Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143418.roa
File: AS143418.roa (raw, json)
Hash identifier: MH1JWKgftvMaVbq0vH9hKaHsk7785lgBwWqmg3TemMY=
Subject key identifier: 0E:BF:AB:0A:19:6B:A3:85:33:16:80:D9:F3:B9:1A:6D:3C:D7:6C:1D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 68009FC2C084F5F9998687A390D7830B57363C50
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143418.roa
Signing time: Fri 22 May 2026 04:27:02 +0000
ROA not before: Fri 22 May 2026 04:22:02 +0000
ROA not after: Fri 21 May 2027 04:27:02 +0000
asID: 143418
IP address blocks: 240a:a300::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:00:9f:c2:c0:84:f5:f9:99:86:87:a3:90:d7:83:0b:57:36:3c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:22:02 2026 GMT
Not After : May 21 04:27:02 2027 GMT
Subject: CN=0EBFAB0A196BA385331680D9F3B91A6D3CD76C1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:14:f4:35:db:b1:b6:aa:0f:70:96:a2:b8:65:
49:df:a9:45:99:0c:16:b8:59:22:bb:43:c1:1c:89:
15:cf:84:2b:be:48:4c:ab:79:93:05:6f:eb:97:ac:
05:68:eb:37:23:84:c1:b4:e2:63:2f:d7:e7:1b:d3:
fe:df:eb:81:46:43:6b:11:2c:70:9c:30:fa:fe:d3:
10:4c:63:90:a4:70:75:2e:bf:41:f2:5d:af:33:f2:
13:ef:af:d6:2c:e6:2e:56:ec:32:8d:48:67:18:c3:
bf:3d:26:2e:5e:d7:05:3e:4d:49:6c:8e:42:5b:d2:
7f:1c:a1:45:09:0a:0a:dc:f2:5c:6c:46:c2:b0:c6:
48:08:48:f2:92:34:53:79:9f:83:d7:5b:cd:b9:6a:
33:8c:8b:3f:2c:17:dc:93:00:43:46:08:a2:d5:f9:
2d:56:82:b1:b7:fc:65:88:ac:17:52:f6:a4:43:33:
83:48:19:c5:3d:07:37:4b:4c:92:f4:65:ed:cd:e1:
72:a3:72:54:12:8e:09:6a:74:ee:19:40:56:2a:24:
44:1e:7b:98:40:d8:26:e5:67:12:31:02:54:6c:53:
f7:7d:86:26:fb:1e:36:7a:6b:eb:38:aa:5a:cb:bd:
4d:34:b9:c9:e1:a4:8d:bb:3e:5a:9c:cf:40:74:99:
1d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:BF:AB:0A:19:6B:A3:85:33:16:80:D9:F3:B9:1A:6D:3C:D7:6C:1D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143418.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a300::/32
Signature Algorithm: sha256WithRSAEncryption
2e:23:7b:ba:36:6b:e7:0b:89:43:59:25:ff:b8:25:1d:79:c2:
8a:c9:7b:51:d5:e2:fd:f5:64:07:66:47:ac:56:02:38:65:61:
de:ba:6e:e4:f7:93:cc:c1:6a:85:d5:52:d4:ad:9f:65:7b:b3:
8a:3e:73:eb:ae:e4:cb:b7:64:92:61:9f:7f:6f:31:1c:93:40:
7c:f8:45:d0:57:6c:b2:f6:47:8c:96:73:05:c8:e3:14:42:c2:
2e:4e:c7:8e:ad:a4:47:0e:f5:e9:7e:d2:0b:0b:5c:46:e7:c0:
d1:db:c8:15:d4:88:a0:8a:2f:a9:31:72:8a:12:6f:d7:bc:be:
16:11:37:c3:f5:12:33:c5:3f:fc:31:e9:76:2f:e2:7d:cd:c4:
ae:13:99:f1:6d:06:c5:6a:6e:53:62:48:37:d1:b2:a7:50:3a:
ea:38:a3:99:ab:9c:e8:8d:20:27:e2:80:41:0c:35:0e:b5:ed:
44:d6:80:44:58:95:d1:a2:56:0d:92:35:90:52:9b:87:9e:75:
c9:21:58:af:9b:22:05:ba:2f:5a:45:52:fe:37:85:de:a9:d7:
a4:c3:c3:6a:6e:94:c4:81:9a:91:dc:f4:e0:4d:05:9b:50:bc:
d1:5f:84:cc:07:5d:9e:99:bd:db:f6:a7:e1:d7:3f:16:dd:f6:
e6:7f:d5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:36 2026 by rpki-client