Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143657.roa
File: AS143657.roa (raw, json)
Hash identifier: JskfpGhUObs55XOueA+p3iFGW7teKf3JoxfnSyzaSAg=
Subject key identifier: 48:30:B0:4C:9F:66:19:6C:00:73:8C:60:92:A4:D2:21:D9:C0:CF:AD
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 415843367E536EBDA3CC7F731C1EC280048148B8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143657.roa
Signing time: Mon 25 May 2026 03:19:50 +0000
ROA not before: Mon 25 May 2026 03:14:50 +0000
ROA not after: Mon 24 May 2027 03:19:50 +0000
asID: 143657
IP address blocks: 240a:a3ef::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:58:43:36:7e:53:6e:bd:a3:cc:7f:73:1c:1e:c2:80:04:81:48:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:50 2026 GMT
Not After : May 24 03:19:50 2027 GMT
Subject: CN=4830B04C9F66196C00738C6092A4D221D9C0CFAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:16:38:fb:c3:b8:0f:cb:b4:b5:88:5e:f3:9d:
c5:1b:31:aa:d4:c3:e2:5a:61:ba:92:0d:08:5c:d0:
1e:e7:da:8b:68:14:cb:bd:ca:4c:cc:d6:54:ec:8c:
a1:36:a6:82:9f:12:2d:96:ea:7a:ba:e0:e3:24:5c:
00:68:fb:6c:7b:39:83:a6:c5:00:df:ce:f6:f0:50:
2f:8a:5e:54:27:16:65:97:c0:b2:d1:96:77:5a:2e:
96:bb:b5:3d:c9:9e:70:39:77:67:c9:5a:1e:f5:82:
8a:6d:6e:e6:d2:d4:d3:aa:2b:d3:57:93:89:bc:fe:
9a:7c:07:a2:b3:46:92:25:0c:d8:f5:85:1a:74:bc:
1c:cf:3a:69:aa:d4:78:de:18:78:d1:7f:b4:e2:c7:
cd:36:b3:fe:dc:9a:20:53:e8:28:11:69:76:24:c7:
6a:c4:db:ed:0d:4d:95:7d:e5:38:5c:6d:95:61:89:
42:e0:1d:84:f8:86:da:bc:bb:6e:7a:be:38:75:fd:
7e:e0:77:2b:ad:e8:be:c4:02:b8:e4:01:90:2a:63:
66:c5:df:3b:f8:f8:6f:99:08:4a:14:d4:e9:0c:65:
d3:2c:97:eb:f5:70:b3:ed:1d:96:5d:d6:f3:7f:93:
11:a7:d4:31:d3:04:5c:cf:fe:29:8f:bf:ad:c2:d4:
15:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:30:B0:4C:9F:66:19:6C:00:73:8C:60:92:A4:D2:21:D9:C0:CF:AD
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143657.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3ef::/32
Signature Algorithm: sha256WithRSAEncryption
2d:e4:1b:ec:cc:34:3e:64:cf:dc:2d:92:8c:2b:75:41:46:ed:
69:e1:09:f7:c9:6d:cc:28:42:7e:05:ab:d9:e5:26:38:81:92:
bf:3c:0b:ca:98:fe:19:b1:50:c4:d2:d1:be:ae:a5:70:bd:07:
eb:cb:7d:96:af:09:fc:14:b2:36:f1:d8:0f:16:e3:76:b4:e3:
14:83:9b:2a:53:42:35:c4:7f:e2:18:d3:55:b2:23:77:b4:dc:
2e:3a:ab:0f:77:29:94:bc:fc:e7:76:f5:05:7e:b3:4a:ae:32:
00:42:c5:0a:b1:b7:b9:8f:76:8d:c2:8f:0d:00:c9:69:ba:9a:
50:4a:f1:fb:b7:34:19:e3:f2:a3:e6:0f:64:5d:81:de:ee:39:
4e:8c:05:06:e0:b2:d5:45:df:e1:d8:59:c1:8c:15:73:60:7d:
e8:28:9b:fc:8f:48:eb:c7:42:07:64:88:99:89:f9:bc:48:fa:
b2:12:f3:c1:94:f7:a5:f7:60:cb:fa:b3:48:3a:19:bd:b7:53:
c4:5a:85:e7:0f:46:9f:60:2f:86:9e:f8:d2:e6:2e:9b:db:51:
7d:ea:17:b3:cd:63:93:36:ae:5e:c5:69:d0:2a:a6:72:2f:3d:
b7:4d:4d:93:f4:2a:00:fc:ff:0b:ed:38:c3:45:61:c4:6c:f9:
81:20:ed:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:35 2026 by rpki-client