Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143577.roa
File: AS143577.roa (raw, json)
Hash identifier: XSiBnn8dJ/gAEz1ar80eSH0ArU3elQu1fX9naswJERw=
Subject key identifier: D5:D1:F8:81:32:76:5F:6E:7E:19:42:C7:11:0C:1A:5C:74:54:97:D5
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0FE7F8170C75327FC9325747AD27932A95EE6F2B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143577.roa
Signing time: Fri 22 May 2026 06:27:55 +0000
ROA not before: Fri 22 May 2026 06:22:55 +0000
ROA not after: Fri 21 May 2027 06:27:55 +0000
asID: 143577
IP address blocks: 240a:a39f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:e7:f8:17:0c:75:32:7f:c9:32:57:47:ad:27:93:2a:95:ee:6f:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:22:55 2026 GMT
Not After : May 21 06:27:55 2027 GMT
Subject: CN=D5D1F88132765F6E7E1942C7110C1A5C745497D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:58:9e:90:e4:a0:2d:a7:95:b9:c9:32:44:62:
b5:c0:48:f7:8a:71:bb:ed:70:8b:dc:c8:b9:e4:15:
7d:3c:4d:e1:d0:be:20:ba:d3:bb:9d:56:39:7e:4c:
af:31:dc:f5:0d:a3:30:fa:b5:b8:e1:5f:ad:7b:24:
22:be:5f:db:0a:49:fb:6c:20:5f:fa:2f:16:8a:4d:
6c:ab:13:e6:68:57:09:82:67:fb:de:2a:63:b1:8e:
ea:fc:ad:a4:f9:93:1b:51:7a:78:c8:70:37:85:e9:
57:0e:2e:0a:27:cd:70:a7:c3:b6:24:d9:2d:c6:2a:
97:04:29:e9:d4:df:9d:85:b7:9e:12:bc:9d:0d:60:
b0:88:58:60:79:1b:d9:8e:e0:90:31:b2:35:de:86:
fc:7e:4a:e4:ce:f9:75:c7:54:4a:86:ce:8e:db:20:
12:ba:29:7a:d9:c8:79:20:41:82:ba:7a:25:4d:55:
cb:49:f4:ea:d0:ce:b8:3e:e5:b0:51:2e:15:b4:79:
b7:54:73:72:73:2a:f3:6a:0f:77:43:95:e4:85:ff:
03:99:36:16:a2:ff:bd:42:df:4c:08:55:6b:45:b0:
64:62:1d:82:00:2d:13:83:a4:f0:f6:f3:92:f1:e2:
71:c2:15:ff:18:e9:b7:d8:2a:02:8a:18:c4:65:bf:
fd:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D1:F8:81:32:76:5F:6E:7E:19:42:C7:11:0C:1A:5C:74:54:97:D5
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143577.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a39f::/32
Signature Algorithm: sha256WithRSAEncryption
5d:2c:ed:9e:49:78:a3:f7:83:f3:b0:a7:df:9e:e0:ef:7c:8c:
37:bb:5e:b3:95:fe:05:8d:2a:b4:0e:c9:92:0d:43:dd:50:ff:
48:94:0a:2c:64:8d:19:0f:21:41:b9:8b:35:95:b2:04:9f:d6:
1f:78:e0:e6:a7:14:51:27:e0:f3:c5:23:ec:f8:e1:ef:9a:e8:
2a:29:c7:a2:07:a2:70:86:85:ad:15:9e:f7:9d:6e:68:c0:19:
78:5a:b9:f4:a6:ae:90:27:a9:07:40:ad:1d:d5:9d:e1:10:79:
11:98:34:42:cc:74:69:a5:d9:98:54:29:32:d7:c6:e9:63:16:
fd:be:8e:36:04:9b:25:ec:5e:c2:d5:9a:7d:9d:5d:e8:12:fb:
24:f1:fd:18:05:52:ad:c8:e5:d5:fd:80:58:ab:b7:5d:a9:ed:
4e:ab:82:e2:ff:d6:ac:72:e4:9e:88:6c:74:17:b9:0c:79:5d:
08:50:c4:b5:cd:57:9d:84:72:34:56:6f:d7:bf:2c:15:52:7c:
11:90:5f:e0:ba:c0:4f:e1:c9:45:76:e8:0b:18:ee:b9:8e:fd:
c7:d8:97:c2:4f:c9:31:45:7f:67:e2:2b:de:cb:89:e9:7e:46:
1b:9d:a0:2d:d1:34:27:01:4c:7c:c0:ca:90:8c:3e:70:67:7a:
96:96:55:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:11 2026 by rpki-client