Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143677.roa
File: AS143677.roa (raw, json)
Hash identifier: 2giOtfM/QeJBBd06+PtISwYLzvNFf7ie4K4i+feHvfs=
Subject key identifier: 70:EF:31:7B:7A:D9:77:4F:01:7E:2F:3C:3B:1D:44:86:8F:B9:52:28
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 73FA90BB28A1982C83D8683359117F5C0678A9BE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143677.roa
Signing time: Fri 22 May 2026 02:47:36 +0000
ROA not before: Fri 22 May 2026 02:42:36 +0000
ROA not after: Fri 21 May 2027 02:47:36 +0000
asID: 143677
IP address blocks: 240a:a403::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:fa:90:bb:28:a1:98:2c:83:d8:68:33:59:11:7f:5c:06:78:a9:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:36 2026 GMT
Not After : May 21 02:47:36 2027 GMT
Subject: CN=70EF317B7AD9774F017E2F3C3B1D44868FB95228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:50:db:dc:85:87:e0:1b:d0:c0:bf:0f:be:82:
8a:db:8b:41:ab:ad:5f:f0:ef:f2:7e:a0:43:2e:2c:
82:d4:22:f4:d9:aa:9b:d2:03:7c:89:09:91:84:6d:
1f:10:dd:86:4a:43:de:2c:65:79:f8:48:d0:70:05:
f3:e5:90:84:41:96:32:e9:cf:a6:c5:a7:fe:bd:8a:
67:20:d4:b2:a4:70:49:20:f6:8c:ac:95:90:dc:a4:
5c:2a:fd:98:af:b3:e3:6f:b7:8a:ad:79:fb:a8:34:
aa:52:13:50:ac:c6:86:21:fd:08:5b:e1:83:5b:3a:
20:82:77:ff:bd:30:c7:58:05:9d:6e:15:9e:2c:04:
9b:a1:1e:c3:4b:ee:4d:2c:1c:b5:e9:51:9d:4f:25:
47:fe:b8:91:38:ba:a7:56:72:28:fd:85:c5:38:32:
18:15:c9:3b:66:4c:f9:f1:d0:0d:bc:bc:66:0b:02:
5c:5f:8c:49:be:20:2e:d7:06:cd:8f:e6:cf:6f:f8:
4d:6b:19:bd:dc:e4:28:02:21:b1:05:33:ca:08:8a:
e5:4e:4d:52:c5:c0:6f:b3:5f:e3:60:b2:3b:99:d4:
6e:10:1e:31:c7:eb:8d:43:93:99:ce:c3:3c:3a:34:
70:e9:c4:2c:4f:91:00:35:58:e1:d9:49:03:4d:cf:
4d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:EF:31:7B:7A:D9:77:4F:01:7E:2F:3C:3B:1D:44:86:8F:B9:52:28
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143677.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a403::/32
Signature Algorithm: sha256WithRSAEncryption
5d:2d:a6:cc:26:06:c9:ae:b6:3c:e2:5d:fd:e2:df:bb:dd:e3:
9f:4d:24:b7:a3:6c:1f:eb:ed:2e:a3:fe:db:65:eb:87:db:9c:
de:b7:10:b8:aa:7e:06:6e:53:53:10:42:59:f9:5b:3a:57:e5:
73:e4:dc:f1:44:8c:3a:5e:ee:c7:32:e1:7a:05:84:0c:69:17:
1e:19:14:13:aa:c0:ea:1b:f5:d9:dc:a8:f4:d4:d5:a4:df:9b:
42:03:d8:8b:96:48:37:cc:e5:92:d7:6c:d6:9d:9f:68:2f:b7:
a9:74:62:ea:32:69:97:3c:4c:aa:84:c9:90:d8:9d:1c:ec:91:
0a:f3:29:aa:c7:9c:d2:f5:ac:1b:43:d5:dc:7f:64:38:e0:4b:
1b:da:66:68:07:d3:2c:ef:cf:20:e9:91:a3:7c:39:b6:26:ca:
0d:5a:86:7f:17:be:48:2b:15:c3:02:1a:20:48:5e:51:8f:8d:
c6:82:12:7a:83:91:73:e3:ad:b6:f8:d8:14:1b:68:41:08:8a:
1d:bb:5a:c1:bf:2b:5e:3a:50:70:de:27:77:c7:18:52:4b:eb:
98:e1:75:d8:5a:bd:80:af:42:be:7d:81:b7:75:03:35:4e:f3:
da:33:83:43:51:8b:03:cf:18:c4:9e:71:f9:7d:81:c1:aa:94:
fd:e1:90:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:16 2026 by rpki-client