Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143556.roa
File: AS143556.roa (raw, json)
Hash identifier: 9IB4+w9yDD8AWyVVsRgMwGBtWlZjUuNJne2AHhdaDVM=
Subject key identifier: 8A:52:F0:73:71:37:2B:7E:66:9F:59:12:F5:82:6D:BB:62:59:03:76
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 501D71B618C7E50A9966B0F6174B08E2EEE06DAF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143556.roa
Signing time: Fri 22 May 2026 01:50:14 +0000
ROA not before: Fri 22 May 2026 01:45:14 +0000
ROA not after: Fri 21 May 2027 01:50:14 +0000
asID: 143556
IP address blocks: 240a:a38a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:1d:71:b6:18:c7:e5:0a:99:66:b0:f6:17:4b:08:e2:ee:e0:6d:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:14 2026 GMT
Not After : May 21 01:50:14 2027 GMT
Subject: CN=8A52F07371372B7E669F5912F5826DBB62590376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1e:59:c3:65:84:35:00:12:38:7e:c7:c9:f8:
4e:4e:e4:ab:ae:d6:da:7f:46:45:7b:74:68:99:90:
eb:a5:9f:14:f6:43:f5:e5:cb:59:19:71:9e:b5:08:
bb:c1:2d:c8:60:8e:75:ef:b5:4c:33:06:7e:33:18:
07:f2:fb:af:89:a9:30:85:38:27:00:cf:87:3e:7a:
c3:d6:df:79:b3:f7:91:2e:c1:08:96:0b:42:e4:73:
f5:fd:36:ee:c8:fa:64:54:ed:79:03:a4:a6:1b:d1:
7d:49:cf:a9:5e:04:eb:9f:c1:86:e5:63:e4:6d:44:
83:ae:38:67:2e:ab:e7:0a:f9:fe:eb:65:da:d2:c4:
94:9f:fc:52:b1:ee:95:6a:e2:3e:4b:d6:4c:90:9a:
aa:b3:3b:81:58:f8:96:3c:3c:17:70:fe:81:4a:88:
f1:2f:95:8a:07:8f:67:8b:c0:f8:be:e4:a3:d8:fc:
83:61:fb:72:3d:c6:2b:3e:f6:a0:55:93:3a:1b:1a:
47:1b:d6:21:cc:bc:e8:bd:f9:8d:a0:43:9f:6e:15:
02:07:bb:73:be:ca:85:8f:b7:8f:cf:a0:96:62:e6:
65:c3:00:c8:51:60:e6:dc:80:6c:fd:24:cc:e6:e1:
37:63:f6:af:15:fb:3d:a9:e3:6f:6a:98:85:fc:b4:
63:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:52:F0:73:71:37:2B:7E:66:9F:59:12:F5:82:6D:BB:62:59:03:76
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143556.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a38a::/32
Signature Algorithm: sha256WithRSAEncryption
ae:b7:9f:88:4e:d0:19:9a:c2:6f:03:ea:f9:09:ea:fc:06:12:
61:70:e9:ad:7d:db:de:c7:92:46:3f:3a:bf:b9:2b:ad:2e:29:
26:5f:1e:98:7b:33:90:b6:52:d0:14:ba:97:a3:29:42:36:58:
2b:93:ed:e6:a5:54:b4:de:81:55:6e:31:18:1b:f1:91:1b:86:
ad:cc:5e:b9:8f:d1:b3:7b:f1:0b:12:3b:44:50:76:c2:31:e2:
2b:46:8b:ac:38:95:9a:74:fa:4b:60:69:7b:af:4e:9b:4d:79:
2a:ed:ca:2f:b0:d4:cd:ff:8b:04:cf:5b:96:b7:f6:d1:54:5b:
19:4f:0f:50:26:65:01:a7:c8:18:ba:09:44:31:09:28:b5:31:
b6:99:3a:00:a4:d1:e8:fb:17:e2:97:76:0f:44:e7:f4:64:37:
00:6b:b7:cb:76:ab:4a:02:8d:a4:bd:99:7b:40:c2:22:5a:62:
0c:47:8f:b8:c5:20:6e:80:62:d3:8c:c4:11:de:b9:e2:17:8a:
8b:8d:94:8b:30:ca:3c:bb:a0:fd:e2:26:37:f1:51:9b:b4:60:
fc:ab:38:a7:8e:6d:f5:da:4e:90:60:78:fb:49:b9:47:fe:42:
f6:26:40:22:6b:5c:cf:06:5e:5f:22:55:83:57:8b:54:4b:50:
b0:9e:65:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:18 2026 by rpki-client