Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143373.roa
File: AS143373.roa (raw, json)
Hash identifier: W+bUWVFuRL0ZTMwON4ZtcpFwQRPAwEAABbhpjUhg6NQ=
Subject key identifier: 4D:F1:2B:A7:02:E2:AC:3E:D8:2B:CC:AF:43:BA:2F:8D:AD:21:F0:4D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4CBFF94E8AFE78AEE169861A7C7AFB10D24D3BFD
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143373.roa
Signing time: Fri 22 May 2026 06:58:44 +0000
ROA not before: Fri 22 May 2026 06:53:44 +0000
ROA not after: Fri 21 May 2027 06:58:44 +0000
asID: 143373
IP address blocks: 240a:a2d3::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:bf:f9:4e:8a:fe:78:ae:e1:69:86:1a:7c:7a:fb:10:d2:4d:3b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:44 2026 GMT
Not After : May 21 06:58:44 2027 GMT
Subject: CN=4DF12BA702E2AC3ED82BCCAF43BA2F8DAD21F04D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3f:dc:50:da:13:87:8a:89:e3:10:a0:58:ff:
41:f6:cd:f4:10:ec:13:65:22:ce:f7:d8:7b:a5:38:
a3:11:af:f0:39:89:7e:c1:1d:3d:3d:5e:c6:4b:33:
00:b5:d4:dc:16:39:cd:c3:88:6e:90:df:22:de:ff:
73:04:a2:81:f1:68:6a:8d:b9:7b:11:68:2a:25:ef:
5b:6d:78:f0:ac:aa:62:d2:8f:d3:d4:99:5b:2f:26:
41:6c:ee:b6:69:b3:8f:d9:da:f7:f3:11:7e:5b:d3:
88:48:09:af:3f:ac:26:c9:6a:be:1e:fa:18:33:78:
b6:52:1e:6e:6f:dd:b5:c0:7b:13:45:99:12:a2:a2:
e9:d7:90:c7:84:72:85:2b:0f:1d:94:70:f5:af:c1:
8b:84:1d:67:bb:9a:b9:19:87:3c:e1:a8:48:a0:21:
0d:bf:49:33:4d:46:8b:b6:65:5e:08:be:d9:93:8b:
aa:5e:4d:3b:16:64:b6:39:ba:6a:76:4b:c1:42:8c:
35:82:72:e1:d6:8d:3f:78:40:d5:a3:fd:c2:3f:75:
9c:d3:da:7e:a1:49:a3:f3:5e:13:98:da:c4:3b:13:
4e:cf:87:1f:bc:5f:e9:e8:fc:d2:42:2c:f1:e1:6b:
fc:1f:e0:aa:b6:29:54:06:bf:af:00:a8:6b:5e:01:
9b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F1:2B:A7:02:E2:AC:3E:D8:2B:CC:AF:43:BA:2F:8D:AD:21:F0:4D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143373.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a2d3::/32
Signature Algorithm: sha256WithRSAEncryption
a1:08:45:83:4c:47:9b:32:20:81:b1:36:06:88:5e:d0:99:fa:
87:1b:89:72:c3:ef:e7:32:08:d5:ec:41:c9:ea:1e:f6:d8:8c:
61:46:e1:cb:ed:cf:a2:a5:a0:62:36:10:8c:5b:00:ba:7d:fc:
fb:41:b6:75:c7:db:6c:50:ac:17:88:68:3b:4b:ba:d6:60:c4:
68:ce:f1:9c:3b:3e:54:3b:6f:0a:b0:5a:27:30:93:93:e3:e5:
bd:b4:04:03:71:ee:a3:1e:f4:fe:7e:c1:42:e0:d1:cd:bd:54:
28:70:6c:c2:23:29:8f:dd:87:b5:26:d2:d3:22:f4:0f:aa:f4:
c5:ea:4b:5f:d4:d0:3a:3f:b5:fe:6d:77:34:af:f8:d2:9e:b7:
c1:ea:7a:5d:bf:9e:18:c8:9d:96:b5:08:56:37:45:93:cf:06:
8e:26:98:8d:2e:55:49:da:bb:88:8a:62:30:b8:e5:80:e1:d9:
ab:c1:65:33:6a:e6:20:fd:89:d7:60:b9:a8:20:00:87:44:9d:
ea:ea:4c:31:a6:84:15:d8:91:12:95:83:41:4e:f8:07:a4:b4:
9d:89:98:9f:96:f5:f8:0e:38:c7:63:ea:f3:f0:1d:d0:88:84:
c3:df:b5:a3:f9:c9:28:9d:7e:05:fe:ef:e2:0d:c8:2e:c2:c6:
a1:00:12:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:25 2026 by rpki-client