Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143084.roa
File: AS143084.roa (raw, json)
Hash identifier: 01z471KJHjA0Gx4Y1fyf+nLjnViWKNlvwEx/q19ItYA=
Subject key identifier: 7D:7A:35:AB:EB:A7:5D:04:97:C2:85:6C:8F:E5:A6:9C:8B:EB:B5:95
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 42CB3FB2F72E2EE0BD55BBD47B3944BFD06B8315
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143084.roa
Signing time: Fri 22 May 2026 04:26:51 +0000
ROA not before: Fri 22 May 2026 04:21:51 +0000
ROA not after: Fri 21 May 2027 04:26:51 +0000
asID: 143084
IP address blocks: 240a:a1b2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:cb:3f:b2:f7:2e:2e:e0:bd:55:bb:d4:7b:39:44:bf:d0:6b:83:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:21:51 2026 GMT
Not After : May 21 04:26:51 2027 GMT
Subject: CN=7D7A35ABEBA75D0497C2856C8FE5A69C8BEBB595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4b:4d:0c:eb:b0:8d:5a:a9:f6:ce:2e:01:bd:
2c:55:65:bb:4f:38:94:32:29:af:74:a3:ce:f7:f5:
4b:f7:17:9f:68:a9:25:37:c6:3c:bc:71:31:ce:3c:
07:a7:a0:74:26:41:2c:48:e3:92:e7:ce:1b:c5:ce:
98:0a:8e:90:bd:35:bc:f7:a8:27:6d:be:42:7f:7a:
23:cc:2a:02:2b:75:9e:06:34:f3:0d:83:ac:f9:70:
89:bd:ca:62:7f:a7:84:e9:f9:a6:68:39:2a:a1:3f:
85:00:db:b2:4e:0f:e5:fa:18:e1:2a:ef:f4:57:52:
f0:b6:56:96:5d:c0:1e:88:3d:87:5c:ea:bf:6a:65:
87:7a:e1:8a:53:84:c0:8c:72:aa:8d:8a:f5:85:81:
62:ab:89:c8:97:cb:b6:87:35:d5:a5:51:59:8e:0f:
e9:a3:f1:47:ef:ae:c0:21:1e:c8:be:99:99:32:1b:
21:10:2e:7d:38:2a:85:0e:f0:76:ab:85:35:98:94:
c1:7e:7a:65:92:ce:47:e9:5f:80:dc:51:d1:01:78:
9e:c8:4a:62:0a:40:83:cc:c9:8d:34:61:4a:72:f7:
10:91:ec:e3:cc:ca:b9:95:4f:de:cf:5d:b3:4c:c1:
1c:8a:d4:92:d0:fd:20:fa:17:57:cc:84:98:5d:9e:
49:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:7A:35:AB:EB:A7:5D:04:97:C2:85:6C:8F:E5:A6:9C:8B:EB:B5:95
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143084.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a1b2::/32
Signature Algorithm: sha256WithRSAEncryption
3a:fe:41:af:87:dd:f3:88:7d:85:4c:2a:02:a6:1c:b8:93:9e:
69:cb:88:ab:d2:b9:84:9e:a7:f6:88:4d:31:4f:1c:1a:0a:dd:
b8:8c:b4:28:c9:63:87:05:e6:c4:b7:ab:52:8c:b7:3b:5a:78:
c8:e9:e5:3c:fc:d2:ac:af:92:e6:c3:02:b3:76:94:33:dc:7c:
1a:bf:cf:85:47:ca:fa:26:87:b9:e9:08:bd:14:b1:f4:2a:7f:
80:45:92:c4:93:a3:cd:5a:b1:f9:3d:98:10:c2:ee:36:0c:a7:
99:81:71:75:c8:c3:fe:9d:39:3f:be:e7:e1:af:bc:2b:b5:64:
11:e3:ea:39:5c:d6:c5:17:79:e1:7d:80:f1:c4:28:d3:0e:09:
3b:99:70:51:4e:d2:a2:e1:e5:71:8d:23:50:33:d3:ad:75:02:
49:bc:b4:da:05:d4:99:2b:51:98:ba:14:8e:9b:e9:e7:6f:e6:
64:ad:fb:35:2b:cd:72:ec:45:59:8f:01:e3:29:b4:ba:29:d0:
0a:ec:7f:44:bb:23:52:af:b8:6f:2f:31:5d:b4:ae:31:60:83:
02:f8:fc:10:28:83:6d:ca:c9:c4:65:da:d8:81:d1:26:6f:ee:
5b:f5:bc:b2:da:a7:35:10:72:72:21:d1:7f:90:1a:9e:2b:e1:
c2:c3:07:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:35 2026 by rpki-client