Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143629.roa
File: AS143629.roa (raw, json)
Hash identifier: foCiX7Ks1M/pH9hZwl0Gg/9D1C/oBNgVbLaefuE4vdw=
Subject key identifier: 81:B6:63:DF:8A:4A:F0:9B:85:B9:27:4B:DD:B2:56:06:90:52:E8:A6
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1BE732E4E237A54B5B2A855F7FEFA25C8442F3BC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143629.roa
Signing time: Fri 22 May 2026 07:24:43 +0000
ROA not before: Fri 22 May 2026 07:19:43 +0000
ROA not after: Fri 21 May 2027 07:24:43 +0000
asID: 143629
IP address blocks: 240a:a3d3::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:e7:32:e4:e2:37:a5:4b:5b:2a:85:5f:7f:ef:a2:5c:84:42:f3:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:43 2026 GMT
Not After : May 21 07:24:43 2027 GMT
Subject: CN=81B663DF8A4AF09B85B9274BDDB256069052E8A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e0:57:63:da:85:b9:61:a5:d3:50:21:ee:fc:
4d:a3:ff:89:be:ba:da:e3:7a:c5:60:5c:5b:b9:ec:
23:a9:19:4c:f2:45:eb:9d:76:a5:f1:eb:ee:4b:6e:
8d:bb:26:99:f1:50:9d:03:d3:0a:3f:b2:3b:57:69:
7b:fb:f6:26:21:84:c6:d9:b7:1c:ef:7f:11:0b:d7:
3e:81:0e:63:ed:a2:c6:94:76:c6:bb:a9:ba:72:2f:
fd:1d:22:8a:a5:85:5d:28:8e:96:bf:b1:36:f0:67:
81:b0:81:e9:6c:2e:ff:0c:9b:da:31:56:c9:d8:28:
07:4e:16:f8:e8:69:0e:f5:63:bb:a7:d4:d0:3a:30:
64:c5:f3:df:ea:22:88:40:55:05:13:c4:78:a7:fb:
de:55:6b:70:ef:db:e3:34:da:f7:a9:aa:35:97:de:
19:da:f2:15:3a:9f:b7:9b:2e:46:67:39:b2:78:18:
3b:bb:57:74:3a:d9:4a:8a:e1:00:f0:36:a5:9a:45:
ee:d3:db:3c:e1:0d:0c:dc:e7:56:9a:d2:f5:c7:45:
06:2f:25:e0:89:24:e2:cd:8e:7b:38:76:74:78:7c:
46:b7:b2:7a:8b:78:ea:67:44:95:1e:34:d7:14:8a:
78:d0:b9:ac:3e:d7:bb:4f:17:2c:4e:14:2e:d4:21:
aa:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B6:63:DF:8A:4A:F0:9B:85:B9:27:4B:DD:B2:56:06:90:52:E8:A6
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143629.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3d3::/32
Signature Algorithm: sha256WithRSAEncryption
b8:15:75:b0:3b:7a:40:f2:c3:8c:a1:e3:b5:00:47:c4:36:e1:
5c:b2:62:4d:9d:c3:d6:32:53:56:b4:ce:35:a7:b6:c4:09:05:
58:e8:b4:2e:e5:5c:86:aa:d2:1a:77:4e:07:2a:1c:1e:6a:1b:
41:c9:a9:6a:13:c1:dd:8d:8e:59:f0:c9:eb:0c:5b:64:0c:c5:
97:a7:b9:44:3d:20:59:ac:07:9a:b8:8e:47:39:56:86:e4:a2:
02:28:13:4f:e4:c4:46:9f:d2:8c:10:a3:54:7d:d2:b2:9a:9a:
1e:51:3a:4a:51:f3:00:b2:a3:e5:b4:3a:0e:97:7c:c8:2e:57:
55:13:64:54:08:8c:f3:d9:c2:c0:23:cd:92:ff:0f:db:c1:a1:
17:b8:a8:7d:db:af:c4:ff:2b:28:cb:39:9f:33:9a:9c:7f:60:
88:1d:d6:2f:88:3c:82:7d:cd:c7:11:9c:dd:32:34:af:55:1c:
35:a0:08:ec:95:ba:2a:18:2d:ac:60:01:fa:7f:b8:4f:6c:4b:
30:48:70:3d:21:8a:ec:ab:45:67:e4:3a:94:d3:78:33:b1:8d:
77:6e:18:3d:bd:f3:9e:a4:89:d3:e1:25:9f:8a:96:cd:9f:ed:
3c:26:1e:d8:8a:03:ad:2e:6f:2d:b8:d9:17:17:62:1e:6c:d2:
69:09:1d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:12 2026 by rpki-client