Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143604.roa
File: AS143604.roa (raw, json)
Hash identifier: KCfy4mVAwkL3vrrpGFT7U9BCKyW/uS0JvhNuVZk6imk=
Subject key identifier: 74:E2:DB:2A:09:9F:02:A2:2E:82:07:15:14:0B:34:C7:62:50:2E:F1
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 20DABD951C7F115FDF234305598BDA994EF0C97A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143604.roa
Signing time: Mon 25 May 2026 01:38:41 +0000
ROA not before: Mon 25 May 2026 01:33:41 +0000
ROA not after: Mon 24 May 2027 01:38:41 +0000
asID: 143604
IP address blocks: 240a:a3ba::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:da:bd:95:1c:7f:11:5f:df:23:43:05:59:8b:da:99:4e:f0:c9:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:41 2026 GMT
Not After : May 24 01:38:41 2027 GMT
Subject: CN=74E2DB2A099F02A22E820715140B34C762502EF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e5:f9:57:3e:d0:06:a2:85:9b:fc:2d:f3:7b:
7a:7a:e6:16:ac:e2:d2:70:ba:39:01:af:18:33:5d:
7d:d5:52:67:43:eb:f4:67:e1:8b:31:76:ea:0d:7b:
4d:eb:6d:b3:22:1f:a9:03:bc:23:de:c4:67:89:f1:
ba:67:75:49:1a:ce:90:89:29:5b:8c:43:1e:01:d6:
ee:6b:d4:38:fb:4c:14:73:6c:fb:46:ab:d4:46:15:
6d:cc:f3:7f:2c:85:e9:5e:0d:9f:5a:98:1b:59:b2:
44:4f:2e:07:8a:74:b2:d8:c3:5d:28:4b:f4:54:37:
fe:dd:0e:f4:aa:8d:41:04:8f:70:f3:6c:fa:e3:c5:
4c:27:18:20:99:c3:ae:c1:99:2e:04:af:80:cd:03:
80:f0:eb:9a:ed:58:db:52:28:07:e2:ff:2c:b3:33:
7b:0c:96:0f:0b:c6:87:64:70:3f:74:3d:07:02:b1:
1a:ad:8c:f4:67:46:03:ad:c8:d4:9a:12:cb:81:ae:
40:49:b4:6f:81:fb:cd:aa:c6:44:a5:bb:9c:72:02:
a8:31:23:a1:9e:9b:54:d9:ac:f3:b9:77:f2:9f:38:
c6:0f:ca:4f:e7:cf:89:bd:0f:7a:b9:46:63:e2:c8:
ea:59:fb:cc:a7:23:3e:c5:c0:df:f0:42:1c:77:7a:
4a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E2:DB:2A:09:9F:02:A2:2E:82:07:15:14:0B:34:C7:62:50:2E:F1
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143604.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3ba::/32
Signature Algorithm: sha256WithRSAEncryption
b1:6d:17:68:3e:d3:7c:5e:ec:ef:1a:9d:44:38:5d:c9:17:97:
d4:d7:eb:0c:95:94:1a:9a:a6:a9:0f:8e:1d:a3:a8:cb:d4:7d:
4f:ef:0b:f9:40:ca:09:f7:8e:bb:23:17:c5:94:2b:e2:73:10:
fb:bc:90:8f:88:9c:6a:f7:e4:79:ad:75:f3:85:8f:fc:bc:c1:
d8:5c:74:e8:7b:1b:c5:2c:6e:0c:13:33:11:4e:26:3d:26:1b:
cb:3f:60:49:27:cd:ca:34:d2:a0:dd:09:41:5a:79:43:94:42:
d0:b4:ce:b2:26:03:e0:8d:35:05:c6:d4:09:a1:48:a4:dc:6f:
a6:30:dd:da:f8:ba:c8:00:4c:be:f3:8b:00:cd:4f:60:2f:7d:
c4:aa:4a:44:32:9a:bd:80:a4:09:20:87:4c:a3:df:2b:c4:18:
aa:1a:31:f5:b9:24:c7:72:e8:d4:b2:e5:29:2e:72:db:aa:b5:
ff:00:a7:65:e0:6b:70:3d:7c:c3:44:92:b4:8c:98:a0:cb:ec:
1f:04:c1:d1:db:7e:b4:98:e9:71:99:eb:fe:04:1b:be:61:56:
a0:82:1c:b2:18:bb:27:9c:94:56:81:e4:60:3e:98:1a:f7:8e:
21:74:ce:28:08:43:99:9c:91:91:32:39:94:c9:bc:8b:3d:05:
86:78:64:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:32 2026 by rpki-client