Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143588.roa
File: AS143588.roa (raw, json)
Hash identifier: a+y9AlKF6NKTc55t4JTAyhd0sTzfzUTmCxVnne+NpL4=
Subject key identifier: BC:51:66:16:4D:6B:A8:0B:40:9B:36:91:23:BE:16:FF:2C:18:C0:E7
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 35E121ACCB3A38613663C1859BF82DA8B2B88BA7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143588.roa
Signing time: Fri 22 May 2026 07:08:42 +0000
ROA not before: Fri 22 May 2026 07:03:42 +0000
ROA not after: Fri 21 May 2027 07:08:42 +0000
asID: 143588
IP address blocks: 240a:a3aa::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:e1:21:ac:cb:3a:38:61:36:63:c1:85:9b:f8:2d:a8:b2:b8:8b:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:03:42 2026 GMT
Not After : May 21 07:08:42 2027 GMT
Subject: CN=BC5166164D6BA80B409B369123BE16FF2C18C0E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1c:9f:bf:26:96:13:65:00:84:68:e8:c4:a4:
a1:5c:4b:3a:0b:9f:f8:be:04:71:0e:0a:f0:ca:80:
f5:28:1b:de:7a:f9:68:31:c9:a0:0d:4d:04:df:65:
bb:08:ff:42:f8:66:26:43:e8:17:05:d1:c3:b2:e3:
b1:97:76:2f:bc:14:7a:15:3c:c4:a8:bc:46:c4:51:
a2:9b:68:cd:9c:97:69:81:af:e7:cb:17:5a:5c:3b:
ed:0a:d9:6d:a6:8f:b0:62:61:f4:c7:d9:40:55:2e:
01:74:3a:13:76:b6:83:4b:7e:38:21:bd:89:f6:f4:
7d:a0:1b:04:b2:0e:76:8d:cf:1c:6c:7e:bc:be:a5:
d2:61:c6:53:65:0e:ac:b6:e4:8b:bd:c6:24:e6:14:
1e:bf:c7:f8:b3:f9:b7:6a:fd:f1:61:3e:e4:49:2c:
a0:99:0d:7e:16:78:15:6e:71:07:33:95:08:f1:82:
7e:29:65:53:d3:aa:1f:2c:7f:80:40:d7:4d:e6:27:
51:b9:fa:8c:3c:db:7f:1c:9f:36:88:da:19:1d:a2:
97:af:03:ed:cd:cb:68:19:4f:72:07:cc:9a:6b:13:
d0:c8:de:1d:23:0d:58:76:3b:45:06:9f:37:00:71:
8d:b9:83:04:ee:1c:6a:e9:2a:ea:a7:7c:64:aa:96:
90:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:51:66:16:4D:6B:A8:0B:40:9B:36:91:23:BE:16:FF:2C:18:C0:E7
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143588.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3aa::/32
Signature Algorithm: sha256WithRSAEncryption
16:96:92:5b:0c:75:10:40:54:35:76:94:a5:30:55:36:8a:2d:
66:fc:c5:17:75:be:5c:99:28:88:dd:80:87:ab:4f:26:0c:a6:
5e:09:d3:88:ac:20:8b:c1:fd:cf:93:78:29:a6:9a:e7:05:90:
65:bf:79:49:6d:c6:ad:16:4a:06:ca:7c:72:b7:9d:c5:bf:f5:
72:64:c5:cf:f7:bc:a7:8d:19:be:e7:2c:03:6b:89:b7:d3:36:
34:fd:bc:33:e7:b8:cd:51:14:97:ab:9b:5f:11:b2:c3:04:f3:
22:83:23:bb:12:f5:8c:c7:84:f4:35:cc:e1:9b:73:3e:76:67:
52:1a:07:3b:21:c6:cb:99:bc:aa:3e:66:c2:9d:d2:16:9f:53:
e0:71:c1:91:1a:25:0e:5d:7f:bc:cf:6a:4f:07:2a:a5:2b:ca:
ed:a9:c3:60:bb:e7:f6:45:fb:af:63:9d:3e:10:fd:98:f5:93:
b5:93:fd:14:02:2c:ad:6e:5e:98:62:f2:bc:b0:c1:df:bf:97:
31:3a:1f:e5:6e:4c:4a:81:1d:11:08:ef:ce:43:08:c9:0f:e7:
78:11:19:41:23:c3:1d:82:79:16:a9:d9:35:a3:cd:3d:c2:32:
93:fd:57:44:f6:30:b3:d5:a4:d8:74:d0:04:77:19:7d:8d:b6:
f2:38:72:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:23 2026 by rpki-client