Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143563.roa
File: AS143563.roa (raw, json)
Hash identifier: U1Dhp4IIU3whCQi9cN6En807L/Til6dViBp/sG+2oqA=
Subject key identifier: DE:85:84:8D:B1:8F:4B:BF:AC:40:34:AC:21:66:4F:83:5D:95:77:E5
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1BBA36D62ACED1CFEEB7610C2A3740D5CE129B0B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143563.roa
Signing time: Tue 26 May 2026 02:35:16 +0000
ROA not before: Tue 26 May 2026 02:30:16 +0000
ROA not after: Tue 25 May 2027 02:35:16 +0000
asID: 143563
IP address blocks: 240a:a391::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:ba:36:d6:2a:ce:d1:cf:ee:b7:61:0c:2a:37:40:d5:ce:12:9b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:16 2026 GMT
Not After : May 25 02:35:16 2027 GMT
Subject: CN=DE85848DB18F4BBFAC4034AC21664F835D9577E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:1a:b6:a6:db:af:9e:1c:97:b3:50:37:c9:b9:
17:6e:d0:93:0f:d6:ce:f2:58:10:07:06:1a:6f:26:
ab:83:b2:19:3e:97:ad:7c:10:aa:cf:a2:98:84:6a:
9d:9d:79:b5:d6:92:61:76:1a:95:f8:a2:14:4d:52:
2d:c2:92:b9:6c:f0:9c:05:9f:b9:83:07:b1:41:27:
a0:40:ac:d1:4f:60:9f:db:c8:7a:6a:ea:a1:ff:a1:
23:43:95:6f:11:d0:92:12:29:9a:26:ce:9c:a2:9d:
1e:84:0e:68:e2:6a:38:65:d4:a4:82:bb:d0:b4:e4:
d9:0e:39:4c:04:5b:6f:df:92:38:6c:8d:c0:08:58:
4a:a9:59:03:fa:9d:79:a4:0e:0f:f7:51:04:fd:df:
b8:33:91:06:57:ea:59:0d:ec:dd:78:05:fb:c7:c0:
b5:ec:60:39:ac:d6:33:d3:7c:7c:76:fb:5c:bc:5a:
bf:67:64:c4:43:8a:9f:2c:3a:93:2f:8a:11:24:87:
3c:5b:fc:4e:bf:25:a8:9c:00:a8:4a:69:f2:60:65:
e4:d2:8f:43:04:30:68:8f:59:b2:af:02:67:aa:12:
35:0d:f5:ef:c1:1c:9c:97:ef:01:1b:73:55:79:9d:
a2:7a:01:69:ab:eb:41:6d:30:67:81:99:37:4d:da:
0b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:85:84:8D:B1:8F:4B:BF:AC:40:34:AC:21:66:4F:83:5D:95:77:E5
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143563.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a391::/32
Signature Algorithm: sha256WithRSAEncryption
99:e4:47:a3:ac:bc:1a:5a:88:3c:7b:ad:9b:b3:a6:74:21:12:
c3:92:af:26:b6:ac:df:bf:3f:27:5b:75:02:bf:cc:23:67:40:
58:ce:39:df:c0:d2:7c:92:c0:15:05:fe:c1:8b:ea:60:b6:60:
c3:1d:0e:e6:c7:62:a9:3e:01:f2:56:86:6a:dd:a2:e6:4c:fa:
d6:ce:68:69:b7:53:be:69:a5:94:04:b5:3e:f9:24:b1:95:1b:
3c:4e:c5:62:b4:fe:60:df:28:27:1b:a7:50:29:90:87:08:26:
4d:68:c1:eb:a7:68:95:68:c0:ad:85:be:0c:c9:e6:1a:dd:f6:
01:2c:70:42:45:ca:b2:e1:b5:2f:99:9b:ad:c4:33:72:7c:85:
a4:c4:b2:97:72:64:51:44:9c:32:a1:d1:a3:68:ba:0d:1f:c2:
9c:ca:5f:4a:9e:99:fe:3f:a2:df:df:02:3a:a1:23:da:96:b3:
44:c3:18:1e:0a:9a:27:5a:9e:3e:8c:23:fe:3e:03:bb:30:b1:
65:97:94:79:6a:73:b2:63:cb:5f:8a:c7:ac:42:ff:73:92:a4:
9b:76:ed:e1:0c:f0:1a:65:81:f7:6e:cf:f6:4e:6e:7b:cf:8d:
f6:f3:ad:bc:37:f1:e8:48:52:ba:81:ef:75:66:78:c1:19:49:
ac:3c:7d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:04 2026 by rpki-client