Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143460.roa
File: AS143460.roa (raw, json)
Hash identifier: uFe5dytBnTah1v1yUn2FU3R5Uyn1zudrOHRCM6dbr1Q=
Subject key identifier: BC:00:16:DA:D9:B8:29:AD:82:7E:23:0A:F0:92:DE:51:24:CA:CC:DF
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7F52949456180ECB8D35262E235564C47CF267E1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143460.roa
Signing time: Mon 25 May 2026 02:22:17 +0000
ROA not before: Mon 25 May 2026 02:17:17 +0000
ROA not after: Mon 24 May 2027 02:22:17 +0000
asID: 143460
IP address blocks: 240a:a32a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:52:94:94:56:18:0e:cb:8d:35:26:2e:23:55:64:c4:7c:f2:67:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:17 2026 GMT
Not After : May 24 02:22:17 2027 GMT
Subject: CN=BC0016DAD9B829AD827E230AF092DE5124CACCDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:70:d3:31:80:30:e7:68:fd:3f:67:4f:d1:6c:
64:f6:12:11:c5:8c:75:de:36:90:ad:9f:2e:c0:1a:
de:c9:a0:e4:c2:f6:a6:fa:e4:07:31:27:ed:85:c8:
6d:2b:b2:39:a1:d9:22:61:b1:8a:31:89:7a:d9:e5:
1b:eb:60:c1:87:e8:92:ec:86:37:1c:3e:33:d0:a9:
13:03:b3:9f:2c:c2:6f:0b:e7:80:d6:35:63:a8:7e:
be:25:65:23:51:d6:38:07:79:5f:96:db:ce:47:08:
09:f0:0f:f5:89:f2:84:62:cd:68:21:b9:83:7a:0f:
46:99:83:64:ec:3f:d8:05:6e:c4:78:a0:31:1a:a5:
f3:8a:5d:c0:0b:fe:ac:3a:c7:42:3a:05:8d:87:35:
65:88:70:26:ee:dc:68:06:67:b6:be:8c:55:d1:f5:
c1:16:18:03:99:e4:69:fd:52:94:b7:95:f2:1b:99:
c4:b6:19:24:15:86:7b:83:69:b2:c0:6a:58:2f:bf:
95:20:04:a0:64:03:9d:cc:85:7a:f7:a6:3d:0c:bc:
b4:fa:9a:89:da:72:bf:a6:bb:4e:32:8f:1a:a0:d1:
e4:f2:99:2a:4b:f7:f9:a5:ee:5d:a8:13:fc:47:24:
57:92:95:95:02:07:74:f7:bf:c2:3f:5d:b4:d7:31:
db:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:00:16:DA:D9:B8:29:AD:82:7E:23:0A:F0:92:DE:51:24:CA:CC:DF
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143460.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a32a::/32
Signature Algorithm: sha256WithRSAEncryption
32:62:f0:fe:8c:7b:c0:2d:af:11:28:a7:ad:75:b6:eb:dd:df:
41:82:b1:8f:78:7d:f4:d7:a8:8d:3e:76:20:f4:2b:98:74:2b:
4c:e5:1d:38:f2:4a:54:a9:59:49:4b:36:b1:f4:db:2b:68:62:
7a:71:af:02:17:45:08:38:ba:aa:13:d5:46:58:36:b5:3a:f3:
ca:53:46:1b:ed:84:b3:17:83:83:e3:8f:ac:14:ec:32:79:04:
47:a4:d2:33:ad:9a:5c:12:86:7c:a6:0c:51:50:c2:93:8f:cc:
c6:17:0f:6d:16:9f:b9:55:51:9f:61:13:6f:9d:0b:22:45:54:
36:b4:e9:d8:d4:19:56:20:df:be:c1:c7:62:41:43:41:bd:d6:
38:7e:d4:28:bb:ca:4b:93:7b:f7:07:5f:3f:b0:b2:17:94:36:
dc:b4:02:94:9b:d7:42:f6:da:ea:4c:5b:d5:64:17:29:1e:54:
e1:48:71:c8:d6:c9:17:ab:cf:43:d2:3a:3c:68:86:54:02:10:
98:80:83:18:1a:8b:ab:02:0a:17:9b:a3:5e:64:38:fc:3e:3f:
45:29:2c:99:af:34:a7:2b:42:a2:25:0b:1b:02:09:31:ea:76:
28:cf:d1:1f:35:c7:05:a8:1e:83:12:1c:14:65:c4:26:a0:bf:
87:eb:da:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:20 2026 by rpki-client