Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143643.roa
File: AS143643.roa (raw, json)
Hash identifier: 2xam28pv673xP2r0Iu+eo68gyyPNqOTa4pc0WoiGzd4=
Subject key identifier: 95:67:9D:EB:AB:6F:40:A0:8A:32:23:6D:49:CB:0F:20:4A:22:15:3E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6D42E20D568748C6FD25F54E297829F618E6500E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143643.roa
Signing time: Fri 22 May 2026 07:24:40 +0000
ROA not before: Fri 22 May 2026 07:19:40 +0000
ROA not after: Fri 21 May 2027 07:24:40 +0000
asID: 143643
IP address blocks: 240a:a3e1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:42:e2:0d:56:87:48:c6:fd:25:f5:4e:29:78:29:f6:18:e6:50:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:40 2026 GMT
Not After : May 21 07:24:40 2027 GMT
Subject: CN=95679DEBAB6F40A08A32236D49CB0F204A22153E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:46:f3:9d:4c:f9:c8:f9:ea:88:ff:6f:85:0f:
d4:4e:0b:0e:bd:67:26:36:63:10:de:1b:84:4e:50:
0f:0d:17:39:77:21:0d:ca:2d:42:c1:d7:9b:3b:70:
9b:db:fc:b7:d6:9c:52:da:0c:f1:47:57:eb:ab:72:
35:6b:f9:c9:d5:cf:d6:72:7f:cd:5f:a0:5f:84:d2:
2d:c6:43:47:e7:3d:7e:e7:74:68:b9:a9:a9:64:88:
6e:bc:09:a2:7b:39:fb:f0:d1:87:c9:94:d8:33:2b:
24:d2:f6:75:92:ff:3a:2f:c5:aa:77:ff:34:e5:24:
04:c7:53:2d:23:59:6e:0c:3c:19:1e:78:e3:2b:05:
e8:9d:8f:ad:6b:cb:ad:91:de:30:18:af:31:5b:c9:
ff:71:9f:5a:fb:c0:dc:5d:4f:5d:8f:88:b3:84:e0:
45:83:1e:3c:1e:aa:ad:cf:38:27:ac:60:4a:e6:22:
29:a8:58:61:7e:e7:8f:47:39:a8:27:ce:f1:73:73:
e4:53:37:fc:f4:68:dc:7c:4b:5b:6e:6f:b5:4c:d1:
0a:cd:64:32:cb:f4:1e:3d:c4:d5:44:6c:9b:dd:ff:
d0:e1:fe:2a:51:9a:56:fd:50:f9:39:80:a9:bc:73:
9e:5a:e3:a9:1f:c4:71:a0:49:e6:3e:79:e9:7b:87:
57:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:67:9D:EB:AB:6F:40:A0:8A:32:23:6D:49:CB:0F:20:4A:22:15:3E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143643.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3e1::/32
Signature Algorithm: sha256WithRSAEncryption
56:dd:16:d6:3c:64:60:d0:37:46:12:50:eb:ec:db:3f:ab:de:
43:b2:be:67:27:39:df:f5:d5:a4:59:23:23:bf:7a:8a:82:6d:
84:fb:3a:24:f9:c1:5d:5c:74:55:c7:0c:2f:be:a2:c3:fc:90:
c6:21:c2:ab:c2:a7:00:25:33:3d:1a:11:05:aa:d7:4e:5c:c8:
53:fa:3c:46:b6:76:6a:c0:bc:79:6b:f0:e4:05:15:49:e0:2c:
4c:fc:29:ce:83:43:bd:40:ba:a5:3d:5a:ac:32:7a:6b:ac:83:
e3:66:e0:8b:38:9f:5a:f0:89:5e:ca:4b:15:09:60:3b:5c:f4:
1a:d8:e2:ea:f2:22:28:14:4c:90:a3:aa:ff:00:f5:9a:04:03:
10:1c:c5:06:51:f5:47:d2:c6:00:13:b4:66:e9:62:55:d7:07:
65:83:6e:44:e7:06:96:6b:07:2d:71:af:13:60:26:e9:f8:37:
e7:2c:f7:ff:f4:66:e4:f8:2c:54:e7:e9:2d:64:bb:62:79:60:
e3:16:ce:ed:35:a1:26:9f:cf:94:76:5c:36:8c:ff:67:f4:f8:
08:b9:cc:d0:3e:bc:55:43:f7:35:29:60:55:9d:fe:8e:11:af:
3f:a1:18:e2:d2:b4:5c:e8:05:ed:e9:44:51:11:a5:66:d4:24:
53:51:ff:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:50 2026 by rpki-client