Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143413.roa
File: AS143413.roa (raw, json)
Hash identifier: taICm7okozNYfEZzL0h3x6/91CstiYGafcMp/L0riGY=
Subject key identifier: B9:FD:DA:C3:39:64:AB:B7:E9:77:6A:7B:06:18:A7:BB:8A:EA:C5:9A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2A77747684C8C6B9AF5075FBCE1CBD6A0BC4F101
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143413.roa
Signing time: Fri 22 May 2026 06:46:34 +0000
ROA not before: Fri 22 May 2026 06:41:34 +0000
ROA not after: Fri 21 May 2027 06:46:34 +0000
asID: 143413
IP address blocks: 240a:a2fb::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:77:74:76:84:c8:c6:b9:af:50:75:fb:ce:1c:bd:6a:0b:c4:f1:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:34 2026 GMT
Not After : May 21 06:46:34 2027 GMT
Subject: CN=B9FDDAC33964ABB7E9776A7B0618A7BB8AEAC59A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ff:6a:93:7e:62:3a:89:6f:92:03:c7:c7:46:
04:d4:7c:96:01:96:ed:cc:fc:51:7f:3b:14:ce:83:
30:06:9a:44:28:db:74:f4:d5:cf:88:77:13:fd:c8:
1b:ab:64:4b:b5:63:e6:d7:a9:e6:6e:54:9b:b6:ab:
70:cf:1b:ac:84:ce:d5:c4:e3:f1:d5:89:2f:78:a0:
26:eb:9d:7b:fb:2e:3c:70:c2:8b:4e:e4:31:3d:81:
f7:11:bf:d2:f8:47:5d:8a:fe:bf:fc:51:6a:51:65:
65:ae:e0:ee:2e:a8:fd:9f:0f:41:9d:5c:34:39:94:
b0:e4:b1:70:a0:be:f2:60:31:5f:7f:b8:36:92:6f:
09:d4:43:6a:60:08:b4:59:a7:56:b4:e3:c0:87:ba:
b0:b2:43:b3:2f:c4:ab:be:4a:a7:5d:f7:ed:4f:00:
f1:13:35:90:d3:e8:b6:ce:8e:5a:98:8e:e2:82:aa:
94:f6:50:aa:6f:40:b5:6a:be:56:a7:b8:5b:cf:f5:
d1:be:2f:51:12:db:84:de:ef:72:81:18:b3:cb:48:
e6:88:c6:92:a3:45:83:a9:e5:8c:af:e7:6c:ed:0e:
05:56:4c:21:11:09:e5:83:2b:ef:bf:77:2e:a5:48:
ba:81:a9:51:3d:73:4e:f4:b6:6f:13:5b:65:7f:47:
dc:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:FD:DA:C3:39:64:AB:B7:E9:77:6A:7B:06:18:A7:BB:8A:EA:C5:9A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143413.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a2fb::/32
Signature Algorithm: sha256WithRSAEncryption
80:63:05:1e:1f:aa:79:b4:a2:fa:53:99:77:b2:2c:2d:64:b3:
b8:da:82:d1:6e:bc:1f:9d:f9:71:f4:a3:5a:f3:85:01:b4:52:
c2:eb:dc:e5:83:89:06:99:34:7b:ca:3f:3d:96:49:cd:ee:10:
a9:d3:8f:62:9d:c2:da:10:97:f4:c4:2b:25:5b:bf:b1:a0:db:
f1:58:de:7a:ac:6d:eb:ae:fa:ac:5c:f0:3a:f2:cf:5a:8b:7f:
37:57:e9:1a:8d:aa:49:24:a1:54:00:3c:ea:25:0d:e7:dd:fe:
54:a8:46:ed:72:a5:d2:0a:a8:0b:de:a6:dc:26:7e:18:d4:ae:
06:b5:3b:b1:37:4e:b7:3b:62:9b:67:2b:ba:55:5f:92:31:14:
b7:fe:64:4f:92:63:1e:0c:09:63:73:db:44:dd:a8:9e:73:95:
14:b6:58:1c:11:1a:7e:cc:0c:7d:19:d1:7c:30:e4:75:b7:1d:
fb:7b:21:c4:42:00:07:65:78:41:50:83:c5:dc:d3:2c:f9:13:
57:4d:06:b0:01:1c:35:32:45:8f:5a:84:63:68:87:16:18:05:
b5:c2:1a:f4:9e:4e:e4:6b:ff:9a:30:e0:ea:83:e4:53:28:49:
28:57:1c:fd:ff:38:cf:63:85:28:75:7f:07:97:77:f7:46:a1:
af:98:15:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:32 2026 by rpki-client