Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143722.roa
File: AS143722.roa (raw, json)
Hash identifier: zW/oIodtXYhKK/9hCzJyB2/FuQDzWq3m0lRXvrdrIR8=
Subject key identifier: 37:E8:82:75:EC:82:53:73:4F:77:3A:01:23:AB:9F:25:F8:1F:57:A1
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1BAA51B93EE908081C94246E7F3294433EB1C488
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143722.roa
Signing time: Fri 22 May 2026 06:58:39 +0000
ROA not before: Fri 22 May 2026 06:53:39 +0000
ROA not after: Fri 21 May 2027 06:58:39 +0000
asID: 143722
IP address blocks: 240a:a430::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:aa:51:b9:3e:e9:08:08:1c:94:24:6e:7f:32:94:43:3e:b1:c4:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:39 2026 GMT
Not After : May 21 06:58:39 2027 GMT
Subject: CN=37E88275EC8253734F773A0123AB9F25F81F57A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:26:94:9a:65:34:4c:d2:64:ba:8b:cc:ff:dc:
54:0c:05:1e:4e:62:a8:b7:3f:dc:74:cd:31:41:a8:
cb:f0:bb:5c:3f:9a:f4:f3:0f:ec:de:b4:a6:df:26:
f6:bf:47:db:c3:d7:2c:69:48:aa:e5:78:cc:74:a6:
ad:06:e1:b8:98:4a:5e:73:f1:98:79:46:95:45:b0:
65:80:40:1d:ca:bc:7b:78:a4:1e:11:1f:13:52:f2:
3c:41:7b:9f:d7:f9:3d:a3:82:f2:a5:f7:78:00:5d:
21:e6:64:8f:ed:5b:d9:bc:85:63:e8:57:d5:00:9b:
58:ca:7e:66:4e:1b:93:94:9b:cb:32:79:ec:35:b8:
64:ec:aa:fe:b2:c1:bc:07:88:14:50:45:87:c6:2c:
01:2e:1b:bd:eb:24:d5:94:77:61:2e:71:2b:b7:70:
01:6d:39:9a:58:d6:9c:31:44:f2:25:ff:4d:d1:86:
bd:22:c2:5b:b3:cb:59:ed:b2:a1:ab:78:5d:35:7b:
5a:e4:6f:8e:c8:cc:57:d9:e6:6e:15:7b:43:be:33:
12:92:cb:ff:c4:39:2c:50:ac:43:6a:8b:2d:ff:57:
f0:c2:b8:b3:70:31:cd:e1:ef:a5:ac:ac:89:23:6a:
a9:e0:80:ca:28:ee:d1:19:7b:55:e6:40:7b:f5:16:
e3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E8:82:75:EC:82:53:73:4F:77:3A:01:23:AB:9F:25:F8:1F:57:A1
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143722.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a430::/32
Signature Algorithm: sha256WithRSAEncryption
ba:64:e7:34:72:fd:e7:57:ed:cf:21:bc:f2:ae:aa:fc:30:cb:
74:0f:9b:49:e3:43:79:bf:bd:be:47:1f:0e:f7:4a:f4:90:41:
22:c6:4a:c7:23:21:62:c9:a4:ab:16:fd:e4:f1:d4:c8:4c:65:
a1:47:bd:78:24:52:e4:a4:19:f8:63:c6:58:72:80:82:51:af:
c3:4c:1f:33:b5:31:79:cb:dd:3f:ef:27:1a:ef:7f:1e:22:0f:
b9:72:6a:7c:67:45:1b:f3:76:c8:db:e7:80:4d:f0:df:98:e5:
61:65:84:01:1e:bb:56:09:d6:b5:99:2b:62:6f:2c:b9:12:ac:
3f:a1:5f:cc:9c:f1:55:d0:75:98:96:33:68:33:f5:ea:82:41:
45:dd:f1:ad:9f:14:d1:fd:59:86:49:bf:d9:74:24:ff:3e:9a:
01:6a:67:be:69:26:8d:03:a9:27:d2:0d:02:0a:b5:db:8f:aa:
fd:44:13:47:11:31:b1:a7:8e:88:2f:78:61:33:7d:8d:83:1a:
45:a0:75:38:12:78:6f:4c:97:d5:92:99:63:76:ac:13:5d:89:
35:93:a9:f4:d4:32:72:dc:33:0e:4d:9f:db:18:d6:9d:4b:0d:
d6:d2:09:2d:4c:3d:54:b2:ca:78:8d:46:cb:6f:0b:e5:a2:72:
69:cd:e0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:40 2026 by rpki-client