Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143622.roa
File: AS143622.roa (raw, json)
Hash identifier: 39tlZt8rk47+7zYsUL22iY6md92TyOZ+5TnPNMkE6Fw=
Subject key identifier: BC:D3:4F:6F:8A:A9:99:CE:40:F1:8A:C4:05:F4:39:97:4B:C9:A2:11
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 18490866113C2AA7C258BD720004CF30A5F4275A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143622.roa
Signing time: Mon 25 May 2026 01:38:19 +0000
ROA not before: Mon 25 May 2026 01:33:19 +0000
ROA not after: Mon 24 May 2027 01:38:19 +0000
asID: 143622
IP address blocks: 240a:a3cc::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:49:08:66:11:3c:2a:a7:c2:58:bd:72:00:04:cf:30:a5:f4:27:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:19 2026 GMT
Not After : May 24 01:38:19 2027 GMT
Subject: CN=BCD34F6F8AA999CE40F18AC405F439974BC9A211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8c:c9:af:07:8a:ca:43:ea:b2:05:cb:6f:11:
65:42:5b:fa:70:18:19:e9:42:ad:40:26:a4:c4:72:
dc:ff:40:c6:6c:72:58:ed:f3:50:dd:79:9c:ab:14:
34:97:e8:3a:0e:c2:f7:38:c6:df:d5:dd:7e:91:60:
68:3e:3e:b8:af:6a:79:d3:f6:c3:e8:1f:42:ec:30:
cb:91:0a:95:fd:51:da:09:13:f7:cd:30:ad:ee:a8:
b9:b4:b7:cc:cd:ac:10:ea:99:11:1b:c2:b8:da:f2:
29:25:f8:6e:f6:20:a2:9d:a9:28:fe:b1:81:a8:64:
31:20:a2:48:00:b9:c4:f7:17:5c:d4:cc:ab:87:24:
cc:e0:1a:d4:02:eb:ae:97:e3:14:25:f4:5b:ae:3d:
30:01:95:86:f8:ae:74:3f:08:ac:22:ff:6b:7a:7c:
4a:00:52:34:17:01:c0:b8:6e:e1:f7:a4:7c:9b:3a:
f4:3b:71:37:a1:c6:80:21:66:68:fe:85:85:91:85:
5f:34:e0:09:45:e9:ed:6f:9d:84:31:1c:6c:be:b8:
91:f5:28:99:b4:2c:da:f9:d0:a5:8b:3b:0f:5b:03:
7b:6b:8e:7d:ca:14:e6:8c:59:9b:48:4f:78:62:f3:
ea:ce:f3:3a:ed:61:f7:f1:54:3f:da:69:d1:ca:dd:
f8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D3:4F:6F:8A:A9:99:CE:40:F1:8A:C4:05:F4:39:97:4B:C9:A2:11
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143622.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3cc::/32
Signature Algorithm: sha256WithRSAEncryption
b4:bc:29:1a:80:22:a0:bc:6d:b0:8d:e2:60:d2:79:13:75:2b:
e3:d1:e6:a5:29:7b:df:1c:15:66:46:f7:4d:38:46:06:67:6e:
91:48:97:44:bb:70:8f:cf:8d:97:2f:bc:38:33:5d:cb:7a:e6:
a6:55:93:1f:e5:50:a4:3e:9f:09:93:e5:f9:aa:09:13:f1:7f:
9d:90:51:2d:5b:ef:3d:e6:b3:9d:b6:85:54:04:dd:3a:6d:d2:
50:68:bb:10:01:31:cd:71:d3:25:9b:b0:2f:8b:d2:00:85:a8:
a7:b2:4c:53:c2:ca:14:fe:ca:cd:b3:5a:af:f6:5e:41:4f:cc:
5d:17:e9:5f:f3:c7:4a:4a:72:64:e2:a2:99:d7:cb:c3:01:e4:
8b:62:d8:c3:4d:27:67:17:b8:a4:ed:3d:73:53:81:51:40:81:
68:54:70:8a:f5:f2:60:04:86:59:e6:cf:f1:64:87:18:29:13:
2c:ec:09:ff:f9:08:3f:ff:04:3e:8b:66:ca:35:38:fe:0b:7d:
1e:55:3f:34:0c:60:90:c2:ce:18:db:a2:0d:05:9d:a0:c7:6c:
5f:93:4e:0a:f8:bc:2a:b3:29:a0:4b:5f:c9:9e:c5:6b:1f:0f:
b1:32:cf:36:ab:39:7a:96:b5:fb:6e:e0:3b:8b:c7:1a:83:9a:
59:39:ef:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:45 2026 by rpki-client