Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143696.roa
File: AS143696.roa (raw, json)
Hash identifier: KB3iXkRZclI4/dBQWqcgpg6+iEfk90FaMt7BRh3YLjk=
Subject key identifier: C2:3D:2B:86:2C:4F:F9:82:E2:26:F5:EE:F8:3A:11:2E:05:68:09:BB
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3F6BD926B62F0AB931462C2BE8AA58D70678D93E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143696.roa
Signing time: Fri 22 May 2026 04:26:50 +0000
ROA not before: Fri 22 May 2026 04:21:50 +0000
ROA not after: Fri 21 May 2027 04:26:50 +0000
asID: 143696
IP address blocks: 240a:a416::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:6b:d9:26:b6:2f:0a:b9:31:46:2c:2b:e8:aa:58:d7:06:78:d9:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:21:50 2026 GMT
Not After : May 21 04:26:50 2027 GMT
Subject: CN=C23D2B862C4FF982E226F5EEF83A112E056809BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:32:ee:ad:31:fb:73:6a:83:10:c3:ab:29:c2:
96:b7:e6:75:3f:a0:0a:26:2e:e2:89:21:90:7d:42:
e3:aa:38:1e:0f:1b:43:f3:cd:9c:46:2d:95:00:02:
1e:b1:24:f3:e5:d8:82:14:37:0e:48:80:2d:17:53:
ba:66:03:d5:9c:e5:20:af:2d:64:ce:7c:45:bd:7f:
7b:95:24:46:a2:b0:29:0f:50:53:fe:db:51:57:94:
dc:15:8e:42:fa:4d:7c:5e:17:b0:dd:4d:f1:ed:e4:
65:8e:4c:ee:85:7a:66:1e:88:33:d4:d5:cb:27:27:
3f:e2:f4:f2:6b:42:b6:85:fc:56:1a:83:6f:10:70:
56:82:54:f1:f1:37:79:aa:ff:00:74:ff:15:ed:2b:
d1:8e:a7:15:e3:57:9c:4b:11:5b:89:0b:5c:5e:ee:
b2:f9:24:3c:73:9a:0a:05:3a:3c:81:93:2b:70:ab:
32:d7:52:41:92:7b:5f:a0:88:60:cd:c1:34:41:6f:
61:5e:7b:34:f7:86:3b:6a:a2:34:1a:92:c5:4d:60:
e7:be:9f:25:ed:be:77:a3:b9:6b:4f:7f:18:be:99:
10:f1:ed:2d:83:5c:17:fe:3d:68:09:d5:f9:97:1d:
90:70:7c:0f:41:ac:c1:58:29:5b:a8:81:28:12:e9:
4f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:3D:2B:86:2C:4F:F9:82:E2:26:F5:EE:F8:3A:11:2E:05:68:09:BB
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143696.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a416::/32
Signature Algorithm: sha256WithRSAEncryption
b5:a6:6d:c8:63:51:f8:b5:23:39:bf:83:e0:cc:cf:05:30:42:
09:f1:70:11:df:25:09:8c:96:45:c5:36:76:8d:41:ee:88:56:
4d:39:7d:52:01:31:be:4b:87:d2:91:7b:83:60:51:54:ae:0f:
7a:ea:7c:f1:64:94:9e:a7:65:b2:05:e6:ab:a7:a4:6d:f2:81:
e6:f2:c9:6c:c9:c6:01:53:03:18:5e:8a:bd:6d:9d:84:b0:43:
b0:1f:08:79:82:c9:a2:01:76:67:70:e3:da:cb:8f:38:71:10:
45:9c:c1:76:68:ac:49:ce:d7:5b:64:72:44:7d:0e:e5:d6:3e:
77:8b:1d:30:74:73:c9:95:1b:19:90:6b:9a:47:92:63:07:a2:
2c:5f:d4:ac:37:b5:d9:72:8e:6e:8b:e3:95:ab:31:cb:4e:5f:
d2:c8:bf:65:5c:9e:1e:1c:58:09:42:da:07:98:c9:b5:28:c4:
0f:08:65:16:cf:76:d3:f4:97:55:90:74:c6:e3:01:fc:fc:98:
02:e5:dd:09:6f:ef:ac:6a:52:d4:64:80:46:dc:07:f3:bd:5c:
a7:fa:fc:b5:97:5d:b6:10:ff:e4:5a:f3:55:3e:6c:ca:2b:f2:
70:45:bd:f8:39:11:a4:94:71:0b:15:18:f2:c3:47:80:7c:15:
95:b9:ab:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:11 2026 by rpki-client