Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143653.roa
File: AS143653.roa (raw, json)
Hash identifier: 1+fObi/PVnUwy0Tu3ZmJKP+OasYv6DCVjuYahCCYTEU=
Subject key identifier: E1:8C:39:61:44:28:12:82:57:1D:E2:28:DC:01:EC:8E:36:5C:9A:53
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3FEDB2F4E9C8EDBDC46508BFC31ADED1A37D996A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143653.roa
Signing time: Fri 22 May 2026 07:32:20 +0000
ROA not before: Fri 22 May 2026 07:27:20 +0000
ROA not after: Fri 21 May 2027 07:32:20 +0000
asID: 143653
IP address blocks: 240a:a3eb::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:ed:b2:f4:e9:c8:ed:bd:c4:65:08:bf:c3:1a:de:d1:a3:7d:99:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:20 2026 GMT
Not After : May 21 07:32:20 2027 GMT
Subject: CN=E18C396144281282571DE228DC01EC8E365C9A53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:61:d9:51:92:7c:fc:39:ae:0c:54:53:be:19:
37:9b:ed:b8:23:df:1f:1c:e0:39:28:03:58:41:46:
0b:46:49:1b:eb:35:b0:63:c7:d4:30:6a:cc:d7:b6:
87:39:61:a7:80:4f:c0:24:98:64:1b:53:24:2a:7b:
aa:6b:80:a0:fc:98:17:f4:48:4f:b5:0b:95:2a:79:
12:22:64:ce:1b:f0:51:f7:68:0f:6f:ce:9b:3d:35:
57:4c:65:95:ca:45:d6:c2:8c:9f:a6:ce:02:28:0c:
ba:fd:0c:46:ce:73:f6:ae:a4:4b:53:e2:3f:e1:c6:
cf:39:ae:74:e9:ff:a6:9e:16:34:66:b5:ad:44:db:
a1:88:fb:23:78:3b:8e:cc:42:15:d7:a0:4b:7b:79:
15:db:f6:74:00:2f:aa:4c:64:d3:fb:7a:b5:b6:6a:
6f:e7:21:68:5a:78:84:7a:ae:ae:a7:2c:bd:77:93:
f0:f6:34:7b:7f:50:81:f8:b1:fc:66:f7:72:c5:07:
3d:9e:8a:fd:e8:42:bb:2f:bb:21:53:f6:5c:48:e6:
fd:f8:32:06:a3:85:67:5f:6f:5f:9d:af:9d:e6:b3:
25:89:eb:23:84:78:12:03:20:2b:b0:43:bd:ce:25:
86:20:8b:bc:13:bf:6c:d1:ff:f0:77:bd:4d:44:17:
9a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:8C:39:61:44:28:12:82:57:1D:E2:28:DC:01:EC:8E:36:5C:9A:53
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143653.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3eb::/32
Signature Algorithm: sha256WithRSAEncryption
04:ee:a7:d6:b5:f5:53:a1:66:5b:95:52:57:fb:de:ec:eb:77:
6c:69:a7:26:e6:82:3e:4a:40:6f:5b:a4:de:9d:92:a7:13:2e:
a8:8b:a9:1f:70:e8:65:84:7d:90:bf:c1:83:2a:c1:9b:dc:2b:
b7:49:82:6c:50:27:34:e4:78:e6:6b:54:50:db:1d:84:45:c1:
69:38:34:e4:b1:6e:ad:b5:14:de:e1:36:23:ff:89:59:9d:b5:
6e:bf:5d:a6:d9:55:f2:af:02:94:bf:91:d7:0b:5f:61:6d:be:
4e:07:24:7c:eb:59:4c:40:da:ad:65:cc:d6:e0:f5:5d:1d:b7:
e3:e4:a5:71:8b:9e:21:b9:59:69:75:e7:4f:93:98:4d:39:69:
62:74:48:94:a7:8f:7b:68:48:a5:40:58:0f:01:4f:d5:89:21:
c7:2d:56:58:6c:64:cb:e7:4b:7e:0c:4f:cb:92:47:b2:57:60:
80:6c:9e:21:74:c2:f9:be:1b:10:d6:54:84:f4:81:3c:8b:f2:
71:d4:a6:ce:8f:57:27:c3:6d:ef:5b:fe:14:ce:7d:2f:6f:67:
30:8d:eb:59:7c:52:f7:e0:80:1c:3f:70:5f:6d:6a:ff:8e:28:
45:4f:1e:05:3f:d6:da:3e:1a:16:bb:0f:b3:08:61:ff:92:c7:
87:b1:cf:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:17 2026 by rpki-client