Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143687.roa
File: AS143687.roa (raw, json)
Hash identifier: c7iu0cBkRWSsrRN8fBVWQ1iaHNfQKE/WqTkFN++gTu4=
Subject key identifier: FB:31:B9:DD:16:DF:CE:94:EF:7D:8B:72:2C:86:CC:C1:C6:A5:55:1C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 28FE9A5B87DFF1E2DD47A45EB4C2FE5631496349
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143687.roa
Signing time: Fri 22 May 2026 04:08:11 +0000
ROA not before: Fri 22 May 2026 04:03:11 +0000
ROA not after: Fri 21 May 2027 04:08:11 +0000
asID: 143687
IP address blocks: 240a:a40d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:fe:9a:5b:87:df:f1:e2:dd:47:a4:5e:b4:c2:fe:56:31:49:63:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:11 2026 GMT
Not After : May 21 04:08:11 2027 GMT
Subject: CN=FB31B9DD16DFCE94EF7D8B722C86CCC1C6A5551C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:87:e9:13:7e:70:e3:18:72:cb:3d:2e:cf:f4:
48:7c:c9:c7:fa:92:5e:24:36:00:86:29:df:85:7b:
60:50:db:be:b9:91:58:d1:46:5f:30:07:fe:69:02:
5b:8d:5e:03:66:af:92:48:a2:be:4c:bf:fa:77:c4:
97:92:6b:3f:82:36:88:28:77:ce:f6:91:8c:60:c9:
6a:94:e9:5f:22:33:2b:15:8e:40:c8:08:de:8a:34:
0c:9d:08:45:87:9c:d0:2c:e4:50:77:05:76:99:76:
09:8f:cc:b7:b2:12:c1:99:9d:7f:3f:7b:06:44:dd:
7e:70:84:6d:bb:1f:ba:01:1f:5c:ec:98:d6:a9:f0:
68:1f:a5:90:a7:b7:0a:47:ad:f6:05:30:d8:b1:c1:
f3:62:ab:bd:5b:a4:6a:a3:51:cf:d0:84:98:c4:ee:
dc:4a:79:0e:0d:20:95:65:0b:5d:03:e5:f1:9c:9b:
e4:29:73:45:6d:38:8b:ec:18:de:d0:22:04:96:59:
84:2d:24:35:cb:64:20:26:ec:35:84:6e:85:50:b4:
b7:a8:8b:9d:ec:da:af:5e:f0:3e:96:43:04:43:f9:
01:84:97:c5:a2:36:bd:84:40:94:3c:61:eb:ac:cd:
e6:a6:76:01:5d:a8:d5:e8:b4:a7:3d:61:f0:49:92:
4d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:31:B9:DD:16:DF:CE:94:EF:7D:8B:72:2C:86:CC:C1:C6:A5:55:1C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143687.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a40d::/32
Signature Algorithm: sha256WithRSAEncryption
7b:77:4d:a9:a5:9b:4b:e4:fd:d0:44:72:d9:f0:e7:4f:af:6d:
21:33:ac:a2:c1:4e:7b:bf:52:ea:06:80:8f:84:77:fe:a0:ea:
2c:44:e5:af:d1:4d:b9:c6:ca:78:f3:f3:af:cf:37:96:14:65:
89:e0:64:c1:02:c3:27:65:00:2a:e2:b0:cc:40:37:a8:e4:40:
37:14:5d:c8:33:a3:b4:7c:ac:a0:16:e8:08:56:d7:20:7e:4a:
7b:7f:af:77:5d:b0:f8:cf:33:8f:55:a6:56:61:34:10:37:64:
7a:ba:83:11:01:c5:73:05:10:5f:2f:b7:c4:4c:77:4f:46:4c:
2c:a0:5b:39:49:f0:8a:02:f9:bf:a9:80:4d:b8:da:91:d6:94:
f0:87:36:22:b4:8a:89:40:f8:6c:b4:03:17:bb:1e:dc:fe:53:
44:0f:c5:0f:b6:a5:3b:5e:40:66:47:78:f7:5c:f6:6c:31:ac:
7a:b0:f9:cb:1f:aa:2c:21:93:c2:71:cd:3e:64:c6:e2:4f:3f:
7f:a1:ff:b8:7b:11:ef:83:e6:4c:d7:aa:23:05:24:1e:77:46:
ca:33:25:8f:08:ea:ad:ac:20:87:73:53:7c:6b:b9:a4:04:84:
86:29:2a:3b:fc:51:0f:b3:3c:8a:e5:18:0c:fa:3f:a1:81:fe:
8f:9e:ab:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:54 2026 by rpki-client