Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143456.roa
File: AS143456.roa (raw, json)
Hash identifier: plS/7ko+fujKZER4Uzu8SOZJZmJZiduuMhSKwYCRgjI=
Subject key identifier: E2:F4:07:60:FD:2B:C3:1E:7A:F4:4C:16:DD:32:51:F3:77:9B:FC:94
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 35614F366DE81C03E8A8C772D8BA9C8AAF27C355
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143456.roa
Signing time: Fri 22 May 2026 06:05:36 +0000
ROA not before: Fri 22 May 2026 06:00:36 +0000
ROA not after: Fri 21 May 2027 06:05:36 +0000
asID: 143456
IP address blocks: 240a:a326::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:61:4f:36:6d:e8:1c:03:e8:a8:c7:72:d8:ba:9c:8a:af:27:c3:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:36 2026 GMT
Not After : May 21 06:05:36 2027 GMT
Subject: CN=E2F40760FD2BC31E7AF44C16DD3251F3779BFC94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:76:a2:0f:6c:34:fe:ad:b3:e4:6e:3b:76:d8:
9f:d7:54:e1:8c:8c:07:25:88:bd:7f:6e:82:94:aa:
b5:7c:ad:cf:44:2f:5c:17:f4:f0:99:00:77:ff:e5:
95:85:29:71:86:aa:29:2f:dc:99:ea:af:27:f0:67:
cd:08:09:02:fc:1a:d1:77:5a:58:a6:e7:9a:57:a6:
19:28:ad:3b:28:5f:fb:b5:f5:4f:28:55:43:93:0a:
96:fb:e8:12:a1:3a:bd:ad:d7:d6:1c:74:40:45:c4:
c0:1a:9e:d2:dc:1a:08:e5:ba:1b:ee:e4:17:08:a8:
21:47:f1:10:c5:87:ce:4b:7d:75:a1:eb:e4:f0:dc:
bf:04:48:2e:6e:6a:68:98:04:db:76:0e:68:db:42:
1b:8b:69:49:2d:66:c9:b6:63:e6:ff:86:ea:59:d4:
df:4e:ee:a8:be:30:01:80:63:cb:80:7f:ba:62:9e:
4b:5e:a0:45:78:57:c0:d4:cf:62:5a:3b:bf:cd:b9:
ad:e5:4e:b8:7b:69:53:f4:b4:f2:f4:37:29:7b:61:
fa:23:f2:da:7a:c1:c7:35:31:e3:db:9f:9e:f5:7d:
0a:30:d5:32:dc:a3:e6:6e:c4:e3:6e:c2:da:d1:ab:
e0:e1:66:0d:ec:d8:aa:7d:fe:25:48:fd:e6:4e:85:
50:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F4:07:60:FD:2B:C3:1E:7A:F4:4C:16:DD:32:51:F3:77:9B:FC:94
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143456.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a326::/32
Signature Algorithm: sha256WithRSAEncryption
11:34:5c:b0:85:1d:52:ae:95:39:3c:f5:8c:9a:93:55:3f:8e:
dd:9d:67:4f:41:cb:57:12:8b:e2:d6:69:cd:be:db:21:65:5a:
4c:c9:e7:1f:b5:30:2c:e6:2a:1c:fd:2b:2b:60:49:36:9f:10:
44:7d:19:d7:e7:e1:ee:94:80:26:5e:1a:ea:24:3b:1f:c7:a2:
b5:97:34:ad:7d:31:05:ac:b7:50:94:1d:6a:ee:67:69:99:b7:
a2:a9:db:a4:87:57:04:96:8e:4f:3c:d2:37:34:9f:ca:c8:69:
75:63:b5:fb:82:5c:5f:37:65:8e:75:47:ef:92:72:64:8f:22:
9e:2d:a8:2a:61:a8:f9:9c:d4:a4:3d:03:b1:e2:d9:9a:d4:dc:
4a:15:cd:31:a0:33:6e:22:4f:d6:f6:a2:78:33:fb:e9:e8:71:
95:20:9a:e9:30:07:ce:f7:2c:84:d4:76:8d:62:36:a5:52:97:
2d:88:6b:96:3a:64:2e:e2:36:4e:b9:99:52:30:32:e2:d3:ab:
16:8c:ba:3a:5b:2d:7d:cd:ac:d2:21:40:82:89:14:0f:8e:87:
2c:31:2e:42:ff:ae:bf:bd:48:b5:e2:72:fa:e7:ba:5c:56:e4:
b6:76:71:cc:72:28:5a:05:d4:74:e4:9e:c2:b6:20:5f:58:7b:
31:36:e1:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:09 2026 by rpki-client