
Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143482.roa
File: AS143482.roa (raw, json)
Hash identifier: 51+dG6cGavyv8dxZxJElfTk/3bMAffO2hOQsO3tt2M4=
Subject key identifier: 3C:90:69:AE:8A:CD:8E:D6:73:06:3B:92:96:9D:65:FC:70:1D:8E:ED
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 086BD6961A85C7F8C597974F89033B8CFDF1BAF2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143482.roa
Signing time: Mon 25 May 2026 06:28:17 +0000
ROA not before: Mon 25 May 2026 06:23:17 +0000
ROA not after: Mon 24 May 2027 06:28:17 +0000
asID: 143482
IP address blocks: 240a:a340::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:6b:d6:96:1a:85:c7:f8:c5:97:97:4f:89:03:3b:8c:fd:f1:ba:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:17 2026 GMT
Not After : May 24 06:28:17 2027 GMT
Subject: CN=3C9069AE8ACD8ED673063B92969D65FC701D8EED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:42:43:1c:ab:20:34:84:f0:1e:80:81:71:c0:
a9:bb:62:f3:d6:93:50:75:10:bb:13:33:8d:d6:f1:
e0:51:e1:b9:d1:e7:4a:b9:49:1a:76:4d:ca:06:77:
29:92:b4:8b:7f:e2:c9:cb:81:a6:26:25:db:a0:62:
13:d0:da:bb:f8:79:9a:a6:a4:1c:e6:e4:7a:62:19:
14:03:2a:fa:8d:c1:5c:02:81:42:64:89:4b:e5:c4:
21:d4:8f:c4:34:24:36:5a:4f:56:77:c4:b3:73:b9:
f1:82:f6:a4:c0:6f:81:d1:6c:cf:c6:db:64:85:31:
ee:1d:d5:5b:de:e5:b4:ac:60:f1:79:cd:37:7c:18:
49:05:a9:0b:65:cb:ef:d1:33:e8:2a:21:18:b2:bd:
bc:bc:4c:be:a6:c0:85:d3:91:78:e7:d8:fe:9e:91:
f5:95:f6:0f:ad:90:15:1a:e7:1d:ed:e0:7f:68:45:
3c:c6:27:5a:80:82:79:e7:a6:df:2e:9c:02:24:6e:
de:cb:ad:9f:47:af:87:aa:05:82:cd:2a:52:24:cd:
72:52:59:a6:d6:16:a0:db:1d:df:a3:e2:2b:db:e0:
ee:99:ad:58:28:28:71:5e:02:01:76:bd:63:f7:0c:
b9:f3:02:95:c5:76:ed:b6:82:e1:d1:24:21:69:88:
2c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:90:69:AE:8A:CD:8E:D6:73:06:3B:92:96:9D:65:FC:70:1D:8E:ED
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143482.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a340::/32
Signature Algorithm: sha256WithRSAEncryption
46:0c:b5:40:03:91:8a:0c:fd:e8:53:f2:81:aa:b1:0d:01:ac:
38:c2:31:fc:60:75:b8:bd:be:c7:88:ed:0f:a5:1f:65:e3:12:
9d:df:c2:92:f0:db:de:25:91:39:d8:ea:b4:43:df:69:07:46:
80:61:32:35:bd:b0:0f:d9:24:08:7d:3b:02:4d:dc:ff:ee:df:
74:5c:ef:82:f0:18:21:8c:51:6a:1b:e8:45:93:49:56:c6:06:
e1:70:6e:bd:52:40:2d:87:9b:df:e5:37:3b:62:80:3e:75:67:
2b:e3:8d:a7:7e:ba:a9:e0:ad:5a:2f:30:be:bd:20:63:d6:4e:
1a:ef:c0:f6:ed:0e:7c:3b:cc:1e:c2:97:b7:ae:fd:99:57:34:
67:af:22:c9:5a:89:d7:4a:ae:ef:52:2e:4d:89:e7:4c:2e:a6:
48:1e:49:f9:5e:96:b0:ae:68:01:ff:f7:4b:0d:26:b6:56:81:
dc:dd:d1:53:09:0b:0f:aa:ee:3b:5f:ea:d3:63:b9:fa:85:3d:
d8:38:df:25:36:21:c5:d4:c6:64:15:92:52:e0:c6:0e:78:68:
ed:a5:19:12:ed:59:63:6d:34:c7:cd:3b:31:21:11:10:e8:2d:
61:f2:0b:ed:5d:b2:8f:7a:0c:bd:92:02:06:18:41:44:93:a1:
46:12:11:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:30 2026 by rpki-client