Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143593.roa
File: AS143593.roa (raw, json)
Hash identifier: atVBHxFUE6XlnCmhg5JrZA/IjoBSfZqCxw5xSTC9mog=
Subject key identifier: 95:17:CE:9B:2A:F3:80:51:AE:64:6A:C0:88:92:29:72:E0:30:32:83
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 169FEC757AE968CE653CB5DF7A560B3F8D9BF3E1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143593.roa
Signing time: Fri 22 May 2026 01:50:13 +0000
ROA not before: Fri 22 May 2026 01:45:13 +0000
ROA not after: Fri 21 May 2027 01:50:13 +0000
asID: 143593
IP address blocks: 240a:a3af::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:9f:ec:75:7a:e9:68:ce:65:3c:b5:df:7a:56:0b:3f:8d:9b:f3:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:13 2026 GMT
Not After : May 21 01:50:13 2027 GMT
Subject: CN=9517CE9B2AF38051AE646AC088922972E0303283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:bb:30:af:34:e8:82:eb:73:46:9d:fd:78:85:
e0:bb:47:b1:bf:15:b6:e7:03:5d:39:6f:c5:f4:10:
9d:d3:c8:cc:f5:4d:d4:99:b3:0a:f2:58:9b:db:c7:
32:4c:7e:e6:5f:eb:fe:e9:5e:bd:03:18:b0:4c:e4:
6c:06:1f:44:1a:12:bd:51:72:87:2e:0d:2e:7e:08:
d8:c7:c5:fb:ac:65:1b:e5:11:ca:e5:c3:53:35:2e:
03:69:43:26:2b:ed:d5:76:79:de:c9:30:32:97:1c:
a7:64:ce:38:65:d5:6a:b7:60:ae:66:94:17:bb:b7:
95:18:63:90:63:4f:d5:71:4b:90:4f:14:9a:f7:e5:
04:d5:d3:b8:bb:b5:89:a9:a8:c2:31:72:89:8c:3a:
4d:f6:2a:c6:62:c4:a3:a6:5c:8d:c1:d7:4d:06:5e:
a6:ee:03:f5:df:a2:51:5e:b3:68:08:2a:ad:17:a9:
61:73:10:ca:2f:43:2a:7e:b9:93:b1:0a:64:a1:3d:
12:66:25:22:fa:ff:a9:5a:fb:04:0c:4e:fa:29:fb:
f6:c1:24:ff:8e:5c:8e:94:91:13:2c:a9:75:4d:44:
7a:cc:7b:75:89:d8:46:d5:82:1a:58:ba:a5:bb:3f:
c6:4d:3b:0d:23:1c:c0:34:c0:36:90:4e:04:61:66:
aa:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:17:CE:9B:2A:F3:80:51:AE:64:6A:C0:88:92:29:72:E0:30:32:83
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143593.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3af::/32
Signature Algorithm: sha256WithRSAEncryption
ba:ac:3e:f4:e3:7a:64:93:33:99:5f:e7:e2:1a:8b:fa:33:be:
82:a1:fb:56:4d:37:d8:ac:44:a9:ad:c6:ea:8c:05:bf:44:43:
5e:b4:fa:88:44:bf:8f:34:a9:96:bc:1f:da:a1:63:26:55:2a:
81:17:0a:d8:08:78:18:09:be:92:e8:82:c0:41:13:a1:eb:9b:
ee:53:b2:68:b8:c2:af:40:5e:01:91:07:41:44:12:da:dd:16:
64:98:bd:54:d3:ba:96:7b:38:b1:76:50:8f:8c:8a:3a:f6:5d:
47:6a:2c:f6:7c:1b:5c:47:b8:a6:a3:87:3f:5c:29:6f:1b:e2:
c6:4f:1c:7d:fd:33:fb:9f:ae:2f:9e:f3:22:54:1a:d1:b0:ea:
96:76:5c:01:e9:92:84:b4:e2:6f:62:d5:03:ae:2e:4e:87:e0:
13:26:2b:2f:a1:bf:5f:a5:f6:50:0e:d8:e5:80:eb:fe:06:08:
77:21:d3:3e:07:52:42:57:10:e9:d3:d3:b7:b4:8c:83:c4:df:
9a:05:94:fa:f8:1c:3c:cc:53:71:18:c6:fb:5d:58:58:32:36:
51:a3:ce:2e:f7:af:ac:fe:ab:cf:0e:d2:cd:ed:7a:da:b7:e4:
c3:77:4b:ec:78:1f:2e:68:bf:70:ca:69:51:91:64:7f:e9:e3:
e0:4c:5f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:04 2026 by rpki-client