Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143656.roa
File: AS143656.roa (raw, json)
Hash identifier: C9adTZmAL43fQJk7uOfdKDR7KzB/m0pmrMSLmlH1duw=
Subject key identifier: D7:33:88:0C:4B:BB:01:5A:84:32:1C:7F:40:8E:D8:B9:60:E7:50:D3
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0350408C2E671C5DD13CA9382DA2786955482AEF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143656.roa
Signing time: Fri 22 May 2026 07:24:25 +0000
ROA not before: Fri 22 May 2026 07:19:25 +0000
ROA not after: Fri 21 May 2027 07:24:25 +0000
asID: 143656
IP address blocks: 240a:a3ee::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:50:40:8c:2e:67:1c:5d:d1:3c:a9:38:2d:a2:78:69:55:48:2a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:25 2026 GMT
Not After : May 21 07:24:25 2027 GMT
Subject: CN=D733880C4BBB015A84321C7F408ED8B960E750D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ec:d7:1d:6d:7f:91:eb:7f:7d:d6:c8:66:9d:
80:fc:33:2e:ec:41:7e:c2:d9:c1:ba:c1:e0:78:51:
93:4f:75:23:00:ec:b8:d6:f3:a8:1c:61:7a:31:f6:
5b:01:66:4d:f9:89:d4:ba:bd:76:50:7d:27:25:c3:
41:22:1d:14:ab:57:36:3b:14:e1:01:c3:34:95:a4:
81:57:ea:81:d7:5f:58:25:c2:77:88:a2:da:18:ac:
d8:fe:f3:68:02:4c:39:c4:a8:f8:cf:dc:1c:b9:22:
6c:80:76:4e:06:8b:0a:a8:98:ba:ed:af:44:ae:65:
33:d9:4e:8f:c0:51:6e:e4:77:f1:1b:da:a1:75:e8:
c4:ee:d2:d1:d1:af:e3:61:63:70:76:3e:3a:da:9b:
8f:a9:c8:73:b4:36:cb:4d:03:00:94:3a:3a:78:c5:
19:9d:77:53:23:f3:eb:cc:12:d1:b9:57:06:11:80:
84:1f:6e:cc:23:03:ff:85:35:ed:33:4d:26:da:e1:
4f:8c:fd:49:e9:11:67:72:c8:9b:40:4d:48:bd:fc:
26:f1:6a:b2:e2:8c:78:59:f7:aa:b4:7c:77:2b:f7:
fd:63:b6:a6:d8:25:34:2b:53:0a:50:32:e9:05:34:
ad:f8:0b:26:09:ac:80:57:61:5b:23:bf:c1:54:08:
57:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:33:88:0C:4B:BB:01:5A:84:32:1C:7F:40:8E:D8:B9:60:E7:50:D3
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143656.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3ee::/32
Signature Algorithm: sha256WithRSAEncryption
45:7d:0a:45:1d:d6:00:cf:f5:61:2d:fb:bc:2e:ef:54:9b:be:
e4:eb:e1:b7:63:4f:35:33:0f:95:8b:84:69:bc:d1:37:c1:46:
6e:6e:2e:58:60:e6:e5:48:cc:2e:df:b3:fc:ac:07:0e:3e:42:
cf:ab:ec:4e:42:5a:c4:16:e0:f1:31:07:dd:01:a1:72:ae:08:
37:9d:60:37:cf:62:27:9e:a9:9c:4c:e6:b8:61:c2:f4:ba:3f:
bf:11:6f:aa:0c:ec:ac:6a:b4:a3:ad:28:81:72:76:23:7c:41:
d2:8e:e0:70:ea:73:bb:6b:38:8c:08:f8:5d:79:4d:28:18:04:
31:48:d3:8a:e6:93:88:4d:e7:bd:36:af:37:47:92:42:88:6f:
e0:a1:ee:7e:5c:d5:4a:41:bc:bf:e4:ba:87:d8:69:2c:ee:39:
92:a8:43:53:0d:7a:02:83:d3:07:ac:52:5b:91:a4:52:b9:28:
1e:3e:56:1d:66:db:dc:95:85:5f:f1:0a:43:39:c5:1e:78:38:
4e:b7:f1:65:79:17:3c:0a:9d:c7:d7:c2:fa:eb:6b:56:b6:8c:
fb:07:c1:bc:44:f6:f4:38:53:22:07:2a:ca:67:d7:50:2f:c0:
38:c8:ec:fe:5d:5a:fc:b3:5e:8f:16:5f:3d:56:0c:37:d8:01:
59:5f:0a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:36 2026 by rpki-client