Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143609.roa
File: AS143609.roa (raw, json)
Hash identifier: +FU5nXvJSUR1wXYfoBQ9Ay8qTNzRiQtapufC5/ECzZ8=
Subject key identifier: 11:2A:14:D3:CE:4A:E0:71:CF:0E:31:7D:85:29:2F:4C:11:24:1C:DD
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 734ABEAEFD856CFAFCC7FEB33971901D9466FC27
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143609.roa
Signing time: Fri 22 May 2026 06:05:18 +0000
ROA not before: Fri 22 May 2026 06:00:18 +0000
ROA not after: Fri 21 May 2027 06:05:18 +0000
asID: 143609
IP address blocks: 240a:a3bf::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:4a:be:ae:fd:85:6c:fa:fc:c7:fe:b3:39:71:90:1d:94:66:fc:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:18 2026 GMT
Not After : May 21 06:05:18 2027 GMT
Subject: CN=112A14D3CE4AE071CF0E317D85292F4C11241CDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:06:a6:60:f4:b3:8e:cd:6a:92:da:fd:a3:ff:
b6:02:e5:de:3f:2a:90:ec:d3:de:16:23:80:dd:0b:
eb:cf:ce:cf:b1:7e:62:59:35:01:5f:84:8c:bb:4f:
08:73:1b:31:05:56:0f:4f:32:51:38:0e:da:61:80:
10:91:2d:5a:17:3d:ab:a4:14:f1:c1:f8:92:65:68:
90:d2:fa:28:84:52:9e:bf:44:1e:a4:21:25:ce:cd:
f4:70:35:9d:27:e4:91:e3:93:bc:f8:25:07:a7:6a:
9e:48:f2:33:67:52:94:46:8e:79:02:ee:b7:bc:b1:
9a:ac:b6:2c:62:40:83:4b:9d:c7:a9:62:52:60:ce:
99:1f:da:62:60:33:2d:41:5e:f3:05:c9:b2:36:9f:
14:9f:79:c5:8d:74:09:2d:52:a8:16:b3:30:52:9b:
6a:3e:03:10:12:a6:8e:bb:ca:a8:78:f4:73:9c:7c:
83:e7:86:72:ef:05:2e:4d:38:fd:3f:4a:1c:b9:df:
04:5d:40:51:2c:de:32:5d:e5:ef:2b:b9:e1:68:a5:
dd:08:23:e7:c3:ba:eb:c5:09:4f:f9:24:1c:a1:b9:
1c:f4:87:cc:0a:be:2a:d7:19:a7:4e:33:a9:c6:9e:
47:b7:68:06:54:64:b0:5a:13:b0:5f:c1:ec:26:93:
bf:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:2A:14:D3:CE:4A:E0:71:CF:0E:31:7D:85:29:2F:4C:11:24:1C:DD
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143609.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3bf::/32
Signature Algorithm: sha256WithRSAEncryption
96:8e:87:ad:79:42:a4:ba:94:93:a3:70:52:3d:8d:b4:59:92:
cf:b0:03:c4:f0:33:39:14:e5:88:ba:d3:69:54:fd:bd:6c:24:
52:28:5b:30:f2:d1:df:08:fc:7a:6e:e7:e2:72:f5:5b:42:fd:
74:fe:00:bb:68:3e:f7:1e:e5:98:9f:3c:5a:e2:9b:c4:42:04:
17:05:b6:18:a0:64:61:11:ea:5b:c0:df:c8:31:77:37:29:99:
6d:b3:04:87:f9:88:61:92:7a:da:4e:c0:90:cc:7d:ac:bb:73:
bc:c6:56:c7:1b:09:bb:95:29:be:8f:2e:7a:68:12:65:ba:97:
9c:cd:f1:00:05:de:22:94:98:fe:90:31:1e:7e:e1:c8:d1:32:
20:e1:9e:58:e9:6d:f1:71:90:77:30:a5:39:24:60:d4:df:81:
f8:38:ef:43:06:40:db:26:d6:af:14:3e:da:e1:af:dc:82:11:
ba:d0:86:9c:c5:1e:5e:84:f4:40:e0:30:e5:8e:24:d7:c9:34:
61:3b:e9:a5:30:13:e4:7c:be:bc:1f:c1:16:56:e0:5e:75:0e:
54:fc:92:b8:49:12:45:57:78:41:c4:17:6b:d2:43:ec:a7:b3:
12:42:6a:eb:77:81:f2:b2:95:a4:89:70:c4:a5:c6:4a:05:f5:
0e:1e:d2:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:53 2026 by rpki-client