Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143409.roa
File: AS143409.roa (raw, json)
Hash identifier: dQ3Z9j4JgZC1XZv+8EMwoC51ylWumcVD6xnKiWtEyd8=
Subject key identifier: 6B:87:4E:BA:5F:B3:3F:8A:73:53:94:C0:CC:3E:7B:64:C5:2E:AC:BF
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 58383E4747940D5DEA6685468F67FD2E9B1EB75C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143409.roa
Signing time: Fri 22 May 2026 06:05:30 +0000
ROA not before: Fri 22 May 2026 06:00:30 +0000
ROA not after: Fri 21 May 2027 06:05:30 +0000
asID: 143409
IP address blocks: 240a:a2f7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:38:3e:47:47:94:0d:5d:ea:66:85:46:8f:67:fd:2e:9b:1e:b7:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:30 2026 GMT
Not After : May 21 06:05:30 2027 GMT
Subject: CN=6B874EBA5FB33F8A735394C0CC3E7B64C52EACBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:49:e2:52:a6:7a:87:74:53:69:57:41:aa:95:
ad:11:51:5d:86:c4:06:0a:64:3f:28:b1:18:ca:64:
2d:5b:82:ad:81:44:87:95:9e:2e:cf:52:ec:67:eb:
71:17:0a:75:cc:01:e3:4f:68:c3:13:0e:85:7d:41:
ac:d9:9c:a4:0c:38:cb:e8:3e:fe:11:01:0a:0e:1f:
66:09:31:6d:a1:42:7f:f0:b1:de:aa:72:51:e8:ad:
5e:58:46:87:f4:a5:da:b9:e0:e8:41:00:e2:d7:49:
16:a5:f8:fc:f6:37:ff:fe:ca:1d:e2:de:0f:7b:a5:
b2:ef:87:49:b8:c7:2f:e3:b1:5d:b3:82:96:fb:2d:
ed:7c:c3:5d:35:a9:26:46:4d:b2:65:44:bf:7a:f6:
76:a3:5e:5b:1d:4f:9e:54:f7:06:16:2c:b4:df:46:
86:08:63:59:13:90:43:13:df:9e:00:33:cd:23:a9:
db:8f:eb:a1:d2:d3:e2:6a:b3:f4:82:05:65:15:11:
df:e5:19:a5:04:49:c3:76:fb:3f:17:31:44:ab:25:
c4:95:36:ba:1b:f8:86:0f:4b:35:48:d1:9c:10:5d:
2d:73:12:39:a6:07:31:64:93:aa:1c:ac:8c:42:6a:
1a:5f:87:37:b0:d3:ab:bb:61:70:4b:5f:bc:d2:29:
ca:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:87:4E:BA:5F:B3:3F:8A:73:53:94:C0:CC:3E:7B:64:C5:2E:AC:BF
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143409.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a2f7::/32
Signature Algorithm: sha256WithRSAEncryption
ba:9a:da:93:77:c0:a2:55:d2:50:52:00:bd:04:f0:4a:ce:c7:
6a:ff:b5:e2:ca:77:af:6d:88:45:82:18:ba:99:fb:7a:24:a1:
71:d7:99:5d:14:97:5a:d2:36:b7:78:13:bd:9f:b7:d8:47:78:
08:c2:cb:62:fa:72:79:c8:34:bf:85:49:41:ee:77:f9:df:ce:
9d:a1:fc:4a:74:57:a0:24:95:84:ed:6a:16:36:e5:01:ec:91:
3d:e9:18:67:4d:62:b7:ae:f1:e8:a3:87:da:0d:b8:76:13:d3:
49:25:41:f4:bb:03:bd:19:9b:63:c0:a2:44:bd:2a:d2:c8:35:
9d:61:6e:a2:3f:47:7d:9e:03:d3:e3:07:1c:7c:8a:b3:7e:20:
42:a5:d4:5a:a1:92:06:b7:0c:de:59:61:ca:f0:9a:ae:75:10:
83:75:36:4c:7b:d6:68:82:4f:87:c3:48:03:b0:8b:fc:0a:90:
4f:20:3c:c5:ba:5f:65:e2:86:25:2d:19:ba:3f:5e:26:64:fb:
01:43:25:45:00:80:d8:4a:6b:fa:41:70:05:00:f8:01:cd:dc:
6d:c4:92:7a:10:c7:3e:25:2f:65:99:42:8d:9f:7e:22:c7:01:
b3:16:93:da:79:f5:76:f2:15:83:5d:9c:ed:fb:f5:99:d3:4f:
45:62:08:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:53 2026 by rpki-client