Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143610.roa
File: AS143610.roa (raw, json)
Hash identifier: Epij8DwlQKGGhgVAzs1zvgi4YQFYLoVvqwPGsesmAhc=
Subject key identifier: 1F:00:C3:A4:76:71:23:09:C6:5E:85:F1:B5:12:FB:5B:1F:4F:41:36
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 759E563DC575DAAC61ED3154957723EE37155694
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143610.roa
Signing time: Mon 25 May 2026 02:22:09 +0000
ROA not before: Mon 25 May 2026 02:17:09 +0000
ROA not after: Mon 24 May 2027 02:22:09 +0000
asID: 143610
IP address blocks: 240a:a3c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:9e:56:3d:c5:75:da:ac:61:ed:31:54:95:77:23:ee:37:15:56:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:09 2026 GMT
Not After : May 24 02:22:09 2027 GMT
Subject: CN=1F00C3A476712309C65E85F1B512FB5B1F4F4136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f2:fd:7a:30:10:01:fd:80:23:bb:37:3e:a5:
fa:d5:7f:d5:75:f0:2f:6b:42:cc:2f:d2:ed:08:6d:
60:47:72:c6:10:dd:cb:8a:6f:a5:45:51:ac:e4:00:
43:f8:d7:fc:c0:1f:d5:45:76:0a:a1:e7:0e:62:b6:
63:86:53:96:e0:59:19:9b:7e:12:f1:fe:0f:37:b7:
a7:ca:1f:9a:99:58:6b:46:19:ad:ad:03:b9:aa:62:
d8:fb:ee:13:5e:24:d4:a2:41:f7:81:74:fe:b0:6e:
1e:34:3b:e9:33:52:4b:6e:3d:67:fe:09:0b:31:76:
23:06:2d:93:1f:cb:5b:53:32:c3:8f:9a:d6:99:1b:
8b:96:33:a6:7a:50:d7:1c:74:90:f5:c5:8b:f2:80:
95:a7:8d:6d:b6:69:6a:cb:d8:e8:57:5c:6e:72:48:
94:90:d6:36:74:6f:ef:7e:a4:9e:61:bd:2d:dd:8c:
45:2c:c5:61:a4:df:96:cd:11:b3:86:97:27:a0:39:
70:0c:6f:36:7f:51:af:e8:13:6e:f0:94:fb:ea:29:
f9:47:8e:01:0b:a8:35:88:83:37:59:05:44:77:fb:
12:43:26:c3:34:de:08:72:bc:5d:15:b8:04:85:a4:
02:09:d3:5f:ab:ea:81:9c:ad:a3:ff:44:ca:8e:0a:
ac:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:00:C3:A4:76:71:23:09:C6:5E:85:F1:B5:12:FB:5B:1F:4F:41:36
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143610.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3c0::/32
Signature Algorithm: sha256WithRSAEncryption
28:02:e4:66:84:27:cd:fc:f1:7a:63:7d:bb:eb:f6:1e:86:39:
65:10:51:ce:c8:6f:5d:3f:fe:af:fb:04:f0:86:f9:8e:38:83:
6a:d3:e5:dc:56:8f:ae:00:3f:2a:3f:d8:4a:30:f1:56:a5:6d:
92:35:04:b9:02:f6:8b:c5:65:7d:e4:2b:98:d9:bd:50:ca:d0:
2f:8d:16:6a:42:44:60:44:9c:ab:1c:26:b0:ef:cc:97:97:05:
64:45:da:95:02:db:a3:cc:ab:10:d8:c8:f9:ca:ab:db:32:08:
67:52:56:65:3d:c7:5c:52:c4:18:88:92:63:8d:c9:09:42:b0:
71:06:88:4c:24:aa:95:0b:fb:f8:96:b1:13:1d:7c:f8:28:b4:
7f:88:67:fd:27:51:98:a5:3e:6f:6d:d4:36:24:c1:e2:3f:ca:
b4:20:72:3f:52:f9:fd:99:dd:44:14:16:ac:7a:d2:49:f0:1f:
43:58:80:bc:98:2d:45:52:41:d1:cd:15:59:a8:24:64:ce:ba:
8c:d1:be:a4:86:13:c7:06:6d:0f:35:33:88:df:25:68:5c:51:
bd:d9:6b:f6:ff:ad:ad:e5:b8:d8:29:9d:aa:6e:cc:09:46:ff:
72:23:ab:8b:49:4e:1f:05:a2:0c:73:6f:df:8e:4c:9c:a7:06:
da:de:56:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:01 2026 by rpki-client