Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143623.roa
File: AS143623.roa (raw, json)
Hash identifier: HpG4a2sdUcgMhK/bkZUN8ef0Rvc6qS6PPC3y14r+Ito=
Subject key identifier: 0A:08:98:F5:47:5F:9F:00:EF:CE:B2:F5:8F:DA:2E:B9:CE:4B:B0:BE
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1550BB53644AA29B2907F7AC413620A4F592298F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143623.roa
Signing time: Tue 26 May 2026 08:53:00 +0000
ROA not before: Tue 26 May 2026 08:48:00 +0000
ROA not after: Tue 25 May 2027 08:53:00 +0000
asID: 143623
IP address blocks: 240a:a3cd::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:50:bb:53:64:4a:a2:9b:29:07:f7:ac:41:36:20:a4:f5:92:29:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 08:48:00 2026 GMT
Not After : May 25 08:53:00 2027 GMT
Subject: CN=0A0898F5475F9F00EFCEB2F58FDA2EB9CE4BB0BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:37:cc:19:dd:a5:a7:41:5f:52:1f:23:fb:81:
e8:cf:54:c8:c8:a3:76:8e:9d:45:a8:1f:64:a7:23:
77:c3:33:50:9a:f9:36:c6:79:07:81:f6:e7:f8:a7:
54:8a:cc:ba:a7:9c:05:06:b5:ca:8f:9d:d2:41:54:
73:b5:1f:3e:f0:a1:a9:64:6d:de:bc:df:c3:e8:d0:
21:1c:18:67:25:04:6b:18:da:ad:12:1a:00:7b:44:
43:07:9b:af:bc:76:98:9d:fe:fe:35:92:0e:2f:d0:
f3:ff:fb:57:c9:a3:7b:a7:e8:91:15:e0:df:28:b8:
d2:11:98:80:34:94:9e:86:3d:2f:85:7d:0c:68:27:
49:a2:24:39:99:e3:6d:6e:cb:65:f1:6b:79:f7:00:
65:46:3e:6a:67:e5:8b:2c:43:3d:3d:8a:fb:45:6b:
16:b2:fb:bd:d3:ff:22:b5:cf:ab:b1:c5:3c:03:1c:
5d:1f:64:1d:3a:e4:d5:b6:ab:94:06:e3:09:65:d8:
68:a3:1d:cd:4d:15:ef:f9:17:22:1c:49:e2:52:6d:
ab:08:9c:54:45:f7:14:a4:ca:cb:c0:87:db:6e:04:
90:8b:5d:94:40:f2:1c:28:c3:41:1c:66:54:8e:58:
30:4a:78:25:7d:62:1b:22:a1:8e:0b:5b:51:ce:6b:
d5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:08:98:F5:47:5F:9F:00:EF:CE:B2:F5:8F:DA:2E:B9:CE:4B:B0:BE
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143623.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3cd::/32
Signature Algorithm: sha256WithRSAEncryption
a4:d1:6a:1f:c3:7e:48:9b:07:6c:16:66:58:99:f8:8b:0a:08:
fc:e5:d5:6b:3d:6e:db:4f:3b:e6:d0:8e:2c:d2:cc:60:83:a4:
3b:6c:12:e2:cc:f0:65:32:b9:c9:37:00:93:ba:94:5c:22:99:
2f:0b:2c:d1:0d:13:22:e3:7d:aa:e8:b4:5c:9f:2a:57:1f:f3:
3e:4e:01:9a:39:5c:66:ce:de:6a:1b:ca:03:b3:19:db:c9:59:
3f:1e:df:3f:df:39:c3:46:f8:6d:54:4e:2c:2b:82:63:2a:22:
9c:f4:ab:25:cb:cd:ab:5a:6c:75:5b:8b:40:e7:6b:74:cd:f3:
17:f2:c3:0d:4e:60:0c:ce:18:26:65:77:24:a2:0b:21:41:18:
7f:7b:0d:5f:50:e3:be:ba:30:ce:35:90:ff:44:28:65:bf:f9:
ff:5e:69:73:2b:53:fe:c2:b8:42:bc:a8:e1:69:eb:00:63:dc:
79:7c:d2:ba:4a:5f:a7:bd:f9:aa:38:ba:93:19:e5:08:43:50:
e6:0c:cb:7a:6d:fa:a5:cd:96:0a:9e:23:d6:a9:dd:3a:af:b8:
76:a4:2e:0d:b0:12:5f:04:d5:98:0c:03:7a:5d:c0:5b:86:11:
3d:8e:db:af:58:51:f8:78:c7:0b:70:37:ed:e7:f0:67:0f:89:
0b:29:03:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:37 2026 by rpki-client