Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143624.roa
File: AS143624.roa (raw, json)
Hash identifier: /YmffZmJqQqyGUlbszKZYa8ZHVHR9Nq/wrVAg3tSh4M=
Subject key identifier: 31:A1:7D:DC:E3:9D:0F:60:05:6F:2C:FD:E3:5A:34:C0:E1:6D:6D:AA
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1C4044B4497F72293DABEF3F29ACE9FD30D7C2B1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143624.roa
Signing time: Tue 26 May 2026 02:35:11 +0000
ROA not before: Tue 26 May 2026 02:30:11 +0000
ROA not after: Tue 25 May 2027 02:35:11 +0000
asID: 143624
IP address blocks: 240a:a3ce::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:40:44:b4:49:7f:72:29:3d:ab:ef:3f:29:ac:e9:fd:30:d7:c2:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:11 2026 GMT
Not After : May 25 02:35:11 2027 GMT
Subject: CN=31A17DDCE39D0F60056F2CFDE35A34C0E16D6DAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:35:13:69:60:54:7b:45:73:e2:d0:92:81:ac:
a2:0e:7a:ab:82:8b:b0:8c:fb:48:07:d4:2c:52:85:
63:cc:03:8e:69:67:32:bc:3b:bf:1f:ce:58:2a:65:
26:23:91:d3:dd:ab:a8:ed:38:aa:19:a9:fa:da:d1:
cf:d7:d1:a1:a5:e6:53:0c:d0:c7:86:68:20:37:4f:
4d:12:cc:a0:b1:a2:98:ad:a9:f9:f1:de:0e:e5:01:
3b:be:2b:78:d3:2b:4b:59:14:89:fa:e5:4e:6a:21:
a7:48:68:52:4a:dd:25:7d:2c:c9:8a:5e:eb:b8:ed:
0e:b8:9d:91:16:c7:b6:1f:69:9b:9b:e5:75:88:09:
3e:70:6c:59:cf:04:50:ad:ff:76:14:47:23:db:dc:
ce:db:4b:d1:d1:93:b2:ac:23:87:ee:8e:77:49:40:
7e:07:25:e4:1a:e1:d3:9c:bf:05:18:81:df:85:c6:
82:ab:ef:b7:03:90:83:cd:e0:0f:19:a7:98:34:89:
5f:e7:f5:27:36:55:2f:f0:1b:79:fb:11:3e:2e:00:
c9:3c:fb:ce:ca:0a:51:c8:5b:cd:d8:2d:89:3b:98:
c4:08:59:8b:ad:7e:47:1d:bd:7b:60:91:b5:f2:c0:
ee:04:e1:7d:a1:08:b9:cb:0c:5d:e7:67:21:5c:2d:
aa:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A1:7D:DC:E3:9D:0F:60:05:6F:2C:FD:E3:5A:34:C0:E1:6D:6D:AA
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143624.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3ce::/32
Signature Algorithm: sha256WithRSAEncryption
4e:2f:fd:d8:0a:3d:ce:4e:9f:37:13:eb:07:58:a0:41:31:9d:
72:38:a2:26:96:7e:18:52:3a:70:b1:55:b6:dd:1d:57:89:e0:
53:43:53:3f:2d:0f:85:7a:20:ba:1f:87:6f:eb:54:a2:60:9e:
eb:91:af:b6:a1:8a:5a:19:0c:57:94:fe:e0:f1:ca:f1:d1:cd:
a3:c4:4a:0f:c6:dd:37:3d:26:12:8f:cb:25:67:b6:78:33:a0:
2e:af:87:ac:d0:56:06:13:d2:31:f8:c2:49:b9:b6:9c:03:e3:
a7:a7:c0:47:e6:98:84:31:c4:b6:a0:4e:e9:cb:9b:f1:3d:6a:
a0:72:f4:23:78:c4:a3:a4:4a:fc:e3:d5:1d:b8:10:6c:32:15:
6f:c7:c7:f9:5d:c8:8d:38:1d:4e:b1:43:83:cc:e7:51:ce:aa:
77:4b:70:8d:f6:61:83:69:aa:42:29:d0:98:7f:13:de:2b:5b:
5e:e2:d2:dd:3b:b3:00:48:85:13:7e:19:e9:6e:e3:91:08:9f:
16:6a:0a:66:c3:5f:07:c7:93:14:f0:9f:2a:e5:38:a6:57:89:
30:e4:0d:48:13:fb:6e:9d:31:d6:36:3b:51:ba:bc:15:a2:69:
8c:c4:f7:a7:f9:f1:2d:10:05:2d:e3:c6:2b:c4:07:cb:cd:64:
87:15:cc:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:42 2026 by rpki-client