Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143587.roa
File: AS143587.roa (raw, json)
Hash identifier: KqfCbP7tM+AGa6vN9aGXnS27ma9/A2B1f91WCtyRWII=
Subject key identifier: 37:F5:59:C5:1A:D9:38:4D:EB:11:54:21:AE:2E:24:28:56:6E:B2:6A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4F4ADD3C8711C0357C574CDC2586532078EB44FF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143587.roa
Signing time: Fri 22 May 2026 01:50:40 +0000
ROA not before: Fri 22 May 2026 01:45:40 +0000
ROA not after: Fri 21 May 2027 01:50:40 +0000
asID: 143587
IP address blocks: 240a:a3a9::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:4a:dd:3c:87:11:c0:35:7c:57:4c:dc:25:86:53:20:78:eb:44:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:40 2026 GMT
Not After : May 21 01:50:40 2027 GMT
Subject: CN=37F559C51AD9384DEB115421AE2E2428566EB26A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f0:5a:c0:b6:c0:39:e3:45:21:ec:71:e1:20:
b1:99:19:d1:2c:c0:ca:10:4c:fa:5e:b3:c4:67:43:
82:30:be:9f:d6:3e:4c:d6:61:40:28:c9:9b:6b:e6:
34:d3:15:07:4b:e5:16:b4:f5:25:22:8a:28:ea:4b:
ee:b9:49:4d:02:1a:be:28:8c:bc:32:d4:e6:4f:08:
33:3d:df:e5:2f:48:b5:39:86:8c:fc:0e:d0:4d:3c:
ec:b3:57:53:dc:7e:7c:f0:e7:60:1b:78:b2:90:5e:
87:b1:05:c7:58:83:9f:f2:cf:22:ac:04:af:0e:4e:
47:b9:10:96:69:30:ce:04:0d:de:af:20:4b:60:20:
ee:d9:b3:ed:13:b3:23:e8:1a:87:b2:55:7e:89:45:
e3:f0:2f:4b:9b:c4:5d:fc:f8:dc:8e:11:95:a9:e4:
ae:56:fb:9a:24:af:41:af:8d:c8:3d:10:f4:14:68:
d8:7b:57:ba:16:9a:fa:7b:61:0d:89:e8:2e:71:3f:
e3:71:00:9b:cb:ff:50:cb:82:d2:43:85:89:09:a4:
65:c2:6f:be:85:32:b4:ce:fe:b9:c5:86:cd:a6:11:
ff:f8:50:3f:21:cc:18:2c:c3:2c:1b:41:8a:90:04:
fe:c9:54:d3:07:5c:30:5e:72:20:bb:4c:72:08:f4:
3a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F5:59:C5:1A:D9:38:4D:EB:11:54:21:AE:2E:24:28:56:6E:B2:6A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143587.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3a9::/32
Signature Algorithm: sha256WithRSAEncryption
77:cc:bd:6b:94:1b:c1:c1:14:53:98:22:40:da:74:9a:0f:07:
60:66:59:86:69:3a:3b:08:b1:1c:e8:7a:aa:1c:d7:d2:11:7d:
5d:a3:6f:f8:36:24:c8:ad:77:a9:f9:16:b6:87:35:47:a2:5d:
00:a0:d2:91:78:aa:9d:23:ae:0b:3a:f0:fb:28:c7:07:0f:e3:
71:88:d3:00:bc:09:e5:36:ca:fd:ff:45:e7:78:55:26:db:8c:
95:fd:f8:71:39:75:64:31:16:d2:99:f7:4a:a1:1e:79:d6:cc:
1d:d4:f1:6e:27:df:f3:4e:0b:75:a9:3c:74:d6:2c:22:98:6f:
f2:77:23:71:4b:13:06:ae:b2:7b:c9:9d:20:ea:00:c6:bb:ae:
b9:54:e8:17:e8:54:e0:f3:45:45:8f:9d:46:b5:5b:f4:7d:a8:
0b:11:dc:d3:a7:b5:be:e4:00:2a:b0:e9:bf:73:f0:5e:94:45:
f6:88:cb:4c:b1:07:63:a2:0d:6d:1a:1b:1a:9c:d1:21:9e:fa:
d6:da:67:36:d4:fa:df:54:b0:93:8e:75:a9:c5:d1:60:db:83:
f4:3b:31:13:2d:06:bb:2c:b8:3d:fb:eb:ae:0a:93:b3:ff:61:
59:56:1e:20:cd:99:e1:76:ed:12:63:48:99:5a:f7:b6:5b:da:
e8:7f:50:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:27 2026 by rpki-client