Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143640.roa
File: AS143640.roa (raw, json)
Hash identifier: c5gefdpYv9tNqwAhymzHgvSN3xcY5MJ9M4y38wIfah0=
Subject key identifier: 90:0A:75:FB:08:33:10:BC:71:EF:04:B5:FC:5D:F9:8A:AE:01:BF:7F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 670E12053FA5AB8F7C9F5707F5AC4D48C525DF89
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143640.roa
Signing time: Tue 26 May 2026 01:13:09 +0000
ROA not before: Tue 26 May 2026 01:08:09 +0000
ROA not after: Tue 25 May 2027 01:13:09 +0000
asID: 143640
IP address blocks: 240a:a3de::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:0e:12:05:3f:a5:ab:8f:7c:9f:57:07:f5:ac:4d:48:c5:25:df:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:09 2026 GMT
Not After : May 25 01:13:09 2027 GMT
Subject: CN=900A75FB083310BC71EF04B5FC5DF98AAE01BF7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b0:96:5e:3e:8a:72:11:3d:96:f5:cc:9e:64:
e0:33:c7:2c:0b:d3:17:f0:6c:5c:3d:66:9b:86:79:
09:b0:7b:71:a2:9e:de:7f:d2:4a:9e:42:de:93:2b:
72:7a:78:3f:85:49:4c:51:ca:88:1c:07:90:95:b4:
07:95:8a:d0:28:4d:5d:d0:d7:64:d1:1a:28:da:56:
b8:18:05:5d:89:74:4b:ab:08:2c:ff:bf:f4:17:45:
cc:c6:8f:db:67:5a:20:99:ca:b1:57:de:89:d5:ca:
94:5e:2a:83:40:83:9d:34:98:57:46:48:86:32:10:
76:db:ac:8e:c0:17:fc:85:e1:9c:0a:29:1e:3e:0d:
23:f7:8e:2b:b1:b7:f1:97:4b:30:c5:6a:3b:78:b5:
46:83:12:86:3b:01:22:2b:57:58:86:97:bc:81:50:
25:3c:c1:27:b8:8e:38:95:0b:bc:d3:2c:48:61:93:
6d:db:c7:85:4d:91:97:43:77:ee:c8:5f:a6:17:b8:
1e:6c:f3:d8:23:35:58:7e:4d:8c:4f:aa:36:e1:c8:
27:0c:0d:5e:9b:dc:68:cc:e0:d7:04:3b:ef:77:c8:
f6:2e:7e:57:09:6a:38:2b:cf:9b:19:2f:10:59:2d:
60:0e:7e:db:0b:81:bc:e0:d1:ac:af:82:ac:fe:03:
c1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:0A:75:FB:08:33:10:BC:71:EF:04:B5:FC:5D:F9:8A:AE:01:BF:7F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143640.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3de::/32
Signature Algorithm: sha256WithRSAEncryption
8d:a6:b6:83:ab:7a:c1:98:fd:b4:cf:79:71:e2:2b:97:c2:ac:
fb:d8:a3:b2:9a:1e:81:c8:23:73:e6:b6:7f:8e:bf:5f:09:aa:
b9:19:94:69:fb:d1:9b:68:24:7c:3d:98:69:ba:9e:10:01:2e:
f0:82:1e:ad:7b:e0:1f:bb:98:7a:e6:65:6e:77:ee:08:e9:8f:
dc:a9:c8:df:f6:8e:91:c0:ba:63:16:2a:f5:82:be:66:e4:b1:
62:29:57:46:8f:7b:bb:74:d5:aa:28:57:75:98:4f:82:06:f1:
60:2c:07:e4:53:f6:d5:ec:ab:44:bd:cb:c4:38:64:ad:3a:10:
40:35:ce:74:4b:35:25:7b:4f:49:80:be:e8:ce:21:fa:80:4e:
62:4f:52:28:2a:69:47:de:36:f1:22:53:55:c0:78:13:74:dc:
41:85:7c:1a:30:50:9a:5b:cd:be:e2:18:94:fb:20:5e:b2:d2:
bb:21:0f:ca:12:25:a9:c8:62:ae:a7:d9:f7:3a:37:a0:ac:76:
15:fb:0a:13:95:b9:49:2b:65:f8:b4:97:66:fa:19:2b:1c:2f:
be:7a:63:09:68:b5:1f:88:dc:e4:21:79:9a:67:c6:fd:6b:e2:
8a:be:76:c9:d2:83:d6:7a:46:15:38:b2:66:5e:40:a4:19:84:
b5:a6:64:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:49 2026 by rpki-client