Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143566.roa
File: AS143566.roa (raw, json)
Hash identifier: cFGEzMYypyoA/flNF71JBrRAnG2gP/p9VAprU0dxtjQ=
Subject key identifier: E1:E6:85:EE:DF:4C:8B:E3:90:C9:1F:63:01:A9:48:79:E7:E9:59:A7
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 21FB3CC86A0B0B3DEBF703F78BE4DBA5A9395DE8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143566.roa
Signing time: Fri 22 May 2026 01:50:40 +0000
ROA not before: Fri 22 May 2026 01:45:40 +0000
ROA not after: Fri 21 May 2027 01:50:40 +0000
asID: 143566
IP address blocks: 240a:a394::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:fb:3c:c8:6a:0b:0b:3d:eb:f7:03:f7:8b:e4:db:a5:a9:39:5d:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:40 2026 GMT
Not After : May 21 01:50:40 2027 GMT
Subject: CN=E1E685EEDF4C8BE390C91F6301A94879E7E959A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4a:aa:ae:04:c8:7b:98:32:3b:fc:87:37:31:
ff:bb:de:9c:03:b1:0a:bc:0b:0e:86:91:68:a1:15:
9d:73:df:b3:84:b2:59:8c:30:78:c7:7f:2d:e9:db:
3a:a2:1a:97:42:35:3b:3a:05:92:f4:b7:59:2c:78:
67:65:02:95:2f:b4:0d:97:2f:d6:91:28:03:cc:96:
ff:cc:68:78:8d:1a:90:94:df:5d:26:09:04:10:a9:
5f:a0:18:63:db:a4:30:ab:b8:bb:a5:52:d0:e2:0a:
ce:85:c8:09:30:50:86:45:fd:f0:fe:9c:f3:f0:32:
33:d1:bd:13:af:55:12:ce:fc:12:ec:6b:7e:36:97:
b0:09:49:45:cb:79:fa:94:e8:c3:d4:48:e9:bd:ba:
20:b5:61:35:83:ce:a2:d7:2d:22:78:ab:c7:20:1a:
51:98:ea:f8:19:1a:f2:8d:68:83:23:bc:d7:ce:4b:
b1:62:53:c6:7e:59:3b:c2:87:b0:c8:61:18:0c:b6:
6e:db:85:06:24:6b:5c:1e:23:2c:52:11:f8:12:51:
32:9a:d5:53:b6:f8:b9:a8:60:40:79:05:83:ef:90:
7a:58:3f:0b:59:dd:7e:64:c4:ab:33:10:22:65:05:
de:28:ad:ff:f0:af:3e:b4:e1:34:d0:78:7c:e2:55:
81:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E6:85:EE:DF:4C:8B:E3:90:C9:1F:63:01:A9:48:79:E7:E9:59:A7
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143566.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a394::/32
Signature Algorithm: sha256WithRSAEncryption
4a:81:50:95:fc:49:84:0d:41:62:5a:96:78:eb:79:47:84:2f:
45:09:e2:11:3d:01:c7:e1:39:84:8a:2f:b9:a8:4e:70:4a:9a:
c9:83:51:d1:4c:fd:94:c7:0f:cb:af:26:e8:59:d4:d4:c1:38:
1d:51:37:24:4b:21:f8:55:7c:1b:15:b6:9d:25:0f:fc:94:d2:
0f:67:62:95:67:42:b8:a9:51:44:30:9b:1f:c6:d5:42:8e:ee:
f3:03:12:09:ee:77:b7:de:30:7b:bb:bd:b1:6a:ca:ba:ea:8d:
99:0a:7a:3c:3c:f9:7a:19:11:58:14:92:c6:2b:fe:7c:c8:ba:
ce:7e:00:98:ad:ed:5d:cc:a3:92:4f:0e:72:05:71:c9:f1:93:
ae:61:1e:a9:ac:a5:64:0d:c2:6d:77:e9:c8:47:2b:a3:93:69:
57:32:f4:c4:00:90:c3:92:d8:de:85:1f:49:07:32:39:df:e3:
3f:2b:a6:67:23:2e:56:29:e2:68:3b:74:07:5d:b7:23:ad:69:
a7:00:f1:cd:0c:11:50:13:20:70:54:1f:c2:7c:8b:2a:f5:95:
04:f0:1d:f6:2b:7a:36:34:d2:77:61:4a:b8:85:d1:8d:be:25:
6b:8c:b0:6c:c0:f6:07:d5:f9:e4:78:ac:bf:7e:55:c0:dd:90:
ba:20:9c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:03 2026 by rpki-client