:17:b0:24:45:e6:96:16:81:d1:44:5c:
58:d5:98:63:69:82:69:6d:f8:a1:5b:40:a4:80:84:be:93:ec:
51:7c:eb:0e:0c:14:f1:7a:ea:9a:51:fe:1c:08:80:9a:a5:45:
a0:e7:6b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:29 2026 by rpki-client