Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143615.roa
File: AS143615.roa (raw, json)
Hash identifier: CrKhlaTYJnPcrVNw9FXopyO+n96SVBJCGtCoGsMiTd4=
Subject key identifier: 39:5C:0C:47:3C:CB:34:26:C5:3B:91:BF:AC:C8:43:71:A1:C2:E1:78
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 78ADE3DFCA0DB54BC0FBA07A1EEBECA31DF20D62
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143615.roa
Signing time: Mon 25 May 2026 01:20:37 +0000
ROA not before: Mon 25 May 2026 01:15:37 +0000
ROA not after: Mon 24 May 2027 01:20:37 +0000
asID: 143615
IP address blocks: 240a:a3c5::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:ad:e3:df:ca:0d:b5:4b:c0:fb:a0:7a:1e:eb:ec:a3:1d:f2:0d:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:37 2026 GMT
Not After : May 24 01:20:37 2027 GMT
Subject: CN=395C0C473CCB3426C53B91BFACC84371A1C2E178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5f:ba:b2:8e:2d:ed:e0:bb:cd:ac:0f:c8:98:
36:71:5c:78:80:b8:f2:40:62:41:d3:dd:e2:8f:54:
25:1b:5d:7c:3d:56:a5:d9:9c:84:c3:e3:77:f9:87:
7e:4e:52:18:18:fe:db:56:f4:8a:8c:c9:f7:76:1e:
6a:7b:de:8b:84:ba:d2:b9:f3:30:7a:2d:97:21:7e:
e8:29:c3:2a:86:f4:91:a8:7d:c0:45:b0:ea:18:b6:
1d:29:2b:c1:9e:49:e7:79:41:da:51:fc:38:23:b0:
27:47:60:e1:8b:4e:d6:5c:0d:6b:1e:54:de:3e:f6:
14:73:d5:1c:7e:53:3d:25:1c:2f:60:f1:c6:00:72:
7f:07:40:f7:a8:55:19:73:d3:c0:5f:25:9e:7f:77:
20:53:73:3e:52:96:af:72:0a:4f:a4:cf:77:55:6f:
ec:2a:ad:8d:af:ac:a9:9b:9f:a3:82:63:13:b8:b2:
65:37:0d:f5:ea:b4:2a:62:b7:64:1a:d1:b2:7c:64:
89:76:00:e7:5a:d8:cb:9d:f3:bb:7c:68:e9:cb:d2:
30:5a:ec:5a:4d:db:40:a8:fd:77:be:3d:6c:ed:f2:
71:90:83:a6:e8:ea:18:aa:4a:8c:1d:fc:62:91:d8:
e0:f2:76:f2:9e:72:3c:eb:1d:90:1d:d1:86:90:07:
59:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:5C:0C:47:3C:CB:34:26:C5:3B:91:BF:AC:C8:43:71:A1:C2:E1:78
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143615.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3c5::/32
Signature Algorithm: sha256WithRSAEncryption
a0:89:c5:6c:98:ae:91:70:d7:fc:f0:c3:53:f5:3e:19:e1:94:
e9:21:59:3a:4c:94:29:77:ff:8d:3b:29:99:5e:1f:f1:9e:58:
1c:a7:02:fc:b1:17:cf:80:99:67:1b:32:56:47:ef:a5:ae:64:
60:16:98:98:ca:b3:f9:03:1a:ce:4c:b9:a5:79:b8:4d:fc:b9:
81:b7:ac:15:0d:44:12:eb:27:ab:6e:6e:65:43:b2:27:a3:ab:
81:57:e4:1d:15:4f:b9:52:e0:3c:fe:15:ee:30:14:93:b2:61:
0e:de:90:4e:c3:e7:14:8b:51:f6:aa:40:f2:74:f5:02:27:f9:
c4:9f:2b:e8:b3:a9:61:39:16:6c:38:eb:24:83:05:53:fe:99:
db:14:2a:79:07:81:cd:90:ac:2c:c6:49:cc:a3:b3:94:88:bb:
b1:b2:45:2c:8b:48:27:3f:cd:c9:22:76:e8:b4:6b:87:13:df:
8e:1e:76:e5:a3:4a:e6:dd:2c:e9:1b:11:fb:6b:6d:5e:c0:0f:
77:c1:bc:fe:51:59:e5:9c:37:05:8b:bf:15:71:4e:72:42:48:
ce:8f:64:d9:e5:57:73:68:25:29:07:9b:65:08:b3:89:a4:e8:
47:4d:4d:6c:1a:6e:78:38:3e:4b:ce:df:77:54:8c:5a:a6:7e:
10:85:3a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:18 2026 by rpki-client