Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143611.roa
File: AS143611.roa (raw, json)
Hash identifier: ziRX8B/7mxJ70ej3m96DxELwXyJlQjpt48pAvT8MBqI=
Subject key identifier: 90:45:48:5D:5B:15:AC:77:95:F5:41:00:ED:18:4A:44:8C:B2:C3:33
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3AAA2519A05CB8EA61C8F1CD0A6F1521B0BCFE7D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143611.roa
Signing time: Fri 22 May 2026 04:08:17 +0000
ROA not before: Fri 22 May 2026 04:03:17 +0000
ROA not after: Fri 21 May 2027 04:08:17 +0000
asID: 143611
IP address blocks: 240a:a3c1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:aa:25:19:a0:5c:b8:ea:61:c8:f1:cd:0a:6f:15:21:b0:bc:fe:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:17 2026 GMT
Not After : May 21 04:08:17 2027 GMT
Subject: CN=9045485D5B15AC7795F54100ED184A448CB2C333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:48:e1:b3:4f:f3:cf:63:2f:ff:75:0d:81:e5:
7e:17:6f:94:05:25:a7:65:13:8e:9d:e2:ac:90:90:
78:7e:a2:d7:7e:86:4c:77:c3:ca:0f:10:50:4c:38:
d7:67:ba:fb:18:2e:62:80:83:81:dc:1e:9a:09:36:
9e:b3:a0:b4:0f:1a:94:ba:b1:25:fb:70:5f:a8:a3:
a4:45:06:3e:d1:68:90:41:82:5e:d3:fd:1d:5d:39:
ef:58:ee:23:33:5f:5d:d0:54:fe:81:9f:b9:1c:ab:
49:3d:db:c5:c3:cc:68:50:ac:be:bc:62:7f:6c:d4:
bb:a2:38:ce:25:99:02:a1:3a:e2:34:ac:b8:95:0a:
57:11:fb:51:61:e8:f0:c3:27:11:82:86:1d:02:e7:
8e:22:05:1c:c6:3d:7d:19:be:bd:5a:53:70:cd:82:
b0:18:78:d9:5d:18:73:51:cc:40:a7:a9:8b:2e:d3:
11:e6:11:90:91:44:9b:58:d8:a1:b7:a4:da:d6:22:
f1:94:8f:bd:b1:43:41:be:c9:66:ef:fe:d0:f1:d0:
8c:d2:7e:08:eb:f9:0e:5e:ca:e0:cd:89:8a:b0:0f:
cb:44:17:04:4e:78:ac:fe:18:63:14:b2:ef:76:f4:
c7:9b:20:ab:e2:1d:67:69:2d:fc:a9:c2:63:3c:d0:
91:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:45:48:5D:5B:15:AC:77:95:F5:41:00:ED:18:4A:44:8C:B2:C3:33
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143611.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3c1::/32
Signature Algorithm: sha256WithRSAEncryption
b1:d9:d8:44:46:04:06:ac:3b:78:9c:9e:98:d5:11:aa:4c:a6:
58:c7:ed:28:04:e9:a5:f6:2f:30:44:99:9c:8b:21:f5:e0:ee:
c6:e8:3d:2f:98:cf:66:fc:7c:69:2b:f8:33:c7:df:8f:c3:bd:
f1:ba:76:5c:4d:cf:ad:be:d0:4a:7c:87:7d:8a:57:4d:37:14:
9c:a1:ac:10:73:d7:38:54:17:15:af:ca:2c:bb:e6:e6:b7:bf:
75:19:55:b5:bf:9b:81:e2:17:e2:32:c7:72:94:15:72:6c:7e:
33:00:74:fd:90:b9:fa:56:62:38:6d:2e:99:ab:a3:51:c5:5e:
74:20:ef:0e:16:9c:4a:a2:19:f5:6b:47:d4:ca:91:ff:0f:9c:
25:1f:8b:01:78:9a:11:9d:a5:88:2b:9f:52:a3:98:dc:da:e3:
2c:a0:d5:02:d6:4c:24:72:32:f6:75:05:1d:a8:a5:b3:c9:cc:
26:aa:3b:c1:b6:2e:f0:85:2f:17:25:f0:d2:cd:ae:42:df:23:
9c:92:ca:77:70:65:5f:67:d7:f0:ce:da:df:82:c0:a5:c7:7c:
d7:29:18:03:4d:b4:a8:2f:6d:7d:d4:94:a7:79:04:eb:4c:54:
cf:ac:30:69:bf:35:68:df:d1:11:ec:62:0c:9b:79:7b:51:d4:
78:3d:c2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:06 2026 by rpki-client