Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143553.roa
File: AS143553.roa (raw, json)
Hash identifier: ruzT2HpN+Xrm017Z6x8mLFquVoEGpCzcYrb6wpQo5E0=
Subject key identifier: 36:DD:4D:A5:11:3D:81:6C:C1:3B:9E:E0:58:44:45:4F:74:97:E1:D5
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2E73FCBEDB89A2BD1D9034129F5102EFC28D9537
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143553.roa
Signing time: Fri 22 May 2026 04:08:08 +0000
ROA not before: Fri 22 May 2026 04:03:08 +0000
ROA not after: Fri 21 May 2027 04:08:08 +0000
asID: 143553
IP address blocks: 240a:a387::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:73:fc:be:db:89:a2:bd:1d:90:34:12:9f:51:02:ef:c2:8d:95:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:08 2026 GMT
Not After : May 21 04:08:08 2027 GMT
Subject: CN=36DD4DA5113D816CC13B9EE05844454F7497E1D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:20:d7:90:cc:3e:84:b7:12:56:77:4c:ea:71:
b1:6b:72:6c:a7:c7:f5:bb:91:e1:64:db:54:8f:df:
cb:03:f6:72:00:07:ae:0d:84:40:ff:24:90:5e:78:
c3:44:dc:9c:5a:7f:b2:a6:b3:85:0c:ee:16:a3:7b:
0b:31:f1:d9:ab:bb:d5:91:82:3c:b1:2e:03:88:8a:
e9:bc:50:b4:c2:37:33:b3:a3:c4:95:35:b2:6f:ee:
44:83:cc:e2:19:81:5e:d9:7c:ba:8c:16:49:df:ff:
02:44:4d:a1:f3:38:a7:5f:84:f1:2a:47:02:fc:03:
4c:23:45:17:cf:b4:e9:46:74:3d:19:7e:f4:14:ce:
23:bf:09:9a:b3:87:07:24:4b:98:06:04:ea:df:68:
8b:9c:c7:af:18:a1:26:10:b4:25:6b:66:b6:40:50:
0d:60:1e:36:bd:12:1f:10:71:8a:fb:97:98:e1:02:
4c:e8:e8:a6:00:4a:83:c1:11:65:35:06:90:5d:b6:
24:3b:da:62:62:2f:c0:36:ea:06:23:60:91:c7:d3:
9d:58:1d:f1:90:97:f4:fd:17:c0:bc:71:8e:67:1c:
4a:10:86:ac:59:b3:13:83:e1:67:5d:db:5f:a8:2a:
26:59:15:b7:d3:ac:01:69:25:af:59:2a:79:08:e3:
47:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:DD:4D:A5:11:3D:81:6C:C1:3B:9E:E0:58:44:45:4F:74:97:E1:D5
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143553.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a387::/32
Signature Algorithm: sha256WithRSAEncryption
80:40:24:f7:74:51:ca:9f:79:0c:df:89:fe:df:64:85:b9:64:
e2:28:40:b8:de:f9:59:e6:13:7f:86:4c:cd:64:55:27:e4:45:
cb:0e:b0:13:0f:cc:81:60:09:c2:d1:2a:9e:8f:b0:f3:75:5c:
fa:54:9a:29:45:34:50:b2:71:8d:08:64:08:93:76:4a:d0:bf:
2b:3e:54:21:79:a6:4c:da:a3:eb:ea:d2:a4:70:2d:7d:ce:94:
77:1d:8e:fc:ab:6c:4f:c5:e2:10:ab:6a:36:7e:b6:27:de:76:
b4:16:42:bb:12:53:5b:fd:eb:20:52:7a:d1:56:da:61:ad:e0:
e6:d8:d1:89:a9:f9:7c:4b:5b:b4:c2:a5:7d:6f:4f:17:77:e5:
8d:61:ff:67:c7:75:82:35:3a:25:c1:91:8a:65:07:97:13:db:
f8:2e:22:f8:6a:a8:2a:71:80:92:b5:77:91:e6:02:d9:3a:6a:
5f:56:f1:5b:3a:94:ff:82:71:4b:cb:42:83:7d:2d:b6:47:db:
75:2f:c3:41:87:0c:be:af:81:3b:6e:b0:03:fc:12:27:dd:e4:
0a:dd:89:03:69:92:70:98:10:a2:84:a7:5a:c0:db:38:00:78:
b7:2b:23:5a:1c:f6:8c:ef:2f:84:f6:62:f6:34:5e:df:be:74:
9a:7d:0f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:01 2026 by rpki-client