Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143584.roa
File: AS143584.roa (raw, json)
Hash identifier: eeyWKl+JsNjSY9CkyhwLWA8L8aV+s0wGtMd7g3pWxPo=
Subject key identifier: D5:A2:58:B2:92:8B:6D:F8:C0:4E:7B:EB:E0:0F:7D:68:B8:2F:68:83
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 35D0A6AD88E63DD4E438390A13D2DCEC595F1B64
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143584.roa
Signing time: Tue 26 May 2026 02:34:50 +0000
ROA not before: Tue 26 May 2026 02:29:50 +0000
ROA not after: Tue 25 May 2027 02:34:50 +0000
asID: 143584
IP address blocks: 240a:a3a6::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:d0:a6:ad:88:e6:3d:d4:e4:38:39:0a:13:d2:dc:ec:59:5f:1b:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:29:50 2026 GMT
Not After : May 25 02:34:50 2027 GMT
Subject: CN=D5A258B2928B6DF8C04E7BEBE00F7D68B82F6883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e4:55:e3:1d:2f:7c:8c:80:8c:98:3d:81:aa:
b3:46:ef:80:17:1e:d0:0f:5b:9a:d3:7e:55:af:2c:
a3:19:08:de:75:7b:bf:bb:a0:c4:c5:40:f4:b2:f2:
14:6b:93:ad:42:51:2f:1f:94:e5:be:09:5b:80:8b:
4a:7c:3f:a4:f0:3c:67:7f:12:28:ec:69:67:0f:6e:
30:47:a7:83:7c:52:46:8b:8e:ef:b9:9e:01:85:1d:
43:a3:9c:36:d4:09:5a:ee:b6:71:63:5a:4f:c2:af:
6f:06:6f:5d:4b:89:c5:bd:34:17:40:e4:dc:5c:6b:
ff:64:08:41:9e:2f:2e:52:6d:4e:1d:8b:a1:7b:aa:
64:4e:0c:66:27:4c:3f:f5:5b:a2:71:ab:d9:7f:0e:
d0:33:50:dd:2f:58:c5:10:66:7a:bd:98:8b:d5:cd:
66:f8:62:ad:89:7a:9f:6f:5e:69:c0:84:10:06:4c:
b5:ef:71:9a:f7:b2:3a:57:1e:b4:92:68:4e:60:3c:
a3:3d:ab:89:0a:85:ea:10:e2:6c:5f:57:aa:21:74:
20:04:8b:2d:72:19:d6:17:71:80:0a:b8:0d:57:c2:
e4:4a:92:19:c6:0a:dc:a4:8f:48:1a:0d:ac:94:71:
42:67:2e:9f:6f:fb:64:fd:4a:af:43:0d:fc:45:4e:
ba:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A2:58:B2:92:8B:6D:F8:C0:4E:7B:EB:E0:0F:7D:68:B8:2F:68:83
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143584.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3a6::/32
Signature Algorithm: sha256WithRSAEncryption
42:39:c3:6c:7d:06:30:04:bf:b7:27:fa:9f:4f:cd:6f:0e:b4:
6e:06:40:5e:af:d1:ef:4c:ef:4a:3a:7b:30:0b:a1:e2:a6:16:
ab:4c:fd:dc:74:af:6f:16:eb:e0:82:bb:87:61:f0:a4:66:46:
68:8b:4f:63:5d:67:3c:48:fd:d1:fc:43:e4:46:ad:cf:f2:82:
c1:3a:8f:e1:19:18:e4:57:67:9c:9f:c9:6c:b4:b4:5b:fe:0c:
06:45:79:85:0d:e3:a0:40:06:5e:86:df:2d:30:ab:ca:c6:24:
51:62:1c:b9:9f:ac:10:f1:7a:2f:c5:18:ea:d2:bf:03:f8:62:
06:bf:53:01:68:13:be:57:65:e6:82:9a:41:2e:db:64:2f:a5:
fc:ad:b8:49:91:87:0f:54:3f:7b:4c:ab:8c:14:bd:44:b6:85:
f7:69:91:fe:b7:b3:20:53:87:e9:72:69:fd:f7:93:5c:65:9f:
7e:de:5c:ee:69:35:d5:4c:7f:fc:f6:a5:e3:cd:71:43:5d:c0:
18:03:bc:85:4c:ce:41:25:3c:0b:6b:0d:32:1c:21:6f:ca:ab:
fb:b1:1e:92:39:12:69:75:03:91:36:69:7b:40:43:ce:08:bc:
8b:1b:c9:0f:5c:40:2e:fc:17:8a:66:2c:d4:92:de:3f:8b:64:
3c:29:80:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:57 2026 by rpki-client