Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143493.roa
File: AS143493.roa (raw, json)
Hash identifier: fVs7OWMA6SYNlRPMsZ4I4OOc7MdblhNVmHFzo2CCDTQ=
Subject key identifier: 65:CC:2C:17:42:09:D5:B4:BA:ED:3D:97:6C:3E:0C:B1:8B:30:CA:17
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0435BFA33F7EB9326647DE5D5C07F2FDB6BDF061
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143493.roa
Signing time: Tue 26 May 2026 02:35:21 +0000
ROA not before: Tue 26 May 2026 02:30:21 +0000
ROA not after: Tue 25 May 2027 02:35:21 +0000
asID: 143493
IP address blocks: 240a:a34b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:35:bf:a3:3f:7e:b9:32:66:47:de:5d:5c:07:f2:fd:b6:bd:f0:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:21 2026 GMT
Not After : May 25 02:35:21 2027 GMT
Subject: CN=65CC2C174209D5B4BAED3D976C3E0CB18B30CA17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:96:34:b8:fb:51:c2:1c:50:00:ba:da:29:c8:
e7:55:c3:d6:84:43:9f:9d:37:34:99:0c:4b:6a:35:
3f:ed:14:ae:10:4d:f2:a2:34:8e:01:84:89:be:48:
0c:a9:41:12:4e:ba:50:05:23:36:ff:56:46:63:55:
25:fc:28:61:65:ed:1b:2c:7d:ec:8b:37:e0:1b:3c:
23:7c:6c:06:3d:54:d1:bc:d3:a5:d3:43:22:a0:2d:
71:45:ac:c1:8d:1e:de:e2:36:78:2b:7e:19:f7:b4:
da:ec:90:43:46:5f:d5:16:f3:d8:94:6b:a4:c6:2d:
e0:dd:18:8b:89:a2:53:76:62:4c:32:7c:a2:12:61:
17:86:16:93:e5:df:a0:2e:0e:64:b1:ee:3d:66:f9:
21:f6:ea:d2:be:a3:ab:c9:f4:75:ac:aa:f4:75:3c:
9e:a5:fb:45:59:99:f5:c0:aa:ac:26:f6:88:cc:3e:
f7:72:37:6c:10:91:04:f6:c2:d3:24:dc:21:94:e8:
50:e5:d8:af:e1:5f:7b:0f:32:fa:e2:b5:f5:e1:a6:
b0:6f:16:dc:2f:fb:14:5a:1f:8c:c1:31:83:98:e4:
d2:e8:18:bb:15:53:d3:c0:b1:bb:17:b9:80:9c:e2:
2e:ae:ee:c8:4d:c0:97:c5:98:a5:20:5f:85:af:78:
10:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:CC:2C:17:42:09:D5:B4:BA:ED:3D:97:6C:3E:0C:B1:8B:30:CA:17
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143493.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a34b::/32
Signature Algorithm: sha256WithRSAEncryption
a1:32:b1:0b:af:c8:45:3b:c3:50:58:5d:c2:0b:94:64:e2:2c:
85:a6:cf:b2:c6:10:05:78:a7:e6:a9:5d:96:d2:8f:05:49:c9:
93:97:7c:5b:d3:01:4c:dc:21:7e:27:18:92:eb:fa:bf:f2:87:
10:e1:7d:7d:69:a2:9c:20:97:34:a8:f0:02:28:cc:8b:4d:e3:
d7:99:73:d7:7b:1a:9d:65:4f:67:77:20:16:b7:2f:c1:20:47:
9b:23:bc:92:bf:44:74:51:c3:b1:e7:1e:09:41:6c:b4:b2:c3:
97:9a:30:ef:8d:a4:69:55:6f:e5:27:11:9a:32:57:ca:95:80:
4e:ad:eb:91:1e:69:43:65:18:e6:16:8d:33:64:a1:2e:4a:3f:
3a:8c:39:ec:2a:c2:da:c7:bb:6f:f6:e7:24:a4:18:d4:51:9a:
b8:b6:8d:b3:6f:e3:dd:04:52:3c:b6:a6:6b:2b:82:1a:a5:8b:
f0:cf:86:7d:27:63:04:51:73:ec:ac:6a:49:c3:a7:1a:ce:f8:
14:b5:85:50:9c:7c:8d:ae:87:f8:b2:36:aa:bc:e9:eb:70:33:
40:2e:a3:2b:e7:d6:2c:08:0a:80:ff:91:a5:d1:f5:0d:f9:a7:
61:8a:29:b6:36:ce:81:4d:12:65:d3:5e:4d:b8:e6:dc:36:1c:
de:47:e8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:45 2026 by rpki-client