Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143408.roa
File: AS143408.roa (raw, json)
Hash identifier: 58VRi0zdDeXZaFUEejDC0crIW80zYi7gubZUx25EpkU=
Subject key identifier: 95:29:35:7D:E2:84:5E:D0:5B:35:AF:22:C7:9C:17:45:5F:B2:63:EC
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1D7A9C4AF676338748F7E155E6337AB4242BCC99
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143408.roa
Signing time: Tue 26 May 2026 03:17:09 +0000
ROA not before: Tue 26 May 2026 03:12:09 +0000
ROA not after: Tue 25 May 2027 03:17:09 +0000
asID: 143408
IP address blocks: 240a:a2f6::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:7a:9c:4a:f6:76:33:87:48:f7:e1:55:e6:33:7a:b4:24:2b:cc:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:12:09 2026 GMT
Not After : May 25 03:17:09 2027 GMT
Subject: CN=9529357DE2845ED05B35AF22C79C17455FB263EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c5:7b:b1:42:28:ad:9e:34:74:06:9a:31:c2:
65:93:d7:97:c1:1d:18:87:81:13:57:ce:eb:f6:06:
75:a2:1f:08:2b:fd:f8:2c:c2:6a:54:d8:e8:d4:e7:
9d:65:45:87:6d:bf:d5:14:db:1e:71:6d:f7:04:3f:
26:9f:70:b8:f2:93:98:21:d9:c9:15:fc:da:a1:20:
4c:50:11:fd:92:5b:0f:1c:e2:26:e1:6d:6a:f2:cb:
94:b4:3e:f1:d9:3d:b7:50:58:85:b2:af:bb:c7:d9:
e1:a6:e0:03:99:c5:78:9a:e7:01:80:77:46:e4:2e:
f5:21:36:44:4d:cb:5e:77:cc:57:cb:c4:57:fb:4d:
8d:2f:ed:e2:3b:22:48:1d:5a:df:53:31:5c:39:7d:
12:3e:f4:e1:e9:b4:99:c4:62:9b:4c:18:46:e6:d5:
5f:77:90:65:70:b0:52:56:c8:89:56:3c:c3:b9:7a:
d6:0d:65:d1:18:ec:6f:22:82:df:4e:ad:d4:d7:ad:
15:a4:bc:c2:a0:41:cc:e2:37:0d:69:00:db:3a:08:
f6:7b:e4:74:52:2c:84:1a:60:5e:e2:34:50:2f:d1:
c3:39:d3:1f:54:a4:59:00:b1:ee:1c:72:28:36:1c:
2e:64:f7:2c:51:27:af:2e:5a:a2:f6:46:9f:81:1d:
d2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:29:35:7D:E2:84:5E:D0:5B:35:AF:22:C7:9C:17:45:5F:B2:63:EC
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143408.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a2f6::/32
Signature Algorithm: sha256WithRSAEncryption
89:92:54:5c:d4:45:58:90:23:91:66:ec:2f:0e:5d:40:fd:f3:
13:cb:0e:75:75:8e:c9:97:f8:6b:86:24:79:d7:53:8d:89:5e:
9e:34:79:5e:8a:02:15:86:32:b9:07:f6:f4:22:d6:61:64:ad:
8b:ee:e3:0c:b4:a8:06:75:ac:52:2d:af:61:c9:47:9d:d5:0b:
ac:c8:20:56:23:8a:09:95:05:ea:41:61:a9:99:4f:c1:bb:9b:
b2:23:af:50:15:aa:9c:21:5e:5d:99:75:33:ad:c6:19:d0:3f:
9e:5a:91:c7:ab:80:5b:22:57:50:a1:e2:ad:b6:99:d6:99:c0:
9a:c2:3f:ad:03:50:66:54:58:b0:81:49:75:64:90:48:74:49:
ec:0a:54:44:b1:e5:5f:59:f6:59:ed:61:a9:82:40:d6:86:99:
92:07:8d:0f:b9:34:ea:ea:15:b8:14:83:7b:e0:6a:41:e2:eb:
19:98:bc:02:20:da:fc:1b:87:88:70:8c:36:c7:b2:14:56:5a:
db:cd:7f:0b:c3:ff:82:7d:82:2c:4a:ba:37:88:91:d5:75:e2:
63:d4:84:ac:1d:24:b5:9a:70:3d:c2:f1:95:b4:77:2c:c0:47:
83:07:8a:b0:93:12:33:af:dd:3d:21:00:75:25:f6:6f:de:44:
03:5c:97:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:46 2026 by rpki-client