Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143633.roa
File: AS143633.roa (raw, json)
Hash identifier: oWLxWByNsSVVf4ANVGzEUafWjKls0PCbzIxFW3rAeVI=
Subject key identifier: D7:43:E0:22:2D:EC:C2:0E:D1:A8:6F:F2:6B:7B:20:70:EE:71:EE:01
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3B6F22DA5886E10E3CC55A7F2DF6409014A8A7D5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143633.roa
Signing time: Fri 22 May 2026 06:27:58 +0000
ROA not before: Fri 22 May 2026 06:22:58 +0000
ROA not after: Fri 21 May 2027 06:27:58 +0000
asID: 143633
IP address blocks: 240a:a3d7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:6f:22:da:58:86:e1:0e:3c:c5:5a:7f:2d:f6:40:90:14:a8:a7:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:22:58 2026 GMT
Not After : May 21 06:27:58 2027 GMT
Subject: CN=D743E0222DECC20ED1A86FF26B7B2070EE71EE01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:fc:7b:86:4d:98:f5:bc:5f:24:b2:51:0d:50:
af:42:39:1c:e9:18:6e:16:e6:75:fe:22:64:f1:5a:
20:08:2b:be:28:b9:32:6f:78:58:e9:2b:1d:7c:36:
d0:ca:7d:b0:02:08:02:c3:56:9f:39:21:f0:d5:ab:
8b:af:39:0f:9a:dd:4d:a2:52:fb:f5:d0:69:99:be:
5f:d9:29:09:71:1f:54:58:f8:65:4b:de:79:fe:12:
17:4a:41:9c:53:38:3f:bd:a9:aa:2f:b3:6d:20:4c:
6d:44:73:f5:07:5d:05:13:bb:d0:a2:80:c7:e9:f8:
1d:3c:f9:b8:32:41:59:60:51:5c:61:9f:70:cf:df:
a5:ad:2a:c4:35:4a:6d:32:42:6f:76:0b:f0:ed:f7:
25:d9:d9:1d:55:4a:83:98:6a:cb:79:4a:44:9a:b0:
ab:3b:f1:af:2c:89:90:ce:38:bb:09:c9:9d:ac:f1:
92:3d:c0:ee:9b:ee:b8:55:a3:ba:49:29:61:bc:e7:
c1:39:6b:b8:64:37:0a:f3:b1:f7:94:bd:8c:d2:ea:
9e:b1:2b:2f:6f:74:56:bc:3b:25:5c:4a:f6:58:26:
39:a3:6f:5e:f3:86:0b:84:80:e0:88:7a:5c:05:57:
5f:7a:18:17:73:b8:b5:ad:26:91:dd:2a:03:c8:ac:
30:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:43:E0:22:2D:EC:C2:0E:D1:A8:6F:F2:6B:7B:20:70:EE:71:EE:01
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3d7::/32
Signature Algorithm: sha256WithRSAEncryption
8b:10:ee:6f:65:f9:4d:e4:1f:8b:c5:c6:e9:6a:40:33:18:c0:
3b:9f:cc:1c:9d:fa:db:7a:3f:2e:d5:fe:1a:54:2f:91:a4:88:
a9:a4:90:2e:ec:23:69:37:a9:22:2e:05:45:a3:f3:19:5b:d4:
0e:e9:f5:e7:42:59:ac:b6:15:c7:8d:6c:2d:0a:79:8b:a0:78:
e3:f1:a6:2e:48:46:6d:26:97:11:aa:07:1f:46:34:26:21:26:
b0:b7:19:5b:3e:c7:50:1b:be:df:29:a2:a2:b7:79:6c:0e:11:
15:1d:4f:4e:c4:b1:e6:fd:b6:ec:86:3d:6c:50:7e:93:92:ea:
fe:b0:bb:3f:a8:d5:e4:7a:cd:27:fc:16:c4:1f:c5:ca:25:3b:
90:a6:b8:7c:52:11:65:bd:90:43:d4:44:84:5e:7c:cf:fa:1d:
03:6b:65:b9:2e:2b:a4:8c:1c:31:d0:c1:36:4d:23:34:87:e8:
4d:30:ae:59:ce:68:24:00:15:7f:da:66:7c:41:05:2f:5a:2a:
e6:5b:e2:d0:7c:c6:24:59:3e:3e:9a:a8:f6:34:ae:85:c6:de:
77:cd:7e:02:c4:4d:15:d6:e1:a4:d7:c1:69:06:76:46:7c:a7:
ab:be:bd:9b:e2:31:75:0a:e4:06:19:b2:9b:a1:cf:53:97:02:
c7:8f:61:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:51:00 2026 by rpki-client