Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143639.roa
File: AS143639.roa (raw, json)
Hash identifier: 6asTDHh+WmUVDEsfdaqW8HBxyDN6WRJIPrY4YT6t/7A=
Subject key identifier: 7F:02:4B:8A:05:6B:55:28:37:DC:D5:39:0D:BB:06:28:86:7A:45:BA
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7E1FEAC6D351E9430CDC261B407CA8D299D4C4EC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143639.roa
Signing time: Tue 26 May 2026 06:12:36 +0000
ROA not before: Tue 26 May 2026 06:07:36 +0000
ROA not after: Tue 25 May 2027 06:12:36 +0000
asID: 143639
IP address blocks: 240a:a3dd::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:1f:ea:c6:d3:51:e9:43:0c:dc:26:1b:40:7c:a8:d2:99:d4:c4:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:07:36 2026 GMT
Not After : May 25 06:12:36 2027 GMT
Subject: CN=7F024B8A056B552837DCD5390DBB0628867A45BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:64:6c:8c:3e:2d:33:c9:7b:3b:7b:6d:cc:13:
d6:19:40:2d:8d:f5:2e:d9:29:5e:fc:07:6e:79:bf:
24:8d:a9:9e:e1:34:05:8a:a0:5c:7f:86:79:ec:4a:
31:81:03:90:7e:fd:97:8c:ed:7b:d2:d2:87:ce:1c:
9d:9a:a5:4b:b8:82:5d:27:5c:56:61:cb:1d:ca:c8:
73:bd:84:5f:11:ab:85:1a:87:01:06:67:5e:ea:ea:
b3:4d:bd:88:19:48:46:16:67:af:88:7f:0d:b0:c0:
f6:7e:75:f8:d4:2b:5c:f2:a3:83:ad:41:cd:7b:6b:
ad:c5:6f:42:c8:bc:cc:70:59:7e:0c:26:fa:e0:6f:
c0:38:71:05:b3:4e:93:75:e4:14:25:5b:c4:7f:ef:
e1:04:ab:d1:03:11:34:98:1f:40:7d:8e:00:eb:cb:
86:f6:1d:c6:a9:d0:66:f4:f9:3a:57:0d:be:92:cf:
c3:ec:97:3e:df:09:01:dc:52:9a:39:db:8d:8c:74:
5e:93:a0:66:0d:10:47:d5:93:17:d2:64:d8:fd:e9:
e2:5f:da:b8:c7:99:ab:cd:8e:89:ba:26:7a:8b:13:
8d:e0:7f:c1:e2:3b:24:5a:e8:44:c9:c8:0e:30:38:
17:18:0f:12:03:2c:e8:5f:f1:e8:01:b9:b6:42:e3:
be:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:02:4B:8A:05:6B:55:28:37:DC:D5:39:0D:BB:06:28:86:7A:45:BA
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3dd::/32
Signature Algorithm: sha256WithRSAEncryption
45:c4:06:a6:19:9d:3b:89:d2:37:a2:d4:67:66:c2:29:1b:fd:
0b:39:c4:97:fe:3a:80:13:0d:0c:c5:2b:27:7b:71:26:7c:e8:
0b:3a:6a:45:5a:20:d2:19:ab:1d:c3:d8:3e:c8:a6:8b:09:21:
a7:13:04:ed:92:83:d3:bd:a9:12:98:38:ab:a0:07:26:f8:e9:
8a:c0:6b:8a:cd:ec:b1:50:15:43:6f:25:d9:df:9b:3d:d4:ef:
ae:f2:cd:e9:31:56:d9:7c:cf:32:e7:20:57:88:be:26:e5:70:
af:73:e3:f8:a2:ee:db:2c:f0:1b:e2:21:3e:91:63:8b:77:7c:
f5:3d:41:f8:19:d5:f5:20:99:35:b8:4b:2e:97:88:7d:da:d8:
f2:8e:0e:d9:a3:35:7d:77:d9:fe:d8:db:ed:00:92:27:11:18:
9f:48:e5:ce:f0:07:64:d3:86:e7:26:8a:96:2a:9b:ab:91:42:
1c:a8:49:f9:71:77:22:8c:04:54:55:37:ad:78:ad:a0:9f:b2:
01:88:ed:5e:3e:8a:7d:0c:30:9f:1f:c9:66:a0:d4:e0:7c:93:
ca:a5:f4:38:12:f6:5f:d9:ae:38:50:64:a7:3f:22:c6:7a:84:
6e:af:8e:ec:66:5e:d5:41:42:d8:1f:e1:37:86:46:ef:7b:22:
52:76:ba:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:30:13 2026 by rpki-client