Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143655.roa
File: AS143655.roa (raw, json)
Hash identifier: hTBxm/fZY1J1z9R2OPNnKtd7KyF3SFEGtvB7YNWSvN4=
Subject key identifier: CA:27:8E:63:E9:A7:6C:A0:DC:71:3B:4F:18:84:D9:CC:1D:54:7A:B9
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 43299C5D555733CED1A62EE5145D00E19F36B60C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143655.roa
Signing time: Tue 26 May 2026 01:13:23 +0000
ROA not before: Tue 26 May 2026 01:08:23 +0000
ROA not after: Tue 25 May 2027 01:13:23 +0000
asID: 143655
IP address blocks: 240a:a3ed::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:29:9c:5d:55:57:33:ce:d1:a6:2e:e5:14:5d:00:e1:9f:36:b6:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:23 2026 GMT
Not After : May 25 01:13:23 2027 GMT
Subject: CN=CA278E63E9A76CA0DC713B4F1884D9CC1D547AB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6d:66:5d:5b:c7:fa:35:f7:40:e1:48:7f:67:
45:bb:4e:94:a8:22:d1:1b:ab:1c:22:c9:cd:ad:0e:
4d:4d:a8:0f:f3:a0:b9:a2:41:5a:7b:eb:98:8a:3d:
33:67:23:d4:1a:73:0d:07:b1:7f:30:3b:0f:54:45:
14:46:57:3c:46:b2:c0:84:b4:11:8a:bc:29:6a:3e:
8d:94:27:05:67:8b:6c:a4:8c:8b:dc:d8:8d:ba:09:
cd:34:ea:b6:ea:1c:50:de:14:24:64:7c:0c:30:60:
7d:88:df:5f:18:5d:05:61:76:3b:15:dd:be:4f:5c:
22:68:1a:e7:92:36:c6:b4:9a:d6:dc:fc:ae:8e:17:
12:7a:de:25:4c:0a:3e:f9:d3:f2:e8:38:91:7b:af:
f5:11:63:80:7b:ce:2d:ff:65:32:8b:8c:e6:fe:4b:
8c:14:37:05:30:0b:01:7c:31:c6:b6:1d:72:dc:48:
04:9d:e4:7f:c3:dd:dc:fd:ca:58:b0:7c:3a:a6:07:
f5:eb:f1:a6:50:09:c3:76:de:0e:42:9e:e0:e9:62:
43:16:57:05:07:a7:70:37:48:c4:6f:97:0f:61:14:
d3:e0:03:10:ca:53:a9:2a:5f:07:56:36:63:21:ce:
3c:bf:3c:13:04:3e:fc:d9:31:23:8f:63:6d:c8:42:
65:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:27:8E:63:E9:A7:6C:A0:DC:71:3B:4F:18:84:D9:CC:1D:54:7A:B9
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143655.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3ed::/32
Signature Algorithm: sha256WithRSAEncryption
82:1c:34:79:88:a7:58:88:03:63:07:5d:33:5e:80:42:c3:a1:
67:67:89:5a:a6:b3:fd:0b:77:60:81:a2:24:6b:a3:67:da:bf:
e9:5b:ca:c4:66:14:0a:4c:06:cf:e5:50:c2:b3:f8:0e:77:f8:
84:fa:9c:bf:12:44:cc:4d:cc:13:83:e0:4c:55:34:c9:ad:9e:
28:1a:b7:5a:30:51:91:eb:ea:bf:5d:79:24:c9:26:34:28:02:
79:e9:1f:5c:a6:5e:f6:09:bd:8d:fa:a5:14:f1:27:5e:e6:d6:
fd:d6:13:8b:e2:b5:d9:4c:aa:fe:ce:ab:b7:41:5f:7a:5d:d5:
1b:1b:35:bd:48:3d:f1:b7:5e:73:7c:16:30:44:ff:f1:4b:26:
61:92:20:65:5f:b6:8f:19:b4:91:e2:1f:71:31:6f:cf:78:da:
ac:98:c2:28:99:29:49:14:b5:5f:f9:53:75:51:31:90:b6:f5:
23:1f:ca:8d:1f:75:d5:a0:f2:17:38:ed:31:cb:d5:96:ee:c2:
7f:c8:13:4b:2f:74:d6:72:3f:35:de:e3:32:2f:60:4d:58:e8:
11:9b:1c:fe:cc:61:8e:69:23:54:af:c1:45:d7:02:9e:33:ae:
dc:fe:f7:cb:50:1c:86:60:d2:8e:32:0d:56:3a:52:4c:3f:63:
67:86:ec:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:19 2026 by rpki-client