Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143422.roa
File: AS143422.roa (raw, json)
Hash identifier: Vv273XqqpQPIAh5F5CeSBt2EF41BSe2s2sjmXyacdKA=
Subject key identifier: 4D:93:0C:4A:9B:15:5B:92:3A:28:65:F5:AE:A1:01:5A:4A:4F:74:82
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 11042531267807497A0A4F2BB887718C5B9672CE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143422.roa
Signing time: Mon 25 May 2026 06:48:58 +0000
ROA not before: Mon 25 May 2026 06:43:58 +0000
ROA not after: Mon 24 May 2027 06:48:58 +0000
asID: 143422
IP address blocks: 240a:a304::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:04:25:31:26:78:07:49:7a:0a:4f:2b:b8:87:71:8c:5b:96:72:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:43:58 2026 GMT
Not After : May 24 06:48:58 2027 GMT
Subject: CN=4D930C4A9B155B923A2865F5AEA1015A4A4F7482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:cf:ee:f3:9a:8c:76:94:82:83:9e:9b:79:58:
78:05:9d:33:84:78:4b:b7:e8:91:e1:c4:dc:cf:39:
a1:83:aa:c5:3d:14:c5:82:6d:5e:3a:1d:dc:cc:63:
89:35:dc:b9:ca:d1:4d:86:69:4e:ae:1b:df:a0:3d:
9b:de:98:de:56:45:5e:01:08:50:cb:bf:d3:42:46:
6b:c1:30:d6:35:63:68:4a:27:59:bc:90:93:68:02:
af:78:d0:9e:8e:cb:1a:a1:55:7a:87:cf:41:4a:10:
1d:4e:2c:4d:f3:9e:31:ad:34:4d:34:c2:35:03:25:
9f:b4:0f:ea:f5:a6:8a:b8:77:de:4a:e7:2e:36:90:
a2:49:9a:5d:60:44:74:f5:9e:a6:6b:2e:95:6f:1e:
d2:9a:17:a5:bb:85:1c:fc:a2:d8:b1:f2:0a:7a:fb:
17:60:a2:63:06:c3:6e:27:f3:43:d6:5e:08:22:83:
25:dc:98:8a:2b:7d:96:d6:51:8e:d2:60:25:7c:e1:
8e:d6:ee:3d:42:76:a3:08:17:f3:0e:28:66:99:97:
f9:5a:d1:e0:79:71:df:4f:c2:82:e8:1f:03:9d:e3:
71:c6:e2:7a:44:16:91:56:e5:9c:de:99:ff:17:ea:
64:5a:8d:dd:c8:6a:82:dc:01:d2:53:e9:53:c0:84:
6d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:93:0C:4A:9B:15:5B:92:3A:28:65:F5:AE:A1:01:5A:4A:4F:74:82
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143422.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a304::/32
Signature Algorithm: sha256WithRSAEncryption
bc:c5:d4:f9:36:b4:5b:f9:b5:67:37:3c:7f:56:aa:3b:41:cf:
3b:7b:00:7d:f1:36:7b:b7:77:be:7f:64:6c:4e:86:0e:f8:b3:
39:86:8e:00:4f:e9:ba:4f:ad:93:f2:80:72:6b:fd:d3:df:16:
a1:bd:34:67:34:0a:b7:4d:21:78:37:cd:dc:5e:09:16:a8:06:
47:4d:b9:19:ac:53:61:fa:e0:27:a8:81:94:d0:73:41:13:9e:
5d:29:35:89:4a:d6:47:46:b8:2a:5a:71:97:ce:ba:bf:f2:1d:
14:60:00:d7:3b:4d:28:27:0e:9d:8a:1c:83:93:3d:bc:d3:e6:
c8:f0:13:9b:5a:3c:fa:dd:5f:0c:37:f1:84:28:63:c8:b2:b9:
d5:ac:0c:05:d1:9e:b1:ad:fc:ce:a9:3a:56:73:2e:e1:5b:2d:
f3:22:13:da:1b:61:87:fe:fe:5d:4c:f7:d4:8e:6a:95:ad:14:
76:83:1f:10:f7:a7:1d:6b:f2:ed:bb:2f:0a:04:ca:aa:67:ef:
0b:b2:e2:d7:0d:e8:ec:b9:09:3c:be:fb:b1:c7:47:27:aa:9f:
3f:4a:6f:cb:69:94:1b:1d:47:70:7f:d1:81:0a:84:1a:21:d8:
50:31:ad:2a:e5:fb:f5:81:da:08:c0:18:b8:86:47:2d:49:b7:
e4:72:8b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:19 2026 by rpki-client