Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143661.roa
File: AS143661.roa (raw, json)
Hash identifier: m/krfsMQHIXJ1HW6KhrZoGCCC8M+Auc6Lo/MJ3R+jcE=
Subject key identifier: 9C:B1:DE:9D:4A:43:7C:2C:D9:91:3D:AA:78:FD:97:12:86:54:BD:60
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 73B6659B21C931EA32034CC53504C31225DDD226
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143661.roa
Signing time: Mon 25 May 2026 06:28:37 +0000
ROA not before: Mon 25 May 2026 06:23:37 +0000
ROA not after: Mon 24 May 2027 06:28:37 +0000
asID: 143661
IP address blocks: 240a:a3f3::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:b6:65:9b:21:c9:31:ea:32:03:4c:c5:35:04:c3:12:25:dd:d2:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:37 2026 GMT
Not After : May 24 06:28:37 2027 GMT
Subject: CN=9CB1DE9D4A437C2CD9913DAA78FD97128654BD60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:94:d5:a0:7e:fe:01:04:93:6c:57:35:2b:69:
0e:a1:33:ac:15:25:d2:ce:bf:2c:e6:52:27:80:42:
11:33:85:aa:df:ef:c8:20:32:cb:d2:c3:3f:04:53:
a1:c7:9a:58:04:e4:f7:2e:30:ae:f4:7b:20:61:9b:
1f:ac:71:eb:c8:f1:2a:10:88:17:c4:1a:84:6b:88:
3d:f8:f7:63:9b:3e:69:a5:56:39:e0:e8:a4:75:2e:
b2:c0:e8:27:cf:9b:a7:1c:ff:07:2b:f4:e1:17:73:
15:1e:e8:b7:cb:d2:24:f7:07:c6:db:2e:72:ae:5f:
6b:ad:ff:52:35:14:a4:57:e7:c5:dd:1e:6b:e9:49:
da:4d:19:84:86:3e:f8:a2:ed:d8:d7:db:f5:ff:39:
b9:b4:1f:82:9d:c0:5c:eb:3b:6a:84:52:55:0d:56:
94:87:61:a0:14:ab:a5:91:3d:d8:b6:ea:8e:af:ca:
c6:c8:a4:58:dc:07:42:55:94:66:5a:e6:1d:65:d9:
eb:85:2f:ea:05:8d:74:e1:f3:49:36:35:b9:64:aa:
a6:92:51:86:68:30:12:3e:31:88:18:a4:23:64:b9:
65:9b:ba:45:30:89:5f:8d:ba:1d:1f:b5:0e:64:f9:
95:1d:95:d4:3e:31:d9:c1:38:b0:f4:73:51:03:64:
67:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:B1:DE:9D:4A:43:7C:2C:D9:91:3D:AA:78:FD:97:12:86:54:BD:60
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143661.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3f3::/32
Signature Algorithm: sha256WithRSAEncryption
8d:41:28:84:53:a5:cb:9b:ca:b4:5d:3f:5c:ab:e5:3b:fd:03:
2f:5a:b5:76:7c:f9:f1:26:3c:d7:d6:9d:57:16:26:2b:29:48:
51:bb:45:7c:22:4c:42:73:d0:92:f4:fc:af:52:47:d0:12:ba:
9b:ad:d3:6f:70:42:5c:d9:30:fc:86:5c:63:2f:00:34:f2:43:
5f:fd:95:ec:9f:17:bf:f3:f0:3c:f5:4f:db:ff:6a:ff:0a:4a:
6b:92:9a:f9:d6:f5:ea:b8:73:4e:47:3f:d9:f5:ac:da:d6:4d:
ac:71:52:51:05:c0:91:d2:2e:a7:ab:64:30:b3:91:ec:ae:e2:
6f:e6:82:f7:2f:7c:c0:12:12:86:34:26:30:cd:10:ed:c3:89:
94:98:e7:ae:e5:66:2a:82:bf:73:02:0b:c2:ed:56:57:ae:83:
4c:14:31:a5:69:50:98:62:a8:1b:74:2a:a6:b2:b8:f0:c0:d4:
bb:a7:4c:52:c9:bd:7b:12:1f:54:85:99:1a:66:a4:11:a0:fc:
01:51:2f:99:e4:41:62:c9:b8:59:38:d3:27:a2:0f:ec:0d:a8:
d1:7e:ad:e3:7d:32:d5:46:60:6e:d9:ea:69:15:b3:cc:3e:e7:
9e:62:80:19:b1:2a:82:4a:c0:4d:50:10:fd:4f:36:87:b6:e2:
87:2a:73:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:01 2026 by rpki-client