Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143465.roa
File: AS143465.roa (raw, json)
Hash identifier: jSCC6CLtL9+YZBmsPSN3URGMK8tR3DmXInjHr0acSg8=
Subject key identifier: 44:3E:DC:97:BC:21:DC:5D:C6:BB:74:BC:6C:D3:ED:CC:8D:8E:1D:01
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2A71AAFB77775F2BD684E5B25F39632EB09E965C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143465.roa
Signing time: Tue 26 May 2026 03:17:04 +0000
ROA not before: Tue 26 May 2026 03:12:04 +0000
ROA not after: Tue 25 May 2027 03:17:04 +0000
asID: 143465
IP address blocks: 240a:a32f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:71:aa:fb:77:77:5f:2b:d6:84:e5:b2:5f:39:63:2e:b0:9e:96:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:12:04 2026 GMT
Not After : May 25 03:17:04 2027 GMT
Subject: CN=443EDC97BC21DC5DC6BB74BC6CD3EDCC8D8E1D01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ed:c3:e4:72:39:9d:34:3b:97:32:93:77:ef:
10:18:db:4f:65:0d:f1:1c:3f:68:88:44:f7:e1:fd:
0f:4f:76:bb:ba:af:10:c7:e3:52:0e:df:80:fa:8f:
8b:4e:43:0e:63:5b:0a:17:c1:97:2c:85:1e:bc:0f:
dd:3a:4c:00:3f:db:0f:af:84:e5:1d:d8:1e:0b:2c:
1d:2a:99:f5:6a:f6:77:71:ad:9d:cc:b4:58:b2:4c:
27:4a:50:d9:ca:c5:ce:74:14:80:bc:6b:8b:f5:8e:
15:b1:23:3b:c1:d7:13:5c:6c:8f:13:61:7c:d5:fb:
4c:de:bf:67:13:18:ed:1f:41:dd:13:6b:6d:c5:6e:
1c:5a:e4:74:10:e2:ff:e5:7b:87:fd:bd:25:39:04:
36:7c:0f:aa:e5:90:7b:97:43:b2:2f:eb:45:cb:81:
c4:ab:55:eb:03:ae:e8:23:b7:1f:20:47:d8:da:ef:
72:82:6f:5f:61:94:d3:30:53:00:2a:bc:92:53:1d:
ed:f5:fd:9f:ae:0d:a2:e1:b0:8b:fe:ac:19:14:df:
76:4d:c8:b6:9f:7b:ea:12:9d:58:41:9d:17:5d:75:
1f:2d:54:2e:7b:f8:32:ba:e3:84:be:de:81:02:0c:
77:8a:c9:f1:64:ca:bd:f2:5c:77:5c:2a:77:20:6f:
0d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:3E:DC:97:BC:21:DC:5D:C6:BB:74:BC:6C:D3:ED:CC:8D:8E:1D:01
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143465.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a32f::/32
Signature Algorithm: sha256WithRSAEncryption
66:29:c1:ba:44:60:30:db:06:f9:b0:7d:00:68:4e:1d:26:c2:
3e:e8:c4:f7:18:fc:25:e9:5a:d0:ed:00:02:9d:03:62:33:af:
1c:51:b9:a0:59:a9:19:d3:4e:f7:b4:0b:1d:15:b1:3d:a0:40:
8e:fa:3f:e5:88:91:20:df:19:2f:d0:fa:b6:5d:c0:5c:26:55:
15:16:30:0e:ce:d0:a8:77:c7:5d:6e:8f:0e:55:89:9b:71:2d:
7b:36:c5:39:ad:f1:d2:55:33:21:1c:a9:da:46:11:0a:05:bf:
fd:dc:19:43:73:d6:9a:2a:0b:37:7b:15:95:fa:c4:d9:65:39:
0b:c1:20:2c:f5:55:86:83:0b:ed:2a:59:e8:0b:07:13:7e:54:
cb:e2:b5:22:9e:48:1b:a0:5d:86:db:f8:bd:e4:4a:65:0e:7f:
e3:53:e0:94:93:d3:73:17:87:e5:c9:b3:60:33:7e:db:93:69:
ba:fb:69:a1:f9:02:da:34:ed:01:4b:cf:61:75:fa:1a:53:24:
31:8c:55:9c:e3:dc:90:b0:8a:0d:c1:c6:b9:e3:4d:62:01:5b:
b4:dd:4b:5d:2c:82:e7:bd:de:e2:76:96:82:f8:84:bc:8e:c4:
32:12:a5:78:0a:73:f2:e8:ee:35:11:d0:ad:c1:24:68:c7:62:
a9:5f:16:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:47 2026 by rpki-client