Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143628.roa
File: AS143628.roa (raw, json)
Hash identifier: oHuU97z/sZYRMoPx7T6Nd9u4FKSXGiWk1NZk0bw+QBI=
Subject key identifier: 71:77:99:53:9B:6D:FB:E6:CD:C7:8F:75:82:83:8A:0D:6F:E0:C9:70
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 167647E43A400CE6AEB854472EE37E250E1519DE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143628.roa
Signing time: Fri 22 May 2026 07:24:54 +0000
ROA not before: Fri 22 May 2026 07:19:54 +0000
ROA not after: Fri 21 May 2027 07:24:54 +0000
asID: 143628
IP address blocks: 240a:a3d2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:76:47:e4:3a:40:0c:e6:ae:b8:54:47:2e:e3:7e:25:0e:15:19:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:54 2026 GMT
Not After : May 21 07:24:54 2027 GMT
Subject: CN=717799539B6DFBE6CDC78F7582838A0D6FE0C970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:54:3f:0f:79:0c:d2:71:0a:b0:64:5c:2a:ce:
f8:73:81:d4:7a:98:ce:ee:b9:0b:4e:db:2e:83:6a:
49:72:27:99:64:a6:3b:c1:46:77:a9:fe:78:73:e5:
73:c3:d7:6a:32:67:a4:6b:cc:b9:43:6f:4a:a6:cb:
5a:8e:57:e3:3d:ea:59:65:2a:62:1d:88:ad:77:e8:
0e:b3:6c:7a:aa:85:b0:16:b9:4c:18:26:23:9e:8c:
1b:02:bf:5e:59:90:2d:89:97:68:62:94:3d:2b:35:
ba:c7:c6:45:9d:bc:3e:ef:85:75:ea:2f:85:ed:40:
ff:ee:ca:83:19:42:b7:49:dd:c7:36:8b:81:4f:40:
a5:3c:b6:b1:0f:09:56:35:1e:da:0d:34:00:4b:53:
c9:04:d1:7d:28:7d:f5:fe:00:bd:8c:19:96:a6:57:
4c:15:ac:33:da:d2:03:e1:f4:d7:b9:20:51:74:19:
39:92:e7:92:1d:5b:fe:69:2c:95:36:2c:97:55:bb:
86:ed:c5:02:55:60:d0:ef:09:41:4c:09:af:9d:84:
a4:fa:cd:9b:eb:00:89:0d:2d:b6:68:22:c7:77:82:
3c:88:c7:06:89:8c:90:ce:63:dd:b9:22:3f:55:1e:
2c:30:41:cc:6e:cc:9d:ad:be:bd:de:90:76:76:f2:
93:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:77:99:53:9B:6D:FB:E6:CD:C7:8F:75:82:83:8A:0D:6F:E0:C9:70
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143628.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3d2::/32
Signature Algorithm: sha256WithRSAEncryption
8b:18:51:9e:a2:18:28:21:46:9d:37:fe:38:04:04:99:48:de:
60:06:c7:06:25:ec:43:15:db:e4:dd:8e:2e:02:ff:56:72:01:
50:6c:d3:e9:a0:63:aa:b3:34:1d:7c:37:fb:b3:6e:a0:35:73:
17:b1:77:ab:37:b6:d4:14:79:9a:79:42:b5:17:00:47:06:74:
22:37:8b:53:ec:b5:90:df:5d:37:4b:4d:91:e1:3d:65:f9:5d:
57:16:9a:c7:4a:3f:e5:ae:0b:ca:d1:f6:2f:ec:78:9d:49:bf:
b5:c0:52:3e:74:7b:95:f7:b7:6b:03:1d:af:d1:f4:89:63:cf:
47:10:11:37:d4:c6:20:65:7a:5f:d5:d5:a9:49:33:34:5a:ea:
20:d4:7d:f4:7c:6e:7b:f3:12:66:35:9f:3a:89:b0:72:36:51:
8a:d1:65:31:4c:86:ed:6d:9d:6f:a8:99:a1:c6:20:c8:6d:fc:
f9:7d:d7:77:99:db:db:89:ab:0d:80:6f:9e:ae:7b:ed:7c:87:
3e:83:31:c0:4c:ca:68:61:81:bc:a9:00:6b:23:27:47:4c:2c:
42:9f:22:61:81:2e:73:c0:56:50:a8:5e:e2:1b:eb:bd:da:7b:
93:89:b3:e5:eb:d0:10:ff:6b:33:13:18:5f:67:db:1c:dd:99:
f4:30:12:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:12 2026 by rpki-client