Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143650.roa
File: AS143650.roa (raw, json)
Hash identifier: egm1CS/XS80O5X5pMz/nMNg0n5Yhc+RpoRE5BRiAcCs=
Subject key identifier: 61:29:0B:7F:EB:47:EF:8C:17:54:55:0C:C4:00:48:00:FA:02:4C:52
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 661891FFF50302207317FEF4BEFABB2AE62E743E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143650.roa
Signing time: Fri 22 May 2026 04:08:15 +0000
ROA not before: Fri 22 May 2026 04:03:15 +0000
ROA not after: Fri 21 May 2027 04:08:15 +0000
asID: 143650
IP address blocks: 240a:a3e8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:18:91:ff:f5:03:02:20:73:17:fe:f4:be:fa:bb:2a:e6:2e:74:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:15 2026 GMT
Not After : May 21 04:08:15 2027 GMT
Subject: CN=61290B7FEB47EF8C1754550CC4004800FA024C52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3b:00:30:c5:3c:74:c4:2b:2f:c5:3a:28:b2:
c5:aa:a4:58:54:80:25:59:73:c7:1c:83:fc:6c:9d:
66:18:a4:f7:88:28:6a:3f:f1:5c:f3:13:ab:26:3c:
2d:59:de:5c:fb:5f:3a:1d:d4:62:9d:84:f3:5f:e7:
81:4c:8f:47:33:5d:af:85:b8:1a:b7:92:b7:2b:51:
23:67:1a:b3:57:f5:e3:9e:cd:c3:bf:ac:20:5b:62:
a8:93:75:75:ea:1a:5c:76:de:a6:3f:77:25:69:1d:
25:0f:b5:48:77:32:a6:f0:c2:0e:42:6e:6e:ee:64:
b8:89:54:ae:60:b5:4a:87:f1:8e:fb:4e:a8:25:91:
c4:58:db:ca:8d:96:9f:70:80:00:1a:98:52:c3:70:
de:3a:02:ce:f8:17:0a:0e:0b:34:93:c9:24:fb:a5:
03:cb:68:31:02:d0:45:9b:ba:ea:7c:1f:e5:95:db:
50:38:4a:4c:c6:2a:58:8d:55:05:d8:6d:2e:a3:27:
61:e4:ad:8b:50:76:2b:bb:36:d4:a1:46:a4:64:69:
07:9a:61:ad:89:a4:5f:ab:47:dc:dd:00:fc:1d:3c:
01:ce:c0:11:12:ce:7b:cf:b4:90:17:99:a7:03:a2:
db:dd:c7:c6:8a:53:6d:9c:ee:4b:f8:a8:77:b0:ee:
3b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:29:0B:7F:EB:47:EF:8C:17:54:55:0C:C4:00:48:00:FA:02:4C:52
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143650.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3e8::/32
Signature Algorithm: sha256WithRSAEncryption
b3:97:86:7f:9b:c7:27:4a:15:d4:6a:ea:1b:e5:9c:66:b4:b8:
f1:8f:81:a2:e0:fd:b9:26:38:7d:58:5b:8f:fe:fe:2a:2a:13:
15:48:0c:a9:e1:1b:97:61:17:75:5e:3b:13:7c:fe:e4:77:f8:
6d:d8:48:a1:d7:f4:1a:60:3a:4e:a0:99:35:56:88:91:6a:6e:
8c:43:63:4f:06:a4:d1:92:bd:71:d9:71:e2:12:ef:81:66:7b:
27:81:8c:f3:7c:b1:c8:ec:ad:e4:a7:13:0c:43:f3:4f:bb:9e:
b3:09:81:ce:4a:70:88:5c:8b:66:de:da:62:18:69:3d:61:61:
ed:d0:04:df:fc:bb:35:75:7c:72:c3:ae:16:b7:3e:be:83:36:
1d:21:ed:3c:64:25:0c:09:1a:82:52:df:bb:a2:62:99:ba:8a:
27:7b:19:51:7b:f0:a2:f7:7c:c3:79:e1:58:1c:e1:dd:89:da:
31:93:80:ba:a1:8b:73:16:96:09:37:1f:8d:10:65:72:5d:ed:
f6:4d:71:c4:f8:b8:02:b0:e1:f8:7a:f0:24:ba:07:e1:c6:0a:
df:03:9f:bf:4d:10:53:83:60:84:4e:e5:66:f5:0b:f1:af:4f:
23:a7:6b:b6:5b:b9:b3:94:67:2d:a5:be:53:6b:98:3e:ff:f4:
74:dd:50:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:56 2026 by rpki-client