Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143523.roa
File: AS143523.roa (raw, json)
Hash identifier: bYvHwAFBmXZUujUdaHcPRhIGnJngEW0KTandTyvqbfs=
Subject key identifier: C5:1B:14:94:09:AD:5F:AB:BB:C8:FD:DC:6F:EC:29:BA:2E:C0:46:A4
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4F1FE79411EBC2048716AB4E32EF73885AB21335
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143523.roa
Signing time: Tue 26 May 2026 02:35:21 +0000
ROA not before: Tue 26 May 2026 02:30:21 +0000
ROA not after: Tue 25 May 2027 02:35:21 +0000
asID: 143523
IP address blocks: 240a:a369::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:1f:e7:94:11:eb:c2:04:87:16:ab:4e:32:ef:73:88:5a:b2:13:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:21 2026 GMT
Not After : May 25 02:35:21 2027 GMT
Subject: CN=C51B149409AD5FABBBC8FDDC6FEC29BA2EC046A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:83:50:4a:8a:58:f6:5f:68:78:95:f9:a0:96:
67:01:0e:62:ed:7c:a6:dc:f7:9f:5c:3c:7f:70:4b:
bd:35:b1:80:63:80:94:cf:ff:d0:1c:2a:7a:4c:7c:
b7:45:54:4d:c1:ec:9e:f8:41:c1:86:f1:94:4c:61:
55:df:ef:e5:0d:20:74:75:e4:02:45:e1:43:96:ae:
96:49:02:f9:80:b2:a7:6f:37:03:55:ca:63:15:69:
75:9f:8d:04:67:3b:8d:0e:e9:2d:58:ca:be:ac:27:
b0:84:7d:d5:0b:31:48:9f:5d:4a:ee:a6:82:f6:a3:
d7:82:4b:30:08:bd:16:e9:2b:8b:9c:69:2e:5a:26:
b5:d3:cd:41:58:6b:47:70:7b:93:ef:f6:6d:3f:04:
b0:9e:45:0f:ae:b3:85:2c:cd:01:41:e1:f0:19:9c:
86:1c:c8:a0:47:da:bb:bc:3d:a7:02:12:fe:1f:99:
84:cf:5d:a8:ef:2d:64:78:76:87:4e:34:e1:17:08:
ab:40:ce:74:68:4a:ab:9a:c2:be:6d:8a:5f:8b:77:
b8:a9:90:13:c4:68:68:9f:24:fc:76:8f:53:c2:59:
ee:ae:55:c4:09:7b:d3:67:73:65:ab:9c:0f:c9:a5:
8d:78:14:a2:5d:76:59:ec:43:20:ff:93:76:8b:1c:
dc:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:1B:14:94:09:AD:5F:AB:BB:C8:FD:DC:6F:EC:29:BA:2E:C0:46:A4
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143523.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a369::/32
Signature Algorithm: sha256WithRSAEncryption
a5:f6:a0:20:b3:b7:fa:e2:5b:92:f1:46:9d:06:84:2e:0e:a2:
f0:f1:8a:7a:73:dd:99:f8:0d:55:3a:95:69:5a:a9:f6:b0:fe:
7c:bf:af:cf:57:10:58:28:3a:cf:a7:ca:ba:a1:4d:1f:ce:3e:
ae:5e:3d:ad:71:25:39:6d:f3:df:df:f2:5b:f9:e5:9f:4d:0a:
74:8c:e9:4b:03:5a:9a:ea:bf:17:67:45:fa:2e:37:5e:72:14:
2f:29:c2:1d:de:60:ca:ad:df:59:eb:a6:7b:ac:bc:7d:5e:74:
71:a3:f8:c9:c2:b4:f0:0f:73:d9:77:5d:3d:ea:41:80:21:4c:
67:07:ef:fb:7e:53:c2:99:bb:cc:be:ec:45:8a:61:88:82:cf:
b3:23:7f:9e:2d:91:a7:35:5f:8f:a1:18:4d:2a:1b:ab:c4:5d:
c9:72:6f:70:12:09:d6:b6:75:e7:ad:2a:9e:53:50:4d:43:f4:
e3:87:b9:8d:71:26:16:7b:c3:57:66:95:b5:42:ed:60:cd:ab:
b9:71:5f:b8:ab:cf:00:47:09:b1:9c:e3:4a:b3:ce:0c:0d:02:
d9:15:71:8f:fe:28:85:bc:76:bd:eb:b8:c8:21:ac:5f:34:8b:
64:78:e5:76:e2:97:23:97:f7:43:95:6f:64:51:69:02:1e:45:
8c:bf:7d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:10 2026 by rpki-client