Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143548.roa
File: AS143548.roa (raw, json)
Hash identifier: VG3L6cazmMmDQB+jQiG3seAuo7riBxaGmQB9cFYlL1A=
Subject key identifier: 3A:34:1F:5D:F8:9C:4D:89:9D:0D:13:B7:07:42:B2:31:B7:BE:E5:97
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 32998ED3417AAAC8F0365BC346FA2E0F4ADAD2A8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143548.roa
Signing time: Tue 26 May 2026 03:16:58 +0000
ROA not before: Tue 26 May 2026 03:11:58 +0000
ROA not after: Tue 25 May 2027 03:16:58 +0000
asID: 143548
IP address blocks: 240a:a382::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:99:8e:d3:41:7a:aa:c8:f0:36:5b:c3:46:fa:2e:0f:4a:da:d2:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:11:58 2026 GMT
Not After : May 25 03:16:58 2027 GMT
Subject: CN=3A341F5DF89C4D899D0D13B70742B231B7BEE597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:73:a8:0d:48:67:29:86:61:07:98:cc:f4:71:
cc:f3:07:16:a4:16:9d:26:cd:a7:2b:11:3a:93:d0:
4e:38:6e:1e:63:ae:5e:1c:68:37:c9:18:7b:06:77:
4d:89:fc:f1:17:77:bb:ac:bf:6d:71:e5:d2:37:27:
38:9a:e2:ac:84:98:9c:cc:d5:bb:9c:7e:09:fc:2c:
ec:9e:53:41:f1:3e:2e:17:c1:cd:2d:ef:86:c0:72:
02:2a:a8:07:a1:60:87:5a:7d:ad:a4:bc:9d:1d:c6:
10:e8:df:b9:c8:92:e1:aa:a9:50:2c:fb:dd:19:d7:
1a:2b:14:d2:a2:7d:1d:18:12:c2:a4:d5:5e:12:90:
56:1d:aa:b7:5e:28:96:55:ed:35:df:3d:f5:ac:b1:
7f:bc:99:c3:87:71:a7:34:85:21:f0:fd:5c:2d:f2:
92:4c:c8:2e:1e:59:d5:d1:c7:5a:78:f7:04:9e:11:
64:c4:9d:0c:f0:cc:0f:68:c3:05:f4:51:01:ea:f5:
4e:3e:c0:6a:3d:81:72:00:32:a8:98:3d:45:7d:1a:
b5:24:07:fd:24:9c:7e:e1:69:77:2e:07:22:b8:67:
26:04:33:ce:a8:c0:93:70:5d:54:ca:59:18:9b:69:
c6:66:24:12:28:68:bc:4f:ff:98:39:24:d5:81:01:
b4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:34:1F:5D:F8:9C:4D:89:9D:0D:13:B7:07:42:B2:31:B7:BE:E5:97
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143548.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a382::/32
Signature Algorithm: sha256WithRSAEncryption
46:ce:d0:76:71:38:df:d2:fb:72:90:82:a4:af:03:dc:dc:3e:
77:2b:6a:dd:bd:fe:34:13:2a:e7:01:2f:86:18:9e:16:f1:e3:
a7:fc:ff:22:91:78:9c:ab:61:69:5f:09:34:7b:5a:ad:a1:0a:
7b:cc:2e:0f:cb:10:38:7b:4f:ad:bc:0f:54:88:fd:f1:63:14:
d2:d8:84:d9:7a:5b:d2:ab:2d:7e:44:c0:74:f9:df:fa:60:f7:
d7:ae:0b:96:2e:96:59:c0:87:b1:1b:7b:d9:c5:14:be:03:8b:
22:a6:2a:86:35:b0:dc:be:92:c1:e0:34:b8:01:31:74:c6:42:
bc:f4:2f:0d:fb:80:2a:90:99:88:76:6c:80:82:36:f6:76:91:
46:b3:65:b6:d8:01:9e:bf:d2:dc:70:07:b2:2b:45:a3:07:06:
2f:fe:7e:cb:d1:67:fb:56:9f:a9:53:42:63:b0:98:28:2a:e2:
23:df:c8:bf:f1:45:7c:de:45:dc:5a:df:0c:05:8f:c8:9f:76:
f2:23:f8:de:b7:ab:56:e6:53:c0:dd:fe:cd:d4:b6:aa:cc:a6:
96:4b:7d:c1:09:73:2c:36:59:1c:3f:71:e3:7f:7a:30:2c:54:
1e:33:b3:62:87:80:3a:24:9a:d8:65:8e:10:59:1e:62:41:d3:
08:e8:6b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:02 2026 by rpki-client