Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143618.roa
File: AS143618.roa (raw, json)
Hash identifier: B9aUdMoxPI+n7U31udoLTpMKNsNFgu6ns7EIGH1NSY8=
Subject key identifier: 40:29:C3:07:72:02:4F:55:08:DB:2B:07:6C:43:F8:CE:68:7A:E0:A3
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1A62B398FEFA75308B21B5EC7A986233158E75B1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143618.roa
Signing time: Fri 22 May 2026 06:05:42 +0000
ROA not before: Fri 22 May 2026 06:00:42 +0000
ROA not after: Fri 21 May 2027 06:05:42 +0000
asID: 143618
IP address blocks: 240a:a3c8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:62:b3:98:fe:fa:75:30:8b:21:b5:ec:7a:98:62:33:15:8e:75:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:42 2026 GMT
Not After : May 21 06:05:42 2027 GMT
Subject: CN=4029C30772024F5508DB2B076C43F8CE687AE0A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1d:b5:60:41:a4:98:61:0c:e4:24:9e:6b:6c:
0c:43:81:ce:ac:09:b5:bc:43:b4:63:71:37:b5:4e:
4b:9b:d4:35:2c:b5:82:8b:bf:ff:71:83:bc:8a:68:
7a:aa:53:86:18:ef:94:5d:a2:69:07:07:87:c2:92:
fc:1a:f2:d7:2d:94:1b:7d:f5:5d:d4:88:6d:62:9a:
2f:26:0e:46:3d:98:85:c9:54:78:f0:09:bf:a9:d3:
80:26:b9:2a:23:3f:17:2f:f5:3c:21:99:37:ec:60:
d1:d1:d5:5d:e5:a9:40:e7:57:19:d1:a2:7a:a1:f4:
89:7b:89:7d:64:95:e4:10:57:a5:96:90:4f:c9:6e:
dc:23:10:b4:87:63:2b:fa:b6:60:f0:f3:d8:41:e0:
a8:61:56:1d:4d:47:16:84:27:14:59:e0:2a:14:12:
35:62:1b:8e:c0:4c:d1:a5:29:c2:e4:f7:70:25:12:
13:38:b0:f4:f3:fe:3d:b9:9c:64:88:f1:cc:a3:06:
a5:65:85:e8:76:04:47:9c:25:4a:56:fc:54:90:67:
5c:c1:e9:26:ba:f0:f7:ff:86:5c:fe:45:74:88:62:
fd:b2:99:4e:55:d8:72:b6:d4:a7:ec:90:36:d3:dc:
09:9d:c6:1a:64:4c:ea:47:2d:e1:54:d5:70:58:47:
c0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:29:C3:07:72:02:4F:55:08:DB:2B:07:6C:43:F8:CE:68:7A:E0:A3
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143618.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3c8::/32
Signature Algorithm: sha256WithRSAEncryption
47:f0:68:e1:48:42:1a:83:b1:ec:81:31:9b:a0:9f:2f:71:06:
86:e2:1d:ab:44:4e:ec:62:c4:d8:5f:c9:64:30:69:f0:1b:e1:
05:5f:1c:7b:64:fb:5c:7d:72:ac:24:42:e2:57:88:5c:73:65:
dd:6e:53:a3:71:5a:64:08:fd:f4:5a:be:26:60:d3:c2:fe:89:
fb:66:61:df:c4:20:f4:ff:81:c1:3a:72:20:4c:eb:a3:61:14:
f7:df:fb:cc:99:fd:76:2f:3b:be:dc:3a:b5:a6:28:18:ff:76:
53:e9:36:77:ce:3b:f7:7b:cf:97:c3:91:97:5c:15:ab:1d:30:
78:5f:1c:73:be:94:45:72:e3:69:67:e5:06:21:d0:6b:20:73:
4f:1f:f7:0b:75:05:e1:02:a4:35:34:fd:cf:d5:1b:50:29:8e:
ac:69:26:5b:49:6b:42:ce:9a:ff:6d:e5:73:1f:64:33:bc:96:
1b:a6:76:7f:33:29:ba:28:ad:04:67:bb:21:27:05:66:a1:76:
bb:b7:d1:fb:fb:72:fb:4f:ec:8e:e1:85:c5:ba:75:92:ba:ef:
71:37:a5:93:f7:bd:39:c8:70:c6:5c:b8:80:29:2c:d3:a5:3e:
5a:76:f1:11:23:c6:53:a5:03:b0:26:e4:fa:31:28:d1:8e:f3:
0d:67:ad:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:07 2026 by rpki-client