Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143463.roa
File: AS143463.roa (raw, json)
Hash identifier: 4eW+Y5YZtvJviXubWpcGUHKYNYeb25KMU4opxc6OkYE=
Subject key identifier: 12:5F:7E:D6:27:7C:32:64:D8:4A:80:FC:68:C6:92:57:7C:16:FB:12
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1F4A94E65CAF5A0CDA0FACF14056AF3EBCD018C8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143463.roa
Signing time: Mon 25 May 2026 06:28:45 +0000
ROA not before: Mon 25 May 2026 06:23:45 +0000
ROA not after: Mon 24 May 2027 06:28:45 +0000
asID: 143463
IP address blocks: 240a:a32d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:4a:94:e6:5c:af:5a:0c:da:0f:ac:f1:40:56:af:3e:bc:d0:18:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:45 2026 GMT
Not After : May 24 06:28:45 2027 GMT
Subject: CN=125F7ED6277C3264D84A80FC68C692577C16FB12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:2e:66:d7:a2:89:10:5e:50:d2:23:0b:a0:18:
51:a0:ec:a0:c1:13:fe:7a:8e:a4:92:0f:af:c3:1d:
ea:78:45:3a:ec:79:c4:f1:1d:9e:c9:49:86:3e:18:
b2:91:cd:75:8a:1f:01:b2:16:b6:9d:24:d6:af:ad:
90:91:60:e6:a4:46:93:35:31:86:f7:b2:93:23:42:
98:f2:8d:75:7a:d7:b3:a9:ad:6a:c5:41:4a:20:e7:
32:50:33:9d:80:c8:21:a1:83:c5:fd:43:b0:bc:82:
f6:86:f2:23:bd:81:61:45:12:9e:6b:3c:77:f5:92:
df:85:79:6b:a9:df:e5:b7:d7:3f:55:42:09:b3:d0:
d0:5b:ea:e3:c1:87:a9:95:a2:3a:4f:a7:5d:06:88:
82:e6:4c:26:c9:05:2a:10:95:32:dc:af:84:a3:d3:
04:6c:d7:e5:08:6b:08:01:1a:07:e9:dd:d6:dd:a7:
ea:c3:73:7d:ab:a7:32:45:84:70:31:5c:c2:bd:a8:
a3:4f:3d:6e:32:76:97:65:7a:c8:10:eb:71:2c:e9:
0c:15:c1:60:b4:2d:4d:82:14:26:57:ad:b7:26:d3:
09:41:ec:ab:2f:dc:ac:3c:48:b5:2a:55:95:62:4b:
1f:da:73:95:b5:a3:ba:f7:cc:3e:99:b4:0d:ff:8e:
6a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:5F:7E:D6:27:7C:32:64:D8:4A:80:FC:68:C6:92:57:7C:16:FB:12
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143463.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a32d::/32
Signature Algorithm: sha256WithRSAEncryption
0d:1d:fc:1d:e5:a7:46:fd:fb:d4:df:8f:37:cc:4f:22:2f:b1:
a5:f1:7e:15:a2:8d:57:af:f7:85:21:c1:77:99:81:5d:a8:08:
bc:b7:7e:15:64:db:05:3f:07:78:2d:17:7b:5e:8a:19:0e:bb:
24:21:52:d4:ab:53:e5:5a:57:c4:59:f9:87:fe:59:46:dc:22:
e6:ab:92:69:e3:80:94:da:8a:b4:20:9d:a1:ed:67:ea:c5:21:
ae:4e:31:f2:f1:ce:38:72:a8:27:c8:c8:10:0b:14:e8:36:1f:
90:df:2c:53:5a:a5:92:91:a4:4f:51:06:b8:81:d1:62:5b:70:
9b:c0:22:c2:f5:0f:50:ae:66:21:20:66:21:e9:4c:48:c9:55:
c8:66:51:b9:28:bd:83:67:0c:0f:2d:2c:ba:4f:bf:6a:9e:56:
e4:04:cc:02:44:0f:91:06:dc:2c:87:96:39:a3:30:d5:bd:ab:
81:4a:97:c7:85:ad:9c:a3:61:92:a1:01:c6:c6:2c:83:62:c4:
53:53:89:6e:a2:81:e0:5e:3d:13:b3:be:34:bc:40:f6:ac:67:
33:7c:d2:59:92:33:f0:3c:3a:bb:1b:47:2c:5d:48:da:d8:8e:
33:68:4a:e8:d0:81:a4:f3:2a:7a:d1:82:c3:a8:be:92:cb:f5:
fc:12:4a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:50 2026 by rpki-client