Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143586.roa
File: AS143586.roa (raw, json)
Hash identifier: BIMnN93H4Iwrm2ddg8y4Kxc4Z/jtSl6uRR8wClZTB1E=
Subject key identifier: 2A:C7:CD:9A:F4:BA:9D:A3:44:09:11:EB:93:A5:46:0F:EC:2B:33:B6
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 733C54B0D4135F5113216AD822069D0866932184
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143586.roa
Signing time: Fri 22 May 2026 07:32:10 +0000
ROA not before: Fri 22 May 2026 07:27:10 +0000
ROA not after: Fri 21 May 2027 07:32:10 +0000
asID: 143586
IP address blocks: 240a:a3a8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:3c:54:b0:d4:13:5f:51:13:21:6a:d8:22:06:9d:08:66:93:21:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:10 2026 GMT
Not After : May 21 07:32:10 2027 GMT
Subject: CN=2AC7CD9AF4BA9DA3440911EB93A5460FEC2B33B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7c:53:02:4f:43:9f:47:bf:de:91:dd:15:33:
8f:65:51:c1:4d:58:88:94:a6:8b:2a:64:0d:ae:7d:
42:3a:1a:ba:9b:e4:cc:99:e6:57:34:a4:18:6a:2b:
ac:49:f2:05:de:60:0b:72:0f:d4:7c:a6:50:cc:55:
52:b4:53:6a:e7:51:6f:b1:99:e7:79:d4:b7:e2:9c:
9b:11:61:eb:04:37:c7:c8:27:8f:34:8a:2e:96:7d:
91:31:8f:69:f4:0d:34:de:e3:ca:47:df:02:4e:b3:
da:72:3b:c2:7a:78:29:9f:38:e6:b6:b8:ee:f9:3f:
69:c0:3d:8a:23:65:11:8f:25:5f:86:eb:0b:88:d1:
8e:4c:15:33:c0:55:50:05:75:05:c2:07:6e:1a:8d:
2f:c4:dd:28:6f:bf:44:58:9d:57:23:73:95:8a:26:
ac:f5:fb:ed:45:b6:fe:47:2a:97:5b:e5:e7:8b:41:
e6:11:cd:5d:da:53:bf:fc:f0:28:62:79:f4:53:74:
c6:aa:7a:55:92:01:f5:74:7a:04:7f:10:9e:d2:4d:
56:3d:b3:e9:fa:d9:c5:7c:88:36:68:78:71:37:44:
db:cc:b3:f0:31:4f:11:a6:98:85:2f:48:57:e9:f2:
25:8c:2f:a6:fb:5f:13:70:b4:78:b0:fd:66:2e:52:
da:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C7:CD:9A:F4:BA:9D:A3:44:09:11:EB:93:A5:46:0F:EC:2B:33:B6
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143586.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3a8::/32
Signature Algorithm: sha256WithRSAEncryption
86:1b:37:f6:28:96:7f:e6:f2:05:eb:75:c7:0f:30:6e:3b:90:
83:16:d2:85:73:86:22:0e:fc:1b:e8:0b:6d:ae:4f:e8:c9:08:
1f:32:92:cb:94:d0:aa:92:20:8f:a5:4a:a3:3a:82:e3:8f:a0:
42:62:db:91:bc:6d:f8:a7:b9:51:de:c7:65:b0:04:e2:06:88:
1b:03:97:f3:b9:1c:7b:15:b3:9b:17:f8:ec:ed:d7:8b:30:45:
6c:19:3a:64:28:73:fd:d4:f5:e0:67:31:d6:a1:80:9b:b4:68:
f3:47:2f:31:3a:6a:1b:f5:18:5f:a1:d3:e5:67:6e:2f:2f:06:
37:86:dc:c0:f3:a3:b2:0c:f1:17:61:43:56:93:cd:bd:7b:d4:
7c:db:c6:90:a8:8c:d0:2c:c9:77:11:62:6b:7a:ae:6a:76:e7:
79:ce:88:f9:30:ee:ef:e0:37:05:5a:ff:e1:d5:0c:f1:6c:06:
3e:c3:e4:84:09:fe:4b:83:1b:f4:eb:aa:f3:7d:68:00:74:95:
79:2f:29:8c:f5:0e:fa:00:2c:4a:2f:11:eb:f6:f5:ae:37:be:
ec:13:5f:fd:bb:35:5b:af:1a:85:f8:58:67:6c:19:21:29:84:
4d:fa:16:1e:5d:0d:fe:01:71:23:48:4b:37:49:dc:65:22:3e:
4f:82:cd:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:35 2026 by rpki-client