Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143476.roa
File: AS143476.roa (raw, json)
Hash identifier: nhE1AjorQezlCakeb3kxoImc1rw1xAZV0xpIPlTyFUo=
Subject key identifier: 6D:31:61:38:23:3D:38:E2:0C:FA:2F:CC:83:77:3E:89:ED:79:28:D8
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 63BD81C2D51E46EB60BE05215E7EA6B6445B4FD1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143476.roa
Signing time: Fri 22 May 2026 07:09:18 +0000
ROA not before: Fri 22 May 2026 07:04:18 +0000
ROA not after: Fri 21 May 2027 07:09:18 +0000
asID: 143476
IP address blocks: 240a:a33a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:bd:81:c2:d5:1e:46:eb:60:be:05:21:5e:7e:a6:b6:44:5b:4f:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:04:18 2026 GMT
Not After : May 21 07:09:18 2027 GMT
Subject: CN=6D316138233D38E20CFA2FCC83773E89ED7928D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5d:6b:ce:a6:9d:c9:0c:ae:e7:03:25:de:06:
6c:37:a1:96:22:23:6e:16:25:3d:2d:59:83:cb:af:
5f:e3:2f:07:1b:eb:fd:dc:5a:b1:4b:2e:07:d4:cb:
ae:24:ac:56:7d:eb:f9:28:ed:d6:6f:b8:e2:a1:c9:
83:62:ba:5c:b8:f6:74:2a:fc:33:f7:4b:61:2e:8b:
75:ed:05:4d:07:44:1e:63:3e:d3:e8:ff:55:4f:43:
3e:99:c8:f6:46:bb:50:39:3a:e4:3d:14:60:8e:6f:
31:9e:d4:60:81:3c:97:60:29:d9:d1:8e:d6:d5:4e:
d2:40:04:12:a9:2e:30:90:68:f4:8c:86:b9:7c:63:
a9:d9:b9:89:76:e0:c5:a5:07:2d:a9:f0:c1:fb:23:
52:56:32:d0:1a:bf:e0:11:b8:07:27:b4:69:91:1c:
43:16:1b:6e:0b:46:34:c1:0d:cd:05:d6:cd:2a:f6:
c8:ae:22:90:18:e3:44:6e:f2:9d:fb:c5:3d:45:b2:
e2:08:93:7a:44:60:9d:8c:3a:e6:23:e7:23:87:d0:
29:1a:c7:49:63:4d:91:e2:62:57:a1:c8:8f:49:6a:
d8:2c:4e:56:6d:41:25:43:a3:a3:15:c1:b7:9d:fc:
c5:45:86:8e:f6:28:31:e3:56:4e:e2:20:d6:83:6c:
f3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:31:61:38:23:3D:38:E2:0C:FA:2F:CC:83:77:3E:89:ED:79:28:D8
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143476.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a33a::/32
Signature Algorithm: sha256WithRSAEncryption
9a:f6:f5:86:97:ad:ca:53:d9:d4:1f:c7:20:54:93:5d:8f:2c:
7c:78:e5:1c:59:8b:33:a6:82:a3:1f:8a:8d:68:41:e4:0f:12:
4a:94:62:ad:17:98:44:c4:ed:88:39:50:ce:3d:96:33:37:43:
2b:fb:dd:44:e4:79:76:02:4c:0d:14:1e:4e:ea:dd:f9:f3:1e:
70:75:f7:eb:38:c1:33:27:44:17:e5:4e:3d:70:2f:e7:4a:85:
d8:42:31:42:6c:b9:d4:37:ec:1b:4b:72:21:36:c8:5a:8c:0c:
06:48:c2:8c:c7:78:73:a5:eb:32:0a:1e:c3:d8:3d:0e:ca:49:
70:21:b7:14:ed:81:a1:04:49:cc:8a:d9:6f:6a:c0:bf:2e:08:
cf:3d:b5:33:94:eb:81:aa:ab:df:5a:ec:ed:64:6d:90:62:a1:
e2:2a:9a:0f:f5:8b:d9:0d:f1:52:eb:ab:3e:b7:ea:24:4d:d9:
18:0b:69:39:c7:a9:35:52:a3:0e:3e:82:cc:61:7f:1a:cf:37:
ef:7f:17:f8:bd:26:2e:48:7a:ac:0f:1d:6e:28:43:6f:c7:38:
32:70:ae:af:63:37:55:0d:c0:bb:7e:41:1c:db:76:97:58:ff:
10:3d:c1:05:80:20:f3:08:1d:88:09:78:7e:df:cc:53:79:b5:
cc:fd:b9:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:56 2026 by rpki-client