Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143635.roa
File: AS143635.roa (raw, json)
Hash identifier: BpW5zgjt3m+qe0+ptVh2eMcfFROyqVYYBuZySM+LMVg=
Subject key identifier: 59:C8:D8:3C:D9:25:5A:95:92:06:F7:30:99:9A:CE:DF:D1:A1:61:45
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7B56CDC37BA6BC6B9EEA3BE7CDD02393CFEE092D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143635.roa
Signing time: Fri 22 May 2026 07:32:04 +0000
ROA not before: Fri 22 May 2026 07:27:04 +0000
ROA not after: Fri 21 May 2027 07:32:04 +0000
asID: 143635
IP address blocks: 240a:a3d9::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:56:cd:c3:7b:a6:bc:6b:9e:ea:3b:e7:cd:d0:23:93:cf:ee:09:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:04 2026 GMT
Not After : May 21 07:32:04 2027 GMT
Subject: CN=59C8D83CD9255A959206F730999ACEDFD1A16145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:15:02:9e:50:96:61:a3:58:c7:f0:94:ab:ea:
c7:87:9e:ed:1e:6e:b6:c8:e7:25:72:4d:c5:03:01:
5e:c1:bf:0f:d0:b7:f5:7e:5d:4a:39:22:82:89:d6:
3e:b9:56:b1:11:b9:31:85:fe:e6:f4:5b:d9:82:2c:
c5:22:fa:31:a9:7f:4e:fc:a6:c2:0e:25:79:6c:61:
2b:3c:51:3f:8a:70:f4:71:9a:d3:ea:46:da:c5:5f:
68:94:65:df:8f:40:0e:da:8e:0c:a1:f2:6c:d0:2a:
1b:43:7e:49:bd:52:8f:02:78:4e:0c:02:16:ec:e7:
05:6b:d7:cd:6f:81:1d:30:1b:9b:b0:dc:42:6a:fa:
9d:54:c7:28:ff:c7:f0:c4:f4:ad:d7:3b:36:a3:d6:
dc:3f:73:56:30:28:bc:17:eb:53:7b:5c:11:60:30:
b7:3d:42:70:e9:1f:a8:cf:43:57:ae:3d:1d:5b:ec:
36:7a:7c:18:b1:8c:29:8c:67:fd:fe:d2:97:1f:bd:
06:b3:4b:14:bb:81:52:63:66:86:13:f1:93:74:ac:
0c:6d:22:fa:a1:2e:26:98:8b:91:29:e8:85:fe:63:
d1:93:39:c0:5f:4e:ab:6b:5c:3e:48:c5:b0:13:0c:
94:5b:10:cb:21:4a:82:2b:bb:db:bd:31:4a:85:8b:
90:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C8:D8:3C:D9:25:5A:95:92:06:F7:30:99:9A:CE:DF:D1:A1:61:45
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3d9::/32
Signature Algorithm: sha256WithRSAEncryption
74:bc:ad:96:7d:ea:62:01:00:30:5f:b7:37:9b:51:03:18:d2:
72:3c:f7:5e:1a:dd:3a:6e:d5:f5:5d:04:0e:ca:76:4f:d2:48:
1f:4c:91:19:bc:89:5f:6e:60:f4:69:0d:0b:cb:be:b5:2a:7e:
35:a8:8d:53:01:2f:b5:17:3a:7a:86:cc:b5:87:5a:79:b3:3c:
69:87:80:6e:91:aa:bc:d5:b9:ac:c9:3c:80:91:6d:2e:7d:80:
e6:fe:c1:c2:4c:f1:2d:ed:3d:6b:53:d2:c4:77:f4:b4:89:35:
bc:0c:c5:b7:1c:f5:ea:05:b6:37:2c:42:6c:79:2e:91:d8:06:
46:4a:3d:4d:c3:e1:26:4a:2a:6f:58:68:36:e1:10:53:94:85:
1c:d2:9d:37:46:96:f8:3e:23:df:6c:df:8e:97:b4:22:21:ce:
97:e5:81:c8:23:7f:03:4d:7c:c0:58:0a:66:a0:24:0d:57:79:
c1:99:94:9f:3a:7d:c2:d8:0c:e7:07:21:48:42:84:b1:ad:6e:
19:af:cd:7c:b2:63:a8:29:72:82:21:06:b9:2e:f6:b9:e8:66:
ed:26:b8:5f:e1:af:5a:0c:7d:e0:55:29:39:ff:c9:3a:08:e5:
43:87:2c:08:6a:b2:50:a3:4d:b5:d5:c1:13:77:64:22:ae:3f:
af:94:d3:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:37 2026 by rpki-client