Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143648.roa
File: AS143648.roa (raw, json)
Hash identifier: iU6iJvd/4Qk7xYY/jPG62H0Ry8klh88e3uVTPtoGfCo=
Subject key identifier: 8F:4B:82:10:A3:DF:60:AC:FF:29:FC:2B:DF:C7:CA:B8:50:CB:DA:BC
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 173002CCE9075E9F75C6A18E04110176678D962D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143648.roa
Signing time: Fri 22 May 2026 04:08:15 +0000
ROA not before: Fri 22 May 2026 04:03:15 +0000
ROA not after: Fri 21 May 2027 04:08:15 +0000
asID: 143648
IP address blocks: 240a:a3e6::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:30:02:cc:e9:07:5e:9f:75:c6:a1:8e:04:11:01:76:67:8d:96:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:15 2026 GMT
Not After : May 21 04:08:15 2027 GMT
Subject: CN=8F4B8210A3DF60ACFF29FC2BDFC7CAB850CBDABC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:73:9b:23:fa:39:95:f7:00:b7:45:c8:5a:31:
91:d3:60:82:82:84:de:d5:00:8c:89:9e:7a:de:64:
c3:48:4e:62:d6:a4:f1:53:8c:76:78:aa:c4:8d:e0:
08:5f:87:59:c7:e8:f8:ab:85:45:69:9d:ac:5b:52:
b2:8a:63:cd:a6:45:b5:53:cc:23:7f:be:93:cf:5a:
3e:27:8d:d5:1d:1c:ed:b1:6a:e2:f8:9e:14:de:bc:
ba:63:ee:1e:fd:7f:54:0f:44:99:7f:9d:d5:8b:bf:
a3:9f:27:a6:2c:24:37:f5:e8:b3:a1:05:a2:98:c9:
5d:8e:f7:50:8d:9a:e2:2b:2e:bd:9c:80:1b:99:3d:
08:cb:29:97:0d:53:4e:b3:0f:b9:f8:85:5b:3e:4f:
77:87:c2:d9:86:3d:1d:23:ce:fc:00:93:48:10:d8:
0d:ba:ed:85:c0:ae:bc:bc:56:bf:c8:ab:85:82:ed:
7a:21:cd:35:28:a2:60:fd:7e:d9:6f:a2:2a:ed:dd:
83:f1:bb:c0:44:8b:29:90:83:8e:dc:1d:80:b7:2f:
71:d9:04:2f:43:f0:bc:7e:07:16:1b:36:68:86:01:
f0:b3:30:53:c0:a5:8c:fe:22:90:27:eb:bd:33:89:
e9:1d:ab:99:b8:94:18:20:ca:0d:41:4c:e9:f5:ce:
65:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4B:82:10:A3:DF:60:AC:FF:29:FC:2B:DF:C7:CA:B8:50:CB:DA:BC
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143648.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3e6::/32
Signature Algorithm: sha256WithRSAEncryption
28:c7:42:3f:1e:5b:1f:f1:f0:9d:09:1a:23:5c:c2:e1:aa:cc:
27:78:04:23:b3:e4:2d:ad:61:4f:4f:bd:d4:5e:e6:fe:8d:6e:
ff:6f:2f:2e:38:06:e0:c3:83:b3:81:5e:ac:2b:22:5b:27:2a:
6a:e9:92:13:3b:49:e5:c8:82:12:58:9e:1d:1a:6d:b0:78:93:
aa:6e:8e:12:38:39:6d:88:b9:6c:f5:c2:3a:0a:e1:dc:aa:32:
da:fb:52:ac:bc:ff:57:a9:79:c5:77:01:c8:48:7c:7f:d9:9d:
ef:42:b9:f5:7a:bb:18:ee:cc:8e:4c:8a:ad:63:6e:cc:d0:dd:
b5:62:8d:6d:1e:93:ab:7e:e7:62:c7:78:f7:e8:3c:52:69:87:
a9:4e:74:e7:b2:04:db:6b:1b:ab:08:d6:3c:f5:92:30:8b:16:
0d:56:1f:59:30:46:70:12:b1:d8:89:46:d9:90:39:9f:c1:e4:
18:3e:c0:99:fa:2a:5a:dd:76:20:e6:0b:52:44:74:8d:6c:d3:
15:70:6a:2c:d1:ca:50:74:10:1e:d0:61:4f:a9:c5:16:3c:5c:
a2:b0:1f:0e:00:31:04:25:02:69:93:41:16:2b:36:7c:a8:44:
5b:47:75:46:a7:88:64:8e:c4:22:41:79:91:62:c9:23:c1:cb:
5d:c0:07:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:49 2026 by rpki-client