Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143483.roa
File: AS143483.roa (raw, json)
Hash identifier: 4GdTZMBW8oHOpY8ue/VqEubRmu7JzO6SQFx9EkOLm0Y=
Subject key identifier: FF:8B:77:4B:9F:99:FA:B7:DE:C0:DF:0C:22:EB:CD:62:72:C5:75:E4
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7F19BF08B2104330A5E20C6D75329354450D9F20
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143483.roa
Signing time: Mon 25 May 2026 01:51:06 +0000
ROA not before: Mon 25 May 2026 01:46:06 +0000
ROA not after: Mon 24 May 2027 01:51:06 +0000
asID: 143483
IP address blocks: 240a:a341::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:19:bf:08:b2:10:43:30:a5:e2:0c:6d:75:32:93:54:45:0d:9f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:06 2026 GMT
Not After : May 24 01:51:06 2027 GMT
Subject: CN=FF8B774B9F99FAB7DEC0DF0C22EBCD6272C575E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bb:0e:6b:b0:c7:f9:02:e1:1e:92:3c:7d:65:
38:52:1a:68:b0:16:ef:0c:c1:f5:c0:1f:77:fc:ef:
29:ca:60:31:9c:85:0b:28:df:ab:28:7d:3e:fd:82:
0a:d9:cd:e8:7f:e7:0a:4e:e1:ef:b3:7d:60:ef:a2:
3f:f5:5c:ca:a2:af:2e:89:07:02:0b:8d:d7:a7:5f:
a7:de:1c:80:38:0c:a7:8c:82:15:a0:0f:58:75:43:
09:19:1b:db:77:6a:af:1d:22:07:5f:27:87:1a:cb:
fe:d9:4e:de:5e:75:b8:50:ba:25:6a:8a:14:9e:75:
c8:1a:fc:97:58:82:71:2b:2d:35:7a:a6:ae:e0:eb:
6b:1e:36:8a:0e:cf:46:a7:b2:e9:9e:b1:a9:a9:e1:
56:c3:88:0a:08:65:39:3a:83:c5:42:38:60:39:22:
c2:bf:25:09:cc:47:bf:a2:ca:d7:65:96:ee:bf:6f:
89:45:77:55:53:b0:32:24:66:2b:5e:e3:f8:92:ea:
0d:e9:6a:bb:73:3e:a0:d1:fb:77:2c:f4:25:cf:89:
55:95:60:19:fa:47:e0:05:3d:da:54:14:6c:59:9f:
2f:c7:64:db:21:04:61:9c:fb:ee:e5:87:58:2b:be:
ad:a8:00:1c:86:4d:57:20:b8:f3:2f:92:ff:20:a4:
2c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:8B:77:4B:9F:99:FA:B7:DE:C0:DF:0C:22:EB:CD:62:72:C5:75:E4
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143483.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a341::/32
Signature Algorithm: sha256WithRSAEncryption
85:cd:99:50:9e:d3:0c:4d:65:0e:d5:ad:7e:b7:57:67:22:e9:
0c:9e:e5:e5:8a:f7:08:ca:6f:b2:08:e3:2c:e6:e8:ba:77:fc:
18:c4:34:df:94:d0:50:fd:01:8a:9b:95:1b:cb:51:31:49:a3:
b0:b4:b7:46:ac:31:9c:b3:50:7a:bd:b8:ac:62:02:cd:44:f3:
fa:68:5d:80:22:4c:fb:3c:87:98:7f:4a:59:19:8e:75:d9:dd:
3e:6c:9d:3b:6d:4c:c9:71:1d:09:28:d7:8b:d2:90:56:4a:9d:
6a:3a:67:32:d5:00:ab:42:21:6a:1e:df:81:ce:fc:30:c7:77:
12:14:ab:08:11:df:33:9c:69:3f:8a:7c:62:81:a5:50:ef:2c:
f4:64:36:a5:49:31:16:47:4f:fb:fb:bc:83:fe:03:18:22:7e:
0c:d1:65:3b:79:f1:82:e4:71:dd:8b:0b:a4:fe:e1:33:14:7e:
f8:4d:ee:b8:bc:5a:45:1d:f5:e1:08:f8:26:ea:65:5d:a5:f6:
c8:0d:df:76:ec:1d:a1:19:10:ed:c3:b1:c1:6b:7d:de:63:08:
2d:97:c8:18:cc:e9:b6:4d:67:bd:65:ca:74:2f:84:06:f1:94:
d7:e5:e7:ba:9c:c1:a3:5a:bd:db:e9:f1:88:a0:37:0a:0a:e9:
81:14:70:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:49 2026 by rpki-client