Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143549.roa
File: AS143549.roa (raw, json)
Hash identifier: FykY4v83Zguklvk1moJDBavDPCAqd0tGhjPtEIpeoAI=
Subject key identifier: 89:A0:4E:67:6C:6D:E9:FE:A4:69:68:2A:E1:F2:EB:C8:A4:4F:84:61
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0A85B251004CCD40903A87014D50AEF9410464A3
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143549.roa
Signing time: Fri 22 May 2026 02:47:52 +0000
ROA not before: Fri 22 May 2026 02:42:52 +0000
ROA not after: Fri 21 May 2027 02:47:52 +0000
asID: 143549
IP address blocks: 240a:a383::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:85:b2:51:00:4c:cd:40:90:3a:87:01:4d:50:ae:f9:41:04:64:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:52 2026 GMT
Not After : May 21 02:47:52 2027 GMT
Subject: CN=89A04E676C6DE9FEA469682AE1F2EBC8A44F8461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:76:12:c5:65:c3:9b:34:0f:8c:29:37:b2:95:
83:3e:e6:e3:f7:45:19:c6:b7:fe:9e:86:bb:01:d1:
68:aa:ad:05:a7:db:77:b7:1d:53:20:5b:c4:9e:ce:
6d:72:20:ca:10:af:60:5e:a8:41:66:a3:d0:7c:78:
0a:04:85:74:ce:fa:21:6b:60:58:96:4a:19:3d:20:
7e:98:87:1b:49:af:84:24:ac:c2:83:90:92:66:50:
8c:5c:a2:ea:a0:38:30:9d:ca:1b:40:62:9e:ba:97:
17:83:77:7b:3a:30:f6:6e:94:f3:cd:15:87:5f:bf:
7d:a6:bc:76:60:a7:9f:a6:a7:08:a5:d2:8d:1d:54:
69:3e:07:bd:08:5d:8b:fb:ab:e1:3d:e1:f1:56:82:
75:81:12:a6:cf:5f:a0:de:46:e7:cf:df:e1:5f:06:
3c:3a:5f:86:6f:12:7e:f2:49:54:b5:e8:91:ee:75:
f4:35:ae:6f:f8:0f:93:4a:7b:0c:c7:c1:eb:91:3f:
03:5d:86:3d:97:2c:c9:9a:4a:6e:94:ee:07:29:bb:
2c:45:ee:d6:32:ad:42:9b:c4:11:ed:72:9c:15:bd:
9c:ed:03:f6:1c:5a:99:6d:b3:fa:8a:52:24:ee:c1:
e1:c5:01:93:e3:a0:d7:92:96:e5:2d:f3:38:05:9d:
72:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A0:4E:67:6C:6D:E9:FE:A4:69:68:2A:E1:F2:EB:C8:A4:4F:84:61
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143549.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a383::/32
Signature Algorithm: sha256WithRSAEncryption
5d:34:57:b2:c9:0f:8c:a1:7e:a1:05:d8:2b:bf:b1:76:d9:58:
2e:e5:cd:5b:98:9e:86:37:49:d2:e8:7d:9b:a1:6c:59:f8:20:
28:c3:23:2a:da:51:82:17:40:fd:02:f2:5e:03:84:3a:84:b9:
19:1b:cc:85:be:19:43:7c:5f:7e:23:17:b3:8b:9b:62:cc:f2:
e7:f6:69:05:cf:ca:fd:49:df:7d:87:57:44:dc:30:8c:f0:cc:
b9:7a:75:c1:ce:49:0c:35:41:3f:c6:b8:b9:c5:08:f2:3e:fb:
52:76:0a:5a:fe:9e:32:c0:e0:b7:47:3a:0a:87:3a:99:e7:a3:
4b:71:96:9b:39:63:1f:f5:c6:70:a5:ba:a7:33:ca:2c:2c:e7:
1e:3a:27:fd:d6:48:a2:9f:48:20:44:47:3b:b5:48:f6:4a:9f:
3c:ec:3e:36:ad:75:5f:49:20:64:33:df:3b:84:d3:45:a8:09:
ec:c7:cf:45:c0:16:34:29:9c:d1:a5:cb:5c:12:80:4b:93:77:
30:ac:90:8e:8a:10:4d:96:89:7c:57:32:ea:26:63:1c:4d:27:
8b:ee:86:9a:3b:00:c0:94:9d:19:ca:5f:14:e4:e7:dd:6c:62:
e4:90:ed:4c:b2:05:08:8f:a3:f9:33:63:11:c6:3e:fc:4f:05:
3c:08:98:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:59 2026 by rpki-client