Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143582.roa
File: AS143582.roa (raw, json)
Hash identifier: C4RFq9/anVivcFk8FZ2ja1giDWkc5Xh347GzB/wR9eU=
Subject key identifier: 0B:31:BE:07:32:AB:83:1E:14:73:A3:D5:68:9C:14:90:15:51:90:CE
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6EF42D859BA9EB05CEC97DF0362DCA6943BC7D4F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143582.roa
Signing time: Fri 22 May 2026 02:47:53 +0000
ROA not before: Fri 22 May 2026 02:42:53 +0000
ROA not after: Fri 21 May 2027 02:47:53 +0000
asID: 143582
IP address blocks: 240a:a3a4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:f4:2d:85:9b:a9:eb:05:ce:c9:7d:f0:36:2d:ca:69:43:bc:7d:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:53 2026 GMT
Not After : May 21 02:47:53 2027 GMT
Subject: CN=0B31BE0732AB831E1473A3D5689C1490155190CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:59:a8:1a:fe:ab:01:da:e6:15:74:e5:47:b9:
b7:31:2d:fa:48:86:2e:ab:7a:d5:e2:a3:aa:b7:b1:
ff:85:2d:fe:8a:09:32:92:ef:82:1c:d1:aa:bf:7c:
6c:7c:d0:8b:07:92:4c:d8:43:a4:33:33:88:b9:50:
3d:04:d8:bb:5a:ee:d5:73:7f:51:2d:81:df:77:2f:
dc:b2:3a:68:cb:37:17:0d:d2:ac:4f:7d:a1:30:f8:
0b:ea:40:e8:cf:c4:7a:7f:82:ab:9d:1f:62:d1:e2:
3d:e4:a3:d9:08:0c:e5:73:b0:ce:52:82:c1:e9:b9:
2f:74:4f:fb:c3:2b:d0:5b:3d:c9:12:f7:81:6f:4e:
a2:8d:02:a6:07:b8:ef:b2:06:95:f1:28:c9:33:ab:
32:7d:f6:eb:c3:fb:f7:cc:ec:26:48:d2:f4:12:05:
f9:f2:cf:9d:b5:f8:66:06:1b:8f:f1:fb:42:02:dd:
69:0e:1a:68:6e:3b:22:f3:bf:c6:09:3b:b1:d4:1f:
d1:2a:11:57:82:3e:94:57:85:d3:44:82:21:11:c9:
17:73:f6:5a:db:52:6c:b8:bd:21:58:bc:14:6d:3d:
2e:8a:17:5c:a9:3f:2d:cc:10:66:87:df:39:96:9a:
03:02:17:8e:a7:aa:e8:bd:36:93:12:4f:18:d4:a9:
f4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:31:BE:07:32:AB:83:1E:14:73:A3:D5:68:9C:14:90:15:51:90:CE
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143582.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3a4::/32
Signature Algorithm: sha256WithRSAEncryption
7e:e2:2a:38:00:c9:d3:92:dc:68:d7:c4:f5:bc:43:86:61:0d:
9f:69:a5:f2:51:fd:7d:a7:1c:f1:94:a2:41:dc:f4:d8:6b:31:
a1:4b:0b:cf:02:e2:b0:2f:ab:f1:4e:88:97:8c:3e:e6:ab:71:
45:54:52:4d:1c:36:c3:52:0f:23:49:12:f5:7a:df:90:4d:9a:
f7:63:96:6c:fc:24:42:7f:05:06:e8:4d:0b:4f:18:f6:02:2d:
3d:04:5e:85:a9:d4:61:41:00:84:bf:6a:a3:b5:9e:63:91:10:
b3:61:70:09:db:13:82:d8:9d:12:c6:7e:ef:59:32:23:1c:3f:
30:e8:08:e0:b7:3b:32:ab:82:4c:35:e7:a6:63:e5:ac:05:4a:
25:81:30:1e:21:a2:19:cd:3d:44:56:60:2c:db:22:8b:ce:78:
27:b4:40:08:71:59:16:61:24:27:a3:a6:0e:af:e7:54:4c:8f:
ed:e2:1e:30:ba:ef:94:e8:e8:f5:01:97:39:09:16:d5:43:a3:
bd:75:3b:b4:59:e6:76:cf:f8:04:d1:16:34:48:56:36:6e:75:
87:fe:d5:7d:a3:09:a1:4d:1b:6b:c1:a2:46:3b:6b:d7:5f:a5:
a0:cb:30:4a:c6:3f:a9:a2:a8:92:a9:c1:da:e2:dc:83:62:f1:
8b:95:5e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:38 2026 by rpki-client