Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143094.roa
File: AS143094.roa (raw, json)
Hash identifier: 4Y3cmTPREGVJ5gvSzYpq4fYEzzo7hZG+qgjdFY0Gxio=
Subject key identifier: 64:40:0E:8E:D4:A5:CC:9A:6E:09:09:0E:43:43:DB:60:70:1F:04:29
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 587E88F4EB8923C4EF6833F2159E0E40E990568E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143094.roa
Signing time: Fri 22 May 2026 06:46:00 +0000
ROA not before: Fri 22 May 2026 06:41:00 +0000
ROA not after: Fri 21 May 2027 06:46:00 +0000
asID: 143094
IP address blocks: 240a:a1bc::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:7e:88:f4:eb:89:23:c4:ef:68:33:f2:15:9e:0e:40:e9:90:56:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:00 2026 GMT
Not After : May 21 06:46:00 2027 GMT
Subject: CN=64400E8ED4A5CC9A6E09090E4343DB60701F0429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fe:7e:9d:cb:7f:cd:82:5d:a6:d1:54:87:f0:
11:b8:91:01:d2:10:bd:86:c0:f1:d2:80:80:66:6d:
b6:31:48:da:03:13:a4:00:f6:c1:65:c9:5d:a0:c2:
14:cb:16:c5:ac:98:66:dd:0d:25:b6:80:6f:3b:e0:
aa:e9:08:5b:98:e0:ca:58:71:0a:82:ee:c4:7c:6b:
2b:07:fe:55:50:e1:4d:3a:47:8c:99:3d:a0:21:e5:
12:10:97:ec:5f:8d:e8:ce:d9:05:9d:71:ed:ec:c5:
9b:4d:45:04:f3:d5:00:9d:28:dc:aa:61:6b:e8:e1:
22:ff:44:54:ca:5c:ea:d0:ab:fb:3b:18:79:ae:5f:
cd:50:94:84:e4:9a:4c:df:1b:0a:3a:13:67:7a:0b:
be:48:a2:4c:20:66:41:66:ee:8b:70:ee:17:45:83:
17:a5:42:43:bb:b1:15:85:e3:ae:85:5b:e2:23:3a:
6c:66:cf:d1:2f:ec:2e:c3:cf:e1:3e:53:4b:4b:9c:
94:50:ba:53:59:c1:47:88:a9:1f:79:78:b8:aa:2d:
be:96:f7:59:fa:5f:34:4c:8b:50:30:d8:b3:33:70:
ea:22:21:1f:ce:fb:f2:66:6c:3e:6c:00:6b:75:53:
06:58:8e:14:9e:ee:c7:3e:31:fc:6c:47:e7:35:06:
ac:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:40:0E:8E:D4:A5:CC:9A:6E:09:09:0E:43:43:DB:60:70:1F:04:29
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143094.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a1bc::/32
Signature Algorithm: sha256WithRSAEncryption
8c:c4:a1:85:41:2f:8b:f0:1d:e4:b4:80:a1:26:02:34:1b:fb:
d3:0c:5f:ba:4b:d3:ad:d5:67:9a:e2:db:6c:d9:cc:47:cb:c4:
9f:67:1d:65:72:a0:3f:23:5b:0c:8f:04:ef:78:f2:03:8e:4a:
f3:ec:1c:eb:26:e8:aa:f9:08:31:1c:92:1f:a1:a2:bf:f7:52:
54:ac:f9:f5:65:35:f1:4e:85:32:08:ab:75:7a:37:79:b0:35:
56:6d:6c:5f:1a:d1:65:01:7f:0e:8e:c7:75:a0:6f:44:35:92:
70:3e:bf:6e:27:2b:54:ea:2e:8f:27:5a:99:59:44:d8:36:fd:
2f:c1:77:2e:66:12:3c:76:d3:8f:c0:ee:37:79:6f:68:29:47:
25:43:d9:5b:f5:0f:87:79:46:53:73:ab:25:87:00:78:dc:46:
39:ad:35:bd:cd:44:61:8f:36:a3:4f:fd:63:1d:a5:5e:23:78:
26:4d:57:fc:74:cd:d6:3a:8e:a8:1f:a1:c9:fe:4a:c3:12:77:
22:00:7c:54:d5:ad:27:10:af:53:23:38:d0:ce:eb:31:78:9e:
8f:c7:de:78:1d:17:b5:7c:4a:a9:ab:3e:17:fd:bb:ec:24:88:
75:6f:d3:2b:83:03:b2:7a:92:0d:2a:9c:d7:43:60:fc:21:0e:
54:d4:bc:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:00 2026 by rpki-client