Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143631.roa
File: AS143631.roa (raw, json)
Hash identifier: CtjgMVr5oNZUIUPA4gVYgsvXTPtYLAn2MBPBNSQr69c=
Subject key identifier: 21:DA:30:98:A6:3B:F6:A1:7A:F3:09:14:4A:0D:17:22:42:22:D0:63
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7C58A9EBD7B8F2598BAFA7534C3AFAA000E88633
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143631.roa
Signing time: Mon 25 May 2026 01:51:10 +0000
ROA not before: Mon 25 May 2026 01:46:10 +0000
ROA not after: Mon 24 May 2027 01:51:10 +0000
asID: 143631
IP address blocks: 240a:a3d5::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:58:a9:eb:d7:b8:f2:59:8b:af:a7:53:4c:3a:fa:a0:00:e8:86:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:10 2026 GMT
Not After : May 24 01:51:10 2027 GMT
Subject: CN=21DA3098A63BF6A17AF309144A0D17224222D063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a4:ad:e9:2e:43:64:b7:15:ce:d2:1d:93:8d:
3b:0f:9c:52:5a:22:13:03:f8:49:96:38:d6:2e:98:
28:f8:6d:f7:86:3b:8e:d1:2a:24:5d:a4:f0:61:cd:
ed:67:a6:8b:82:c3:ad:90:08:0a:52:1c:97:0d:71:
f8:01:de:f4:ce:54:6b:c0:c4:bc:3a:24:77:9d:98:
51:b6:7f:af:5d:ae:4e:78:11:ae:7a:19:9b:fc:ad:
51:92:ae:81:03:db:16:16:c1:e7:38:cf:bd:1b:38:
ce:0f:09:81:b3:e8:dd:24:55:8c:c6:a5:0c:6c:51:
c8:73:7a:2b:54:65:50:c8:71:fb:c4:89:8b:8a:29:
12:56:70:f1:72:4a:c4:b1:76:4f:1d:24:57:7a:87:
65:0b:75:db:b6:d0:53:9f:95:a9:af:cf:64:09:34:
9f:70:f6:99:49:02:fb:7d:e0:6b:fe:96:20:84:99:
e9:c8:cf:05:60:cb:6a:8a:92:2f:90:3a:85:5d:da:
21:e9:50:88:1b:e5:4b:70:37:6a:53:08:3a:90:68:
28:35:27:66:34:02:fd:3f:45:3c:7c:28:8b:23:e8:
89:21:4f:0f:59:b9:d3:eb:28:58:a8:6b:61:cd:9e:
9f:c0:af:01:3b:f7:f6:33:46:80:be:f9:3e:21:b7:
0d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:DA:30:98:A6:3B:F6:A1:7A:F3:09:14:4A:0D:17:22:42:22:D0:63
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3d5::/32
Signature Algorithm: sha256WithRSAEncryption
83:77:32:ae:fb:d4:bc:07:61:59:9d:28:4e:a1:9c:33:61:51:
6f:d9:04:df:8f:02:25:ac:f3:bb:65:35:98:02:0e:5a:fd:e6:
30:5a:93:76:ba:25:44:40:78:6a:89:6c:8c:9c:94:50:f1:fa:
d7:2d:f6:c8:f1:42:fc:b9:d2:96:7c:25:de:21:96:b8:dd:84:
93:00:61:c4:cb:6f:4d:db:41:b0:c0:25:f2:08:52:25:71:c3:
65:96:ad:57:f6:09:2a:15:ff:2e:57:db:0a:8c:23:e6:b8:a6:
af:72:6d:7a:65:ac:d6:38:d2:a1:73:e5:8d:57:c5:a2:08:aa:
18:e4:8b:13:2e:dd:ff:15:d2:ec:81:9f:9b:69:7e:38:57:97:
06:20:be:41:61:9e:19:40:d2:c3:c1:be:ea:e9:4d:e2:83:8d:
be:29:14:48:9c:45:dd:b8:52:21:8d:69:bd:a5:19:c5:91:ff:
cc:21:5f:3f:0c:93:99:96:e7:f7:4e:a6:4e:43:c2:2d:fc:db:
7b:b3:4f:d9:26:a8:b0:cb:0a:48:8f:de:a7:9e:0b:cb:ec:04:
e5:78:dd:c3:86:9b:ed:0e:1d:ab:89:e6:cc:a5:29:f4:3c:0e:
78:2e:86:22:61:69:1e:b8:d0:05:ac:bf:22:92:1f:37:29:c7:
89:fe:93:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:04 2026 by rpki-client