Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143608.roa
File: AS143608.roa (raw, json)
Hash identifier: osx2tzbKPrKd9BKL9KTxg7rZnKGKOh+pRfTW6TnUXd4=
Subject key identifier: 17:7F:76:AB:8C:A3:23:70:23:AE:55:86:A4:A7:55:31:A8:A9:43:89
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 06638F991BB2CCADBC9614B259B0909F67DCD56B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143608.roa
Signing time: Mon 25 May 2026 01:50:58 +0000
ROA not before: Mon 25 May 2026 01:45:58 +0000
ROA not after: Mon 24 May 2027 01:50:58 +0000
asID: 143608
IP address blocks: 240a:a3be::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:63:8f:99:1b:b2:cc:ad:bc:96:14:b2:59:b0:90:9f:67:dc:d5:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:45:58 2026 GMT
Not After : May 24 01:50:58 2027 GMT
Subject: CN=177F76AB8CA3237023AE5586A4A75531A8A94389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:92:12:00:e2:88:ae:c8:e0:d7:7e:9b:b3:ab:
51:76:64:73:7c:15:ca:36:b7:71:4d:1f:bf:a3:ee:
79:09:1b:78:84:be:b9:5d:62:b0:c5:9c:74:e7:ca:
61:c1:af:9d:0d:ce:5c:b3:5b:ef:86:49:29:e4:c4:
c2:bc:3c:69:c3:d8:67:98:90:6a:9d:a8:41:11:0e:
bd:0f:a5:44:17:0d:30:75:04:4b:ad:83:ad:6c:c1:
e7:07:06:04:01:93:ea:55:0c:89:18:a4:c6:48:83:
53:d4:52:d8:9c:ec:75:8a:9c:28:f2:07:11:4d:25:
9a:48:e8:06:41:28:4d:46:b7:41:b2:08:cd:4a:e5:
78:c2:42:57:9c:b9:21:67:5b:dc:19:4e:7b:08:ce:
e8:b6:62:95:94:e8:0c:df:48:5d:d8:2b:e6:9f:7e:
bf:d2:f7:2a:1d:f9:a5:62:69:98:fe:8e:f1:a8:de:
00:10:bf:d2:12:24:87:fc:4d:e7:dd:90:ad:44:f1:
64:6a:16:d2:75:36:d1:5b:d2:b7:5f:67:90:1b:85:
90:9c:e2:f0:43:30:f4:fb:45:fe:4f:5b:67:2e:8c:
a3:b0:34:dc:2c:a0:0a:29:da:18:b1:97:4e:18:08:
6c:ba:0e:2b:b5:a5:67:38:28:33:7f:4e:a0:31:0f:
99:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:7F:76:AB:8C:A3:23:70:23:AE:55:86:A4:A7:55:31:A8:A9:43:89
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143608.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3be::/32
Signature Algorithm: sha256WithRSAEncryption
a9:4f:31:d6:a6:32:0e:8e:47:7e:96:d2:ec:3d:18:fc:18:5d:
fb:8d:db:1a:91:fe:33:93:12:c2:07:e2:58:39:ec:f9:d6:41:
cd:66:7d:e8:2b:80:87:67:9a:ad:04:d1:5f:4f:66:79:7f:f4:
f8:e7:2d:38:d1:66:42:40:93:67:50:77:18:ee:ba:ba:6c:90:
71:fa:c7:6f:64:3c:0a:5b:8c:24:c6:4d:b2:30:6e:53:0c:8f:
c8:07:34:54:f3:09:a9:2c:15:63:d6:0d:f3:9d:5e:a2:dd:bc:
79:4d:41:4a:3b:e6:d1:65:bc:34:11:5d:e1:c3:43:9f:02:76:
e9:84:4f:c3:fa:38:7c:b9:c8:a6:7e:94:52:02:c8:dd:86:8d:
ab:76:e6:66:fe:a9:74:21:9c:ab:22:48:b7:98:ca:a0:40:7d:
01:9b:98:cb:8d:f5:90:0d:9b:d8:6c:f9:05:60:8c:fe:b0:4a:
ad:56:12:fc:a4:15:83:f2:f1:d1:49:80:10:3a:13:f1:fb:c1:
ea:35:80:1b:f5:fc:fa:e1:df:9d:99:b9:ad:32:f8:fa:96:e9:
4d:af:49:f0:71:de:8c:af:4b:af:99:2a:c3:54:7b:9c:14:57:
4f:50:ec:21:55:df:34:cd:5f:be:62:9e:b6:09:5c:1c:a8:c3:
1b:f3:48:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:20 2026 by rpki-client