Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143670.roa
File: AS143670.roa (raw, json)
Hash identifier: 0fxmL5uJC2+pTJOk+Ta3bUPFogoi9RJ/dxj3UCaASl8=
Subject key identifier: 3A:D6:3E:57:61:45:30:74:A9:7D:44:DC:C2:4A:28:DC:59:36:70:3B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 15477FBDDD2651A96B8EF940FB3C8C10AA9FB4F3
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143670.roa
Signing time: Fri 22 May 2026 06:05:45 +0000
ROA not before: Fri 22 May 2026 06:00:45 +0000
ROA not after: Fri 21 May 2027 06:05:45 +0000
asID: 143670
IP address blocks: 240a:a3fc::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:47:7f:bd:dd:26:51:a9:6b:8e:f9:40:fb:3c:8c:10:aa:9f:b4:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:45 2026 GMT
Not After : May 21 06:05:45 2027 GMT
Subject: CN=3AD63E5761453074A97D44DCC24A28DC5936703B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b5:82:7a:68:fd:23:78:6b:71:4d:80:34:79:
34:78:60:be:f4:de:fa:36:09:5f:db:a7:9b:63:ea:
34:02:de:92:93:02:1c:78:f2:ed:c4:68:08:1b:d7:
1d:94:db:1c:dc:09:79:ab:d1:81:48:0d:2d:69:43:
0d:f1:73:7a:96:fe:96:7b:80:d3:21:98:df:cd:2d:
69:c7:85:d2:fc:25:c4:6b:45:38:61:d0:85:42:17:
b4:e4:44:01:f5:60:03:68:e9:36:28:83:34:65:0c:
95:05:5a:a2:6c:b6:9b:b6:69:e1:28:41:98:f1:32:
6a:cd:16:f8:a7:72:5b:14:fa:21:79:80:0b:d8:b1:
3d:a9:cf:ec:f3:be:57:b6:9a:3f:93:5e:6e:a7:42:
38:4d:57:5d:4f:e7:82:a8:7a:d1:67:48:4f:51:36:
e2:b8:fa:ee:d7:75:ad:72:11:f1:f7:78:a8:93:07:
4e:8c:e2:1c:86:ef:68:4a:d4:1c:f7:eb:fa:98:35:
4e:2e:d3:4f:d0:39:8e:00:41:1a:4a:65:38:b7:68:
60:01:ba:41:45:50:f5:cf:70:9a:cb:79:ab:76:c5:
2f:13:fd:4f:58:36:79:26:45:f4:6a:70:2a:0d:cd:
9b:82:37:28:66:35:dc:7d:6d:35:f0:e7:d3:cd:f8:
12:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D6:3E:57:61:45:30:74:A9:7D:44:DC:C2:4A:28:DC:59:36:70:3B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143670.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3fc::/32
Signature Algorithm: sha256WithRSAEncryption
59:ad:ec:7d:b4:5e:9d:36:58:f8:c7:17:b4:62:d2:74:bf:da:
ca:1d:77:75:92:b7:2c:76:02:7e:e6:c0:36:91:5d:f7:25:82:
a2:25:21:32:85:b9:ff:b0:8b:1e:ee:c5:21:c7:0e:dd:e8:4c:
b3:19:a1:5e:5a:0c:38:d2:f9:8f:14:b1:26:49:a5:a0:0d:6a:
b2:f1:11:93:02:e2:77:17:b5:cf:95:6b:62:fd:f5:2c:9d:8b:
69:27:95:b2:48:d5:e8:a6:58:8c:2c:f2:6b:dc:bf:d5:e5:d1:
46:31:5b:22:c0:23:a6:25:d1:6b:28:32:53:f1:49:69:40:01:
aa:01:62:a6:7f:d1:83:e3:f3:bc:6d:02:26:bc:96:fd:5c:98:
50:65:22:5f:af:b6:46:90:02:12:a5:c1:2b:1d:9f:db:90:e2:
de:b5:fd:df:a3:ac:3e:b5:bc:e9:e9:42:a9:3f:14:68:7b:c0:
33:c4:05:39:08:8a:f4:91:d6:01:6b:45:a3:f9:48:42:0a:85:
ff:ec:31:e3:38:bf:d8:ba:ea:26:79:98:83:a9:9f:d8:48:67:
31:95:29:8c:29:28:fb:5a:78:66:c9:99:64:5c:3e:00:74:74:
ad:c1:bf:9b:65:b5:8b:ef:4d:e6:31:09:76:af:b5:37:d6:75:
61:64:29:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:06 2026 by rpki-client