Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143490.roa
File: AS143490.roa (raw, json)
Hash identifier: fdE4ZExqIJj115rOVbH+HZTk+gf1lCiTOQdkvP7PYBs=
Subject key identifier: 93:B2:5B:6B:82:A9:8E:6D:07:09:A4:C4:52:2D:1E:E5:77:B8:B7:6E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 24BA2A778F6F653B7E998EE2A81778FBF4F83D19
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143490.roa
Signing time: Fri 22 May 2026 07:24:29 +0000
ROA not before: Fri 22 May 2026 07:19:29 +0000
ROA not after: Fri 21 May 2027 07:24:29 +0000
asID: 143490
IP address blocks: 240a:a348::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:ba:2a:77:8f:6f:65:3b:7e:99:8e:e2:a8:17:78:fb:f4:f8:3d:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:29 2026 GMT
Not After : May 21 07:24:29 2027 GMT
Subject: CN=93B25B6B82A98E6D0709A4C4522D1EE577B8B76E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:25:7e:11:57:71:2e:8e:7b:35:76:45:ff:b5:
7f:f7:9a:96:5e:f6:21:d6:a4:70:66:1c:c1:5c:6b:
b3:78:7b:1b:bf:76:f1:bd:c5:04:ca:17:b3:d5:a3:
48:62:70:fb:30:fe:a4:7c:b3:b0:d5:50:c0:2c:90:
a8:1f:28:f0:11:2c:d1:c4:5c:d2:cf:1b:bc:95:55:
63:7e:bc:d7:c4:a2:61:57:20:1a:a4:27:00:59:97:
35:a6:44:01:76:2e:5a:1b:9a:cb:25:df:4d:fb:e4:
c1:08:01:22:89:0b:c5:06:73:67:33:a5:c5:ba:13:
42:49:34:49:5d:7e:e2:76:bd:0a:29:72:2d:51:bf:
f8:f8:4d:9e:a9:4a:60:58:79:d7:c7:1d:4c:1e:7d:
df:d0:da:5c:44:b0:82:c2:db:5e:aa:fe:4a:4e:de:
1b:b0:34:4d:84:cb:0c:51:2e:dd:97:df:7c:64:e0:
d8:89:39:f0:7e:91:16:27:f0:a4:0a:14:f0:b6:c1:
61:7c:cf:10:55:b7:c4:03:5b:f8:12:98:4f:48:c7:
1a:e5:63:51:ce:ac:f6:b9:5a:3d:b0:d3:44:b7:4a:
1b:8f:22:9f:01:02:2b:77:13:56:e3:4b:9e:1a:d9:
00:4c:65:ca:0f:ac:96:c6:f2:dd:5a:8d:19:1e:d5:
19:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B2:5B:6B:82:A9:8E:6D:07:09:A4:C4:52:2D:1E:E5:77:B8:B7:6E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143490.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a348::/32
Signature Algorithm: sha256WithRSAEncryption
3e:77:d4:89:17:3f:e6:3c:06:20:18:5a:42:46:8d:82:f2:ae:
9e:82:8f:28:4f:2e:67:87:3a:18:50:0f:85:88:76:ff:e7:0c:
a8:b3:36:f0:21:67:89:cd:1e:ef:ee:8e:cd:65:c4:9f:b3:cc:
c5:94:8d:0f:37:31:13:51:94:b9:0c:8e:e8:53:94:b0:36:b7:
51:25:8e:51:a3:51:1c:00:ed:59:5f:11:83:b3:42:4e:17:11:
e0:20:a7:90:39:99:3e:c9:53:74:7d:ab:ac:f2:c8:61:15:b0:
41:a0:6a:34:e3:72:f6:66:ee:0a:aa:e2:49:24:70:77:76:4e:
2b:c2:3a:1d:1c:f5:e1:73:92:81:20:d2:55:6a:56:20:99:10:
fb:ab:17:26:97:fa:4a:d3:01:e0:d7:56:3d:b7:1a:72:e0:c2:
88:12:b3:65:d7:f9:a6:b7:c5:37:96:dd:cf:5f:77:e5:17:d9:
bb:9b:07:dc:74:3b:48:1a:47:71:4b:68:79:7e:26:7c:04:7f:
ba:58:f6:09:b0:4d:a7:7b:08:f2:3f:43:b8:9f:31:be:a9:2b:
f4:5a:8f:29:6f:49:51:f5:40:c6:70:ff:8b:ca:fe:34:75:24:
4b:5d:4c:b8:77:f1:2a:c6:6c:b8:33:a4:8f:85:49:53:7b:a9:
4a:a1:b1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:25 2026 by rpki-client