Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143630.roa
File: AS143630.roa (raw, json)
Hash identifier: lonrHP6X0Y53EaNWbcIa/X9M6SG6M/B7CLzqoaJv4tM=
Subject key identifier: B1:7D:1C:AF:A1:BE:15:DF:E5:FE:25:96:0D:BD:1E:21:47:ED:A2:49
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 38F9A4D904245FEEB920A3D497E1549F4F09C018
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143630.roa
Signing time: Fri 22 May 2026 07:41:22 +0000
ROA not before: Fri 22 May 2026 07:36:22 +0000
ROA not after: Fri 21 May 2027 07:41:22 +0000
asID: 143630
IP address blocks: 240a:a3d4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:f9:a4:d9:04:24:5f:ee:b9:20:a3:d4:97:e1:54:9f:4f:09:c0:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:36:22 2026 GMT
Not After : May 21 07:41:22 2027 GMT
Subject: CN=B17D1CAFA1BE15DFE5FE25960DBD1E2147EDA249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:35:2e:d3:b4:01:97:75:19:2c:a5:43:43:ee:
9b:cd:81:cf:45:39:5c:b3:ca:5d:63:12:61:7d:bd:
86:2f:e1:cc:1f:d8:6d:4e:e1:6c:52:33:87:83:5a:
7a:cb:52:70:e0:8e:e5:f8:b7:b2:c0:25:07:18:bf:
86:b3:48:d7:f2:8e:6c:d4:27:72:ec:3d:6c:b2:24:
d3:2c:f5:9b:56:67:e8:01:a8:3d:87:03:1e:17:fc:
d7:d0:59:ad:a5:6b:52:96:8f:e6:e0:61:47:0b:84:
a2:c3:c5:f4:a4:cf:85:5f:1b:ba:c4:db:85:98:d8:
49:57:dc:38:f0:4d:4b:6b:2e:a8:af:2b:5b:51:fa:
ca:23:fd:5e:82:1c:c3:40:d5:29:e3:87:32:43:e2:
7b:9b:1f:41:50:37:35:81:0c:25:5e:5b:08:83:d0:
d6:b2:28:4f:67:9a:08:33:35:55:b6:90:5d:7a:d8:
92:75:0f:8c:bd:f7:ef:4a:01:6b:9a:09:84:83:fd:
4c:79:d2:de:dc:42:d0:c6:a3:20:e4:43:b8:ff:99:
bc:d2:5a:9d:3d:5b:8a:8b:d0:10:e4:79:44:0e:3a:
3c:76:bc:e0:b9:48:0f:8f:ff:29:29:31:66:8b:7d:
41:9a:2f:aa:68:19:e9:d2:eb:ac:11:83:c9:51:66:
f4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:7D:1C:AF:A1:BE:15:DF:E5:FE:25:96:0D:BD:1E:21:47:ED:A2:49
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3d4::/32
Signature Algorithm: sha256WithRSAEncryption
1c:60:16:1b:ee:08:77:36:6e:75:fe:12:3e:48:ac:59:26:f1:
d8:ee:4f:a3:65:ff:94:42:59:17:ef:ef:21:64:97:13:8e:1e:
d9:4b:3e:18:f0:bb:e8:ba:17:ee:0a:c2:3c:a1:b3:9c:85:fa:
2e:a5:31:b6:2f:db:50:92:98:3e:a2:a8:b2:3a:f4:4a:47:d2:
c4:8e:bd:3c:26:6a:0e:bf:04:5b:21:51:23:af:46:59:ca:60:
f3:1d:56:6f:07:1d:57:51:70:f8:7b:1b:0b:47:b2:08:83:09:
82:06:af:28:ba:17:6d:f3:1f:f8:e5:9a:93:82:9c:65:26:2a:
d7:14:e6:60:df:89:4b:cb:cb:f3:8d:05:9f:b4:fe:eb:e9:af:
32:05:8d:24:32:77:56:6b:01:37:6f:ee:83:55:8d:4f:41:2d:
25:e7:8e:22:ce:59:4e:cb:71:92:1e:11:d7:5f:60:15:d9:f6:
4b:a9:4b:f1:fb:42:22:4d:07:59:8a:74:46:f4:bb:a1:62:06:
18:26:2e:c2:6d:15:b9:bd:20:6f:17:5c:f6:f8:ed:4a:2e:c2:
26:d6:0e:12:64:c0:dc:c3:dc:b4:c7:b6:ee:8a:3f:2a:74:b4:
9f:f6:f2:e7:cf:0d:ff:e8:5e:78:81:9d:06:14:b5:54:10:2a:
44:26:4e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:25 2026 by rpki-client