Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143511.roa
File: AS143511.roa (raw, json)
Hash identifier: 7PHDoWgRQ7zyxHtINzeV5x1y2BDRNHH5dfa48E0eCwg=
Subject key identifier: B5:9E:CC:5A:B5:A4:DE:10:E3:BD:4A:E3:A7:ED:05:0A:D0:39:D4:46
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7835CF3D3648A18A76EB78B5EE29922E0E8FB0B2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143511.roa
Signing time: Tue 26 May 2026 01:13:13 +0000
ROA not before: Tue 26 May 2026 01:08:13 +0000
ROA not after: Tue 25 May 2027 01:13:13 +0000
asID: 143511
IP address blocks: 240a:a35d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:35:cf:3d:36:48:a1:8a:76:eb:78:b5:ee:29:92:2e:0e:8f:b0:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:13 2026 GMT
Not After : May 25 01:13:13 2027 GMT
Subject: CN=B59ECC5AB5A4DE10E3BD4AE3A7ED050AD039D446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:23:4d:6e:45:93:89:93:ea:e0:de:99:ff:e6:
9b:b4:6e:b5:5e:0e:c9:18:5c:fd:20:a8:2b:81:8d:
04:fb:de:cd:41:32:3f:30:5b:d0:01:bf:02:e3:4a:
bb:1f:00:9d:bc:88:60:d3:55:8c:d6:80:bb:c2:9e:
05:0a:d0:0c:49:47:8a:d1:2d:cc:a6:28:93:3f:f3:
bf:ed:80:e6:bd:9a:d6:1a:08:49:65:23:e2:c4:83:
eb:00:26:a0:8e:aa:6c:ef:09:7d:b2:63:47:8c:41:
ef:83:b2:63:a1:22:ab:49:bd:f1:51:34:cb:46:6e:
ad:36:29:93:f8:bd:56:5a:5e:db:e7:c4:ca:7e:d0:
8f:be:71:e4:58:77:0b:b5:9a:85:5e:0e:6f:8c:b1:
e7:d5:09:35:0b:fd:97:16:bf:6d:f4:f8:05:0b:6c:
9e:7c:dc:63:ec:d4:6e:9b:f5:36:3b:98:d1:98:d6:
2d:f9:33:0e:50:fe:3a:c7:97:de:b2:64:1a:98:ba:
2a:ae:16:1c:a2:a4:f4:72:eb:ee:68:08:1c:6d:13:
71:ee:e0:7e:89:09:5f:e6:46:ec:e7:8d:5a:a4:1e:
17:31:33:ef:38:5a:a5:41:9a:41:03:06:3d:1a:af:
1e:93:72:7a:c5:7b:10:fb:ed:d5:66:80:ac:c5:21:
e5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:9E:CC:5A:B5:A4:DE:10:E3:BD:4A:E3:A7:ED:05:0A:D0:39:D4:46
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143511.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a35d::/32
Signature Algorithm: sha256WithRSAEncryption
7a:b3:2e:8b:89:73:a4:7a:6a:c2:4b:30:7b:67:7f:04:74:99:
a5:61:71:1f:2d:36:a0:eb:13:fc:95:f5:31:d2:be:f7:5a:53:
de:54:64:3c:c4:50:b4:e0:e6:3d:31:8c:af:c3:6c:ce:1c:41:
4e:e0:b4:2d:ef:10:8d:f3:cf:53:db:8e:e1:58:ca:45:2b:8c:
11:ba:6a:bc:58:81:a9:74:e0:39:d6:5b:2e:71:bb:35:e9:bd:
0c:c1:60:0a:3a:00:83:55:b4:9f:12:bd:52:58:e3:20:e7:e9:
f4:4d:16:c5:86:a9:3c:79:81:3d:65:87:8b:87:a6:73:19:b6:
f1:61:a4:cd:fc:96:dc:6c:7e:dc:1d:42:6b:f5:1b:d7:89:7d:
a1:6e:b7:5d:92:47:fc:92:3e:0e:e0:10:f7:f2:62:5b:1e:4f:
79:b2:f3:c3:39:b7:05:ea:12:e3:39:60:75:5f:da:3a:bb:48:
48:b2:de:01:7e:84:b5:c5:9f:ba:a2:6f:4f:4c:36:1a:06:1d:
1b:89:60:99:f7:91:d7:2d:c5:c3:15:99:3f:10:30:60:47:bd:
8c:cc:01:b1:b5:d5:01:7f:5e:b9:2f:3d:10:7b:4e:0d:10:27:
32:e7:86:60:6a:8d:8e:ed:f9:4a:e4:a3:1d:c3:6c:fa:5c:b6:
bd:9b:28:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:17 2026 by rpki-client