Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143550.roa
File: AS143550.roa (raw, json)
Hash identifier: qVlh1ZnkzE/Ct2MfS2m35qeuMMdvtY4vMM7Fmw20EoI=
Subject key identifier: DF:1B:A8:49:BB:4C:38:1A:34:0D:57:CA:05:FC:A3:A3:28:F0:6A:E7
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 48F4A09ED101CC96E98FC80B6590DDA9554F35A7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143550.roa
Signing time: Fri 22 May 2026 06:28:02 +0000
ROA not before: Fri 22 May 2026 06:23:02 +0000
ROA not after: Fri 21 May 2027 06:28:02 +0000
asID: 143550
IP address blocks: 240a:a384::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:f4:a0:9e:d1:01:cc:96:e9:8f:c8:0b:65:90:dd:a9:55:4f:35:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:23:02 2026 GMT
Not After : May 21 06:28:02 2027 GMT
Subject: CN=DF1BA849BB4C381A340D57CA05FCA3A328F06AE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:57:84:0a:a8:dc:ef:fa:b4:e7:d2:d8:86:2f:
5d:d6:d0:8a:65:d8:2b:c2:16:5a:ed:b3:f0:31:8e:
e0:d4:7d:a3:aa:c9:2f:ba:05:d1:48:9a:08:34:af:
fd:52:4b:e0:e5:2a:d8:6d:7a:c3:6d:63:73:ed:f7:
b2:b3:6c:f5:07:86:38:5c:90:9a:e8:6d:d7:ef:d1:
1c:48:e7:9d:63:d4:7c:73:5d:e3:86:ad:0f:3c:ba:
e1:29:30:3a:e7:33:39:6c:fa:d3:67:89:11:03:34:
09:b2:3e:12:74:06:fc:29:ba:2e:35:af:88:37:89:
38:64:a3:c8:c8:e9:33:cc:7c:bf:67:2c:75:27:04:
0b:5b:46:de:e2:7b:04:48:d2:da:7a:1d:37:64:b5:
b0:f0:0c:fe:84:0d:08:49:55:ab:40:22:65:3d:fe:
df:e7:38:ff:7f:2a:00:49:ea:e1:02:8e:93:9f:08:
90:b2:fa:0e:0e:96:d9:89:00:30:04:7c:15:e7:e1:
a4:a7:f8:37:3c:94:01:84:e6:87:ef:05:a7:80:e7:
b8:eb:53:44:05:b7:df:d0:be:9d:a8:2f:3a:5c:c7:
8a:a8:0a:91:8d:60:5f:55:40:1e:51:92:b3:82:92:
18:bc:77:0c:63:39:64:08:85:63:5d:10:55:84:cc:
e5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:1B:A8:49:BB:4C:38:1A:34:0D:57:CA:05:FC:A3:A3:28:F0:6A:E7
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143550.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a384::/32
Signature Algorithm: sha256WithRSAEncryption
ac:f6:8b:ca:d6:45:af:9f:6d:77:b6:d6:ac:d8:6e:39:bb:15:
da:b9:26:ed:53:a3:d9:f0:69:3e:69:8b:8d:59:d0:af:69:23:
1b:9d:53:c3:6a:b4:58:81:1c:6c:11:8c:b2:1f:42:74:4a:58:
3d:56:f5:f0:50:a5:a2:72:79:7c:30:86:33:ff:15:04:c3:5b:
e4:3d:b0:dc:be:60:db:68:84:69:81:8b:75:74:cb:b4:5c:59:
9d:ca:c4:e9:9f:80:03:a2:7e:1c:83:11:3f:5f:32:c2:bb:15:
66:09:78:73:6b:e7:41:10:27:d5:38:38:0d:a0:1d:f1:dd:40:
f2:75:fd:88:c7:9a:48:5c:05:22:30:d6:53:66:30:9b:54:d9:
61:ad:5f:9d:6e:75:dd:ce:e9:29:62:88:12:9b:af:f5:0c:b0:
60:d9:97:e4:e5:f6:5e:c7:40:0e:62:39:ae:d9:79:19:ed:c1:
9c:b4:ec:88:b5:97:ce:b8:27:f1:25:72:2f:99:a3:21:56:2d:
a2:a8:a0:66:9e:0f:40:a6:ec:50:bc:fc:7f:69:ab:5f:9b:2b:
58:f0:30:88:11:0b:b2:4d:4f:74:b8:99:31:55:3d:2e:50:d8:
30:87:d6:ff:c8:98:b4:d7:02:ec:0f:12:2d:e3:3d:79:2e:a6:
93:30:8a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:01 2026 by rpki-client