Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143358.roa
File: AS143358.roa (raw, json)
Hash identifier: dguWZZpZm8hFZyVeES5mmdGRR2E5Vy9qJzw3OqUxFz4=
Subject key identifier: 83:83:1D:44:05:B5:7C:9F:E5:31:6E:36:BD:43:39:07:09:B5:DE:DF
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 753F7D47523F4F5425E05EB886D22A94349A0762
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143358.roa
Signing time: Fri 22 May 2026 06:05:42 +0000
ROA not before: Fri 22 May 2026 06:00:42 +0000
ROA not after: Fri 21 May 2027 06:05:42 +0000
asID: 143358
IP address blocks: 240a:a2c4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:3f:7d:47:52:3f:4f:54:25:e0:5e:b8:86:d2:2a:94:34:9a:07:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:42 2026 GMT
Not After : May 21 06:05:42 2027 GMT
Subject: CN=83831D4405B57C9FE5316E36BD43390709B5DEDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1e:61:63:ed:f6:bd:ed:60:ed:4e:20:98:14:
3b:6e:fd:d8:82:48:c3:ab:a0:17:35:10:8b:a8:8b:
e2:3c:5a:78:41:69:e7:d4:72:27:1e:67:c7:c6:af:
e7:e1:16:c1:83:b8:02:f9:28:18:17:0f:9b:03:f5:
a9:d5:b1:b7:7a:e0:2d:34:31:75:56:7e:83:a2:5c:
27:5a:95:f6:fe:ec:9e:a8:a1:16:64:4e:39:f1:83:
56:3a:71:66:c0:20:e4:82:01:a8:79:27:4b:12:12:
03:c1:be:a4:b5:04:a0:d2:6a:87:79:c7:02:78:16:
8a:b6:09:20:cb:82:49:fa:3a:d0:b8:18:5d:2d:e8:
10:84:73:2f:3b:f4:79:fe:6e:8f:2b:86:58:e5:12:
6b:77:52:86:e5:9f:7f:0e:2b:19:92:6d:f7:66:9c:
24:34:00:99:6d:3f:32:f3:20:66:ca:a5:6f:79:12:
32:0b:17:cd:3d:4b:36:53:99:75:40:7f:1b:7c:fd:
50:3f:55:4a:2d:04:cd:15:a8:89:f5:74:ee:f3:7c:
83:61:98:05:f5:9d:4d:92:31:16:c2:cd:7b:c2:ba:
76:3c:ea:66:80:42:53:de:ba:e7:5b:0f:c2:9d:43:
35:7a:13:aa:d1:51:d1:1b:51:d2:c8:95:61:ce:62:
09:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:83:1D:44:05:B5:7C:9F:E5:31:6E:36:BD:43:39:07:09:B5:DE:DF
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143358.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a2c4::/32
Signature Algorithm: sha256WithRSAEncryption
40:56:27:1e:a8:8b:87:3c:ca:09:64:48:b3:7c:4c:bc:9d:ee:
c1:77:1f:4f:0d:96:89:b7:b9:09:a5:46:d6:b6:45:d3:fb:fd:
db:05:fb:a4:c1:a1:74:bb:00:8d:f0:f7:23:ac:34:46:e2:0c:
d7:17:6f:a0:d8:de:3f:7a:93:52:d8:9c:27:06:7b:b9:31:3c:
fe:15:77:ff:17:98:d3:99:c9:26:7d:fe:ea:34:66:a9:fd:12:
2b:0e:c0:11:98:10:81:b2:db:90:16:c0:0b:3e:03:83:83:75:
37:85:9c:ab:b7:61:2c:6c:0c:f8:ee:eb:b0:cc:0f:85:09:ff:
97:5f:f4:5e:e3:bc:10:f4:cf:93:6e:d7:22:ea:de:6a:ee:1d:
69:cb:77:a7:a9:ed:ef:80:ae:33:2b:7a:70:f9:21:fd:17:26:
1a:87:44:f9:fc:41:f8:37:8a:56:27:6d:d2:0d:32:ed:73:6f:
14:dc:f2:5a:41:f3:5d:ba:d5:6a:34:aa:3f:3d:a0:4b:0a:d6:
f3:17:93:c9:2f:eb:81:99:84:c2:e4:aa:ee:89:54:24:55:fe:
b6:fc:c2:05:2e:83:57:69:79:84:98:11:2f:d1:da:78:43:a2:
45:ec:0f:97:90:c7:40:fa:9b:31:6e:c6:ec:8f:ff:19:d6:65:
1c:f8:f0:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:22 2026 by rpki-client