Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143617.roa
File: AS143617.roa (raw, json)
Hash identifier: YGsSm4UBhkKqz65QNf0p69SNXxC8QANOLC2XxbLXC8Y=
Subject key identifier: 48:B8:99:A5:CA:9B:77:09:7A:DA:6B:50:C0:39:98:F9:69:99:F7:2A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 22607E565FA1BB3175353C79415E0576EC822B67
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143617.roa
Signing time: Fri 22 May 2026 02:47:35 +0000
ROA not before: Fri 22 May 2026 02:42:35 +0000
ROA not after: Fri 21 May 2027 02:47:35 +0000
asID: 143617
IP address blocks: 240a:a3c7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:60:7e:56:5f:a1:bb:31:75:35:3c:79:41:5e:05:76:ec:82:2b:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:35 2026 GMT
Not After : May 21 02:47:35 2027 GMT
Subject: CN=48B899A5CA9B77097ADA6B50C03998F96999F72A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b2:7e:6a:14:02:50:24:42:3e:33:a8:22:2a:
24:f3:03:c9:92:53:63:e6:33:46:d2:be:ef:4d:83:
ce:9e:48:6b:da:5a:77:96:31:51:2f:af:50:0e:a2:
84:8e:40:13:05:98:e6:fd:b3:81:99:d2:13:4a:29:
03:12:0e:24:a8:db:53:8c:95:de:81:74:20:b6:e4:
bd:b1:2a:02:2a:85:70:fc:26:bb:79:65:15:e3:5f:
6c:f2:c3:2f:1a:c0:61:b2:e4:ce:7c:a0:8a:1f:6d:
40:24:f1:13:1c:19:4e:7c:1c:08:86:2c:8b:38:7b:
27:1c:a3:b0:77:18:d4:41:78:e1:81:a8:32:ca:90:
d8:ef:fb:1c:ef:88:71:9b:ad:9e:38:f3:a2:f6:0b:
d8:09:48:08:72:db:4c:af:ff:4d:0e:91:f7:97:ce:
5b:45:d4:1c:91:01:9f:c4:07:d4:c0:fd:74:13:10:
06:96:aa:81:1f:51:eb:cd:68:65:1c:60:2c:85:43:
14:f3:07:e1:c7:51:8c:9f:fb:6e:95:48:87:11:44:
42:21:cc:16:20:a2:ac:92:dd:36:f8:bd:39:69:0e:
0a:53:12:1a:e8:ab:c6:7c:38:01:1e:15:97:97:90:
7d:16:13:c5:5a:a3:a9:94:9c:88:dd:92:7b:ea:64:
68:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B8:99:A5:CA:9B:77:09:7A:DA:6B:50:C0:39:98:F9:69:99:F7:2A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143617.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3c7::/32
Signature Algorithm: sha256WithRSAEncryption
af:db:9b:5e:cc:05:6c:8a:0d:db:29:8e:70:10:92:d7:47:de:
ac:79:02:57:1c:1c:29:79:64:08:8f:30:04:fe:bc:ce:ae:03:
68:1a:4c:42:21:4c:da:0e:9f:f8:14:19:0b:5b:91:0e:7a:ca:
2d:2c:92:b7:a7:64:78:ec:82:b5:c9:8f:f3:f8:e9:4e:fe:25:
c0:af:1c:2b:a8:43:03:60:e5:3c:3b:08:26:82:4a:41:89:c6:
11:c4:1d:7f:34:c6:fd:59:0c:86:32:20:98:b6:1d:5c:3d:c8:
57:08:ac:86:74:33:a3:e2:b1:9c:0b:9b:86:e9:37:82:dd:1e:
6b:9c:51:ba:2e:69:a0:4b:9c:59:7b:7e:89:16:db:5c:e4:97:
40:05:0f:b4:34:42:de:1d:ab:8c:0b:7e:df:78:f7:7c:8f:5f:
c2:23:6b:60:6f:db:d5:72:b9:13:aa:e9:96:dc:f4:ed:2d:7a:
93:6e:85:43:6a:1d:75:6f:24:3d:52:fd:7b:ba:26:6a:e9:b7:
56:bb:cd:3b:ab:63:c7:97:97:f3:c0:03:07:8a:b3:05:c9:04:
2f:93:ad:0f:4a:57:e3:b8:9e:f7:64:b4:ce:b0:31:0c:38:79:
a7:6a:c6:4d:4d:b9:25:41:6d:9d:66:b7:b0:75:f1:3d:9c:e1:
f9:cc:98:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:11 2026 by rpki-client