Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143580.roa
File: AS143580.roa (raw, json)
Hash identifier: CZ0RI3wRG4Bhr4Y0zuCk3BDjj0cNcnf6Gi973HZgEMc=
Subject key identifier: CE:47:14:74:CA:51:B7:C2:18:FC:70:18:9C:EF:9B:4F:E1:97:52:FD
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 015A2C32E356A3AE86910BC3EAEBD4053E4050AD
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143580.roa
Signing time: Mon 25 May 2026 03:19:16 +0000
ROA not before: Mon 25 May 2026 03:14:16 +0000
ROA not after: Mon 24 May 2027 03:19:16 +0000
asID: 143580
IP address blocks: 240a:a3a2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:5a:2c:32:e3:56:a3:ae:86:91:0b:c3:ea:eb:d4:05:3e:40:50:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:16 2026 GMT
Not After : May 24 03:19:16 2027 GMT
Subject: CN=CE471474CA51B7C218FC70189CEF9B4FE19752FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a8:fe:3d:41:95:69:c4:be:61:dc:ee:47:47:
a6:34:0f:7c:41:0f:72:48:ba:69:eb:4a:9b:cd:51:
56:3a:e2:e2:77:81:3c:8e:e7:08:8e:bf:06:d2:56:
02:2d:46:ed:b0:0a:2d:56:d3:b9:c6:6b:9d:9e:1f:
bb:78:13:0f:b4:2c:a4:4b:73:aa:5e:b2:4e:79:7d:
b5:7a:5e:f2:9b:c9:a0:28:15:d8:c8:9f:2e:d4:86:
7c:e7:82:4d:7d:db:5e:8d:2e:47:1e:62:98:93:3e:
0b:51:06:6a:37:ed:db:c0:2a:4e:79:a4:24:42:0a:
0c:af:1f:61:f5:12:a2:81:4b:e8:e5:a8:5a:01:00:
85:9f:f3:f4:bf:ab:d5:cb:9a:67:ec:a5:2f:05:f7:
21:c3:0f:24:a9:9f:b7:46:06:85:42:fe:b5:e4:0f:
ff:d7:1b:21:ac:5c:4e:e1:8c:4c:9f:e6:f8:d8:f3:
36:87:1c:93:bf:8c:3f:81:74:80:34:ea:58:18:c2:
19:30:00:74:a2:ca:a4:9a:b8:58:2e:08:a6:7f:60:
60:9d:1d:d9:27:8e:ad:de:49:4c:45:b4:6f:ac:48:
73:4e:63:20:5c:dc:45:37:bb:05:b5:3a:af:16:5f:
6c:00:70:f6:db:a4:95:4a:f8:dc:35:13:d1:61:6b:
d8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:47:14:74:CA:51:B7:C2:18:FC:70:18:9C:EF:9B:4F:E1:97:52:FD
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143580.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3a2::/32
Signature Algorithm: sha256WithRSAEncryption
14:62:0d:34:64:74:b0:99:f7:50:7e:5a:bc:1a:bc:24:cb:be:
b1:07:94:7c:e2:b5:51:16:b5:7c:a5:ff:e1:30:21:e7:eb:f5:
fb:c7:b8:07:29:df:f1:13:bb:71:0b:f3:6b:09:95:c5:bf:5a:
1c:9c:b7:d8:e3:21:35:a1:3e:23:06:a0:37:79:c8:ba:01:89:
6d:2d:63:36:c3:3c:32:c7:2b:1d:64:9d:75:f2:c6:e0:d3:fb:
05:f8:e2:1f:1b:76:ae:ae:87:68:e3:7b:41:82:cc:61:a0:97:
44:f9:3c:46:c2:28:bb:69:c4:4d:88:34:b6:59:01:2a:bf:dc:
ee:78:04:f8:81:cd:03:b6:2a:47:9d:2e:c4:06:c8:6c:65:83:
8e:e6:42:38:85:83:1c:95:f7:01:54:c7:84:15:0a:ec:9d:03:
90:6e:8d:d6:44:75:a4:87:cd:30:af:9f:d6:8a:e0:c7:27:4c:
07:8b:95:2e:d5:80:59:e0:90:65:dd:49:78:e7:84:01:11:f5:
ab:af:55:64:ff:06:c5:67:d9:f7:e2:30:bc:56:a8:af:7a:1d:
30:61:3f:95:92:5d:67:22:94:4c:69:46:8a:13:2d:4b:f0:6e:
92:a4:04:7e:29:c4:dd:66:c3:00:cc:4c:fe:a0:21:c4:c6:be:
6a:fc:96:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:31 2026 by rpki-client