Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143088.roa
File: AS143088.roa (raw, json)
Hash identifier: LVEj9aKDOzT9kGyVD1UiZFg8SXzoYUeJtYPzzSMI6xc=
Subject key identifier: 44:7E:78:98:E0:15:C7:68:52:0C:92:EC:8B:A1:09:EA:E4:C4:B3:0A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3F3B96F5333947C56452310B009E9B30B3845E9F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143088.roa
Signing time: Tue 26 May 2026 06:12:28 +0000
ROA not before: Tue 26 May 2026 06:07:28 +0000
ROA not after: Tue 25 May 2027 06:12:28 +0000
asID: 143088
IP address blocks: 240a:a1b6::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:3b:96:f5:33:39:47:c5:64:52:31:0b:00:9e:9b:30:b3:84:5e:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:07:28 2026 GMT
Not After : May 25 06:12:28 2027 GMT
Subject: CN=447E7898E015C768520C92EC8BA109EAE4C4B30A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:45:f4:a5:39:7a:55:27:37:09:a1:ea:06:70:
ad:81:7c:3e:df:d3:eb:5b:17:54:a2:45:38:66:73:
d2:57:37:4a:2f:cf:2c:9f:02:e1:e6:3a:1e:41:00:
c3:45:6a:26:f8:e5:a8:d8:8d:ba:b9:4d:5f:ca:02:
74:81:2d:02:89:99:81:83:35:04:24:8f:93:11:ec:
66:37:04:c9:17:75:5d:dc:16:0b:14:6b:fc:19:eb:
b4:e5:8a:4b:08:f0:73:da:7f:ba:71:e0:b2:0c:29:
bd:72:36:93:b3:0a:c4:aa:6d:62:00:d1:6e:ba:11:
86:6e:d3:a9:9d:6e:ad:4c:32:75:e5:ae:76:88:be:
fb:36:f4:40:da:e2:fe:9d:b6:74:8c:d4:88:33:54:
1f:34:34:f4:64:d7:77:14:84:6d:aa:df:60:79:9c:
29:a4:62:22:de:cd:22:09:1c:d4:06:15:07:fd:87:
9c:78:2f:03:2b:0b:b7:50:58:b2:02:c1:6f:df:32:
dc:c7:af:77:9b:55:ee:8c:c0:22:91:c3:bd:24:de:
bc:36:37:e5:84:e4:2c:4c:13:b7:15:87:62:f9:75:
19:4c:9b:1a:19:3a:a4:9a:a4:d1:7e:72:0f:26:a9:
06:ff:de:c6:6f:71:17:00:9f:d7:99:7f:c0:b6:e6:
7e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:7E:78:98:E0:15:C7:68:52:0C:92:EC:8B:A1:09:EA:E4:C4:B3:0A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143088.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a1b6::/32
Signature Algorithm: sha256WithRSAEncryption
36:ff:46:a8:64:38:7f:1f:c3:2d:55:0d:84:c6:2f:19:02:a3:
18:c2:4b:c9:94:af:3b:b9:bb:35:c3:24:ef:78:73:f4:bf:e7:
22:d5:57:84:91:0a:f1:0b:20:21:8f:20:6b:f4:69:ae:de:2f:
c4:e0:af:84:3a:0a:19:1c:03:06:ad:da:8f:6c:f6:23:bc:c3:
a2:40:27:f1:b0:79:0e:b5:ed:d6:31:e7:97:df:97:b7:45:98:
30:c5:b9:42:f7:a7:09:86:93:da:a6:1a:4c:38:7d:c0:43:9c:
77:4c:b8:19:ad:f8:6d:a1:d3:ac:12:8f:4c:2d:48:f0:69:38:
85:98:93:9f:62:ab:d7:8e:d5:c8:18:0e:3b:2b:72:6c:09:a4:
f7:41:56:69:ae:01:2f:50:c8:6e:d4:bb:bc:db:3c:3b:94:ea:
33:a8:c1:6a:08:6c:d6:6f:25:68:25:2a:56:1f:73:0c:b5:27:
20:71:75:3f:f0:50:bc:0a:2e:59:29:9c:cb:d3:15:1b:d7:e0:
ee:4e:93:62:a8:2a:69:f0:08:67:16:71:b1:e1:2b:9c:7f:85:
d3:f9:f6:4d:72:6b:c1:42:12:66:62:85:17:6b:5c:57:89:ad:
3d:d3:9f:4d:c7:bb:c6:99:68:32:d4:0e:0f:6b:89:44:3f:04:
53:10:37:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:06 2026 by rpki-client