Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143667.roa
File: AS143667.roa (raw, json)
Hash identifier: qCO79Do1KUksX+ngu3EagY4lC+fM6Yy0y3cmQZr/pI4=
Subject key identifier: 77:6F:84:CD:7A:C6:62:AD:00:AC:68:04:F7:33:AE:A3:19:FA:57:6C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 68D14F996034B266B6BB91B09385BE9434DE4F1A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143667.roa
Signing time: Tue 26 May 2026 06:30:41 +0000
ROA not before: Tue 26 May 2026 06:25:41 +0000
ROA not after: Tue 25 May 2027 06:30:41 +0000
asID: 143667
IP address blocks: 240a:a3f9::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:d1:4f:99:60:34:b2:66:b6:bb:91:b0:93:85:be:94:34:de:4f:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:25:41 2026 GMT
Not After : May 25 06:30:41 2027 GMT
Subject: CN=776F84CD7AC662AD00AC6804F733AEA319FA576C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8c:dd:71:7a:2d:00:42:89:ff:c4:b5:98:62:
55:8e:47:51:52:91:04:79:b0:77:78:81:48:97:ea:
e3:2b:01:08:de:f0:f2:ab:c0:75:13:a2:50:49:4c:
ca:65:ea:5e:71:f5:ed:c3:7b:3a:63:08:a1:65:b8:
63:9b:de:21:ab:2c:b0:41:a3:10:c3:c6:3f:53:ba:
b2:9c:91:04:51:70:58:57:8f:80:cc:7e:2b:ac:5e:
f8:81:ff:1f:7c:f2:d7:db:9a:56:fe:20:a9:c3:e9:
7c:0c:b5:aa:d1:a2:96:6a:19:99:31:64:b3:da:e4:
6d:63:4d:e4:6b:6c:f1:fb:2e:bd:88:f6:07:31:0e:
63:63:9e:80:8a:04:6c:f4:87:65:2a:78:43:4f:ab:
ff:4e:a7:55:04:d6:b3:6c:d9:da:70:ac:ef:77:57:
89:5e:11:5a:e6:73:b9:ba:3a:7b:e6:d3:48:3b:4d:
ce:45:36:3d:1b:1c:3a:b5:98:cf:5f:f3:4f:26:f5:
ae:09:a0:dd:43:96:4e:98:d8:1c:e6:a1:b8:d5:3b:
6a:7b:d4:53:bd:48:ab:2c:02:8b:b6:bd:ae:37:ac:
08:bd:71:e2:f2:77:d3:bc:e3:42:f9:50:86:1f:d8:
45:f3:3d:7d:23:fc:7e:31:06:e6:96:9b:a9:1e:17:
41:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:6F:84:CD:7A:C6:62:AD:00:AC:68:04:F7:33:AE:A3:19:FA:57:6C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143667.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3f9::/32
Signature Algorithm: sha256WithRSAEncryption
5a:89:7c:d6:cc:5b:e6:85:b3:ed:93:c8:40:fb:63:c4:36:3b:
0b:44:cd:6f:3e:dd:e4:d6:f3:ea:50:02:87:17:6c:1a:c4:ed:
cb:4c:c4:97:24:91:8d:68:b1:3f:a9:8f:a2:1a:3b:de:4f:be:
ed:86:b2:6d:cc:40:d1:e0:6d:52:98:85:d5:f1:7c:ce:e2:f8:
8f:1c:98:9d:67:e9:83:7a:67:b6:7e:d8:4c:0a:c2:04:29:a3:
38:d7:a2:2d:89:55:18:13:66:22:3c:b7:0b:5d:fb:a5:f5:b8:
d5:b7:97:d2:c4:30:32:a5:00:17:17:22:44:63:20:ef:dc:e4:
fd:11:44:8e:40:bb:2d:ee:b5:5a:a1:9d:31:df:3a:f9:65:09:
18:d5:2c:b7:28:a9:ed:a5:be:b7:62:c1:7b:e2:dc:56:b7:f7:
6a:dd:4b:e2:1f:ff:b1:17:74:ba:ac:5d:13:83:a1:c8:cc:32:
7a:6b:19:24:e7:f1:2a:c2:34:22:8b:07:e5:32:d7:1f:18:11:
55:c7:20:65:47:0e:1d:43:29:20:83:e1:82:5c:e9:88:77:74:
ad:cf:e2:d6:c0:3f:60:31:88:15:b1:de:5e:fc:cb:d6:f4:76:
cf:67:fe:e2:b0:02:4d:48:2e:e1:34:6d:fe:ab:a7:ef:05:ee:
67:d7:47:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:10 2026 by rpki-client