Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143402.roa
File: AS143402.roa (raw, json)
Hash identifier: tlvNRFepZMMlaLbifujO/gm1ujKcKpzNEbB3Jc8GFvY=
Subject key identifier: 1C:EC:3B:9E:09:F0:71:FB:E5:55:A5:04:EC:B9:25:68:A9:B1:60:73
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 654623C6BFF7E3B841E869D951BCEFB5090CC2E5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143402.roa
Signing time: Mon 25 May 2026 03:19:28 +0000
ROA not before: Mon 25 May 2026 03:14:28 +0000
ROA not after: Mon 24 May 2027 03:19:28 +0000
asID: 143402
IP address blocks: 240a:a2f0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:46:23:c6:bf:f7:e3:b8:41:e8:69:d9:51:bc:ef:b5:09:0c:c2:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:28 2026 GMT
Not After : May 24 03:19:28 2027 GMT
Subject: CN=1CEC3B9E09F071FBE555A504ECB92568A9B16073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7b:46:74:ac:91:8f:c2:c8:0a:85:3b:d8:de:
a8:59:5d:c9:a4:c9:34:a8:cd:dd:26:7d:f1:f4:12:
20:33:40:2c:ea:ba:a9:01:ec:89:1e:87:aa:ff:9d:
57:24:8a:ff:48:37:94:93:42:29:85:36:ce:02:b0:
57:bc:54:d7:7b:92:ec:e1:bf:83:be:f2:58:df:15:
d0:9b:21:78:f9:e5:65:a6:46:04:eb:2b:fd:22:c3:
10:5f:d9:af:3a:da:bb:d6:f3:e1:9c:b7:fd:c8:c3:
18:dd:35:ba:53:9b:5a:21:76:2c:70:65:4f:80:cd:
ea:6f:4c:43:8d:fc:63:fd:90:07:a6:27:07:8d:64:
60:44:67:ca:62:f9:e1:86:c8:3a:6d:a5:bb:e2:0a:
eb:9a:9e:87:ee:ad:47:7a:35:e4:6d:33:f3:90:9c:
37:85:2c:d9:8c:77:62:f8:11:24:6f:e6:08:ef:ed:
a4:7b:04:17:a8:7e:92:60:37:be:94:62:a5:09:6b:
1c:3e:3d:4c:e8:77:7a:3d:7f:59:95:28:a0:30:b6:
93:f7:51:76:77:6b:dd:7b:6a:c2:fc:12:c1:cd:98:
a8:bf:21:04:55:2d:0b:0b:c9:ba:29:36:4d:de:55:
08:2d:49:d1:09:50:db:c9:3a:43:f1:58:51:88:bc:
cc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:EC:3B:9E:09:F0:71:FB:E5:55:A5:04:EC:B9:25:68:A9:B1:60:73
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143402.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a2f0::/32
Signature Algorithm: sha256WithRSAEncryption
bb:0e:89:26:96:fc:0f:56:b7:b8:be:64:c9:50:25:d8:3c:de:
32:0f:68:af:2b:ac:00:87:f2:89:48:bb:43:87:8e:32:2b:27:
0e:08:ad:fd:f4:ba:cb:00:fd:3a:7f:63:f9:f9:60:bf:a5:d4:
76:32:a5:98:9b:54:0c:c5:cf:ed:03:77:58:fe:24:19:0a:46:
c1:2a:2c:35:94:aa:40:65:b0:8e:ce:d5:9c:d9:8d:8a:0a:c3:
67:8b:ef:a0:61:7b:87:86:87:1a:9c:d2:8e:3c:8d:52:60:f1:
83:8c:81:5a:0a:de:7d:02:48:d2:5b:20:8e:dc:36:9f:3b:ca:
65:46:7b:19:2e:80:d7:75:ec:23:dd:1a:99:55:a3:bb:3f:5b:
64:26:02:97:19:c9:94:bc:b3:c9:5f:af:c8:c1:bc:b0:69:3a:
98:43:34:38:07:31:bd:a2:ee:25:93:9d:f3:17:5b:ca:29:b3:
04:47:c8:9e:dd:74:85:a4:dd:51:83:d4:a3:02:e8:a5:e8:03:
b3:88:c3:2a:59:a7:1e:2d:35:97:da:66:f8:99:3f:4e:22:a0:
3a:8b:1f:b3:96:83:a4:2d:db:dc:59:88:cf:44:f2:7b:d0:03:
2a:15:84:9c:e1:35:22:f0:99:32:a7:cf:f0:e1:8a:13:93:78:
fd:52:1b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:16 2026 by rpki-client