Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143620.roa
File: AS143620.roa (raw, json)
Hash identifier: UJQWkpfUvcikafFpZR8vQ2Xh4/IY+00bjJ/ldrghRr8=
Subject key identifier: AA:B1:F4:F8:DC:B5:8C:67:E0:63:E7:D8:B7:69:65:16:B9:83:C2:89
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 709923C76DBC7BDA9A4C55CC7C8380A6FCF92146
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143620.roa
Signing time: Mon 25 May 2026 06:28:22 +0000
ROA not before: Mon 25 May 2026 06:23:22 +0000
ROA not after: Mon 24 May 2027 06:28:22 +0000
asID: 143620
IP address blocks: 240a:a3ca::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:99:23:c7:6d:bc:7b:da:9a:4c:55:cc:7c:83:80:a6:fc:f9:21:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:22 2026 GMT
Not After : May 24 06:28:22 2027 GMT
Subject: CN=AAB1F4F8DCB58C67E063E7D8B7696516B983C289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:97:48:66:49:22:34:14:05:47:ac:10:63:3f:
09:98:b5:f3:57:17:a2:55:7a:57:44:2e:fa:b0:a5:
bf:c7:51:0a:94:9d:0f:60:48:6c:f0:8e:c3:11:fb:
1c:98:7a:4a:38:62:ff:74:fa:f9:28:8d:ca:2b:f8:
d9:78:8a:61:cb:b6:54:33:63:b8:61:0d:6a:8a:19:
18:4f:1b:d6:d6:43:e2:a5:3b:ea:13:cb:e2:94:54:
2b:c4:62:9a:10:2a:0f:c1:da:9a:06:a9:ee:72:2a:
e6:3a:eb:84:36:60:ea:dc:50:48:ab:82:97:71:83:
ad:40:1c:5b:62:3f:70:56:53:6c:de:a2:a0:54:e2:
2a:de:f8:ac:0a:dc:aa:e6:50:92:40:af:cd:42:55:
c8:4d:28:3e:ef:1a:67:bc:17:a7:a3:8d:4c:c8:d1:
79:4f:80:0e:f7:69:5e:8d:2a:cb:8b:6c:ca:04:92:
79:99:11:ce:73:a4:7c:1b:8e:1a:26:d7:96:a8:3c:
54:5b:df:4f:ed:2b:23:6a:2a:3b:4c:ff:db:2e:34:
00:e1:e0:f9:c5:44:75:ce:aa:f5:c5:79:f4:76:06:
06:39:d1:c8:72:d8:fe:9e:26:87:f2:9b:e7:2d:fa:
38:fc:eb:f8:62:69:e1:7f:dd:a8:b9:d1:bf:83:5d:
29:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B1:F4:F8:DC:B5:8C:67:E0:63:E7:D8:B7:69:65:16:B9:83:C2:89
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143620.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3ca::/32
Signature Algorithm: sha256WithRSAEncryption
bb:0a:c7:fd:59:25:c8:21:77:69:2b:d3:f6:15:e3:ee:06:99:
92:61:1f:8e:20:24:67:82:a3:aa:ee:f5:6b:ee:fc:4f:0a:b4:
02:2e:33:3b:2d:19:a8:23:23:6a:de:51:e4:a4:48:fb:ca:b3:
65:dd:73:cc:4c:00:9a:52:dd:38:b7:44:f6:d4:b5:05:1c:7e:
c8:83:5c:2f:e8:b4:b4:ce:7a:ae:53:ec:b6:26:7d:cd:41:f6:
fa:aa:38:f8:12:b4:c2:41:a4:3d:b1:c3:f4:b6:56:10:66:2a:
1c:e8:de:3a:69:9b:5c:27:6e:b9:27:ae:26:5b:31:ba:d6:e4:
15:da:b9:ee:4e:45:15:b3:5b:b8:63:f2:bb:a9:a9:2e:8b:ee:
44:e3:fb:14:4b:06:f4:fd:b6:6c:8e:72:00:11:75:5a:3b:38:
5d:bc:d8:c5:b0:75:e2:f3:c7:72:59:e7:58:81:64:a2:63:e5:
90:88:94:1b:30:25:43:c7:fa:50:bb:b1:b4:3d:e4:5d:6d:67:
d7:4f:67:21:1b:30:11:27:87:0b:f0:fb:3b:be:d2:42:76:ca:
26:ae:34:72:7b:a0:35:d5:43:40:5c:3d:c2:dd:62:5d:78:d4:
43:f8:f9:b1:33:2a:09:4b:f8:e8:0e:86:c9:93:ca:0a:28:68:
6b:70:1b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:41 2026 by rpki-client