Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143734.roa
File: AS143734.roa (raw, json)
Hash identifier: SX6CbWNzVzPBFeAfMdfyzdeWIqRR01Mp7H5GbGJ0ZrE=
Subject key identifier: 53:42:7E:BE:E5:27:AA:FE:3E:E9:8A:99:BE:DC:73:A3:6F:38:74:69
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2A8ADD0490D5A7987756070A13BFFF75AB9760DE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143734.roa
Signing time: Fri 22 May 2026 01:50:28 +0000
ROA not before: Fri 22 May 2026 01:45:28 +0000
ROA not after: Fri 21 May 2027 01:50:28 +0000
asID: 143734
IP address blocks: 240a:a43c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:8a:dd:04:90:d5:a7:98:77:56:07:0a:13:bf:ff:75:ab:97:60:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:28 2026 GMT
Not After : May 21 01:50:28 2027 GMT
Subject: CN=53427EBEE527AAFE3EE98A99BEDC73A36F387469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c2:f5:ab:a8:09:3f:96:f1:3e:b5:ae:24:3c:
69:5b:28:cf:e8:9b:51:98:ad:bd:6d:5b:96:85:a5:
a6:8f:ea:1d:da:71:43:2f:b1:14:e3:3a:b9:16:c2:
35:a4:55:e0:14:94:ea:a0:4e:e4:99:94:72:55:10:
25:53:df:1d:8d:8a:ad:bf:34:be:c1:90:a9:83:fa:
d2:2a:33:80:14:9e:f5:09:f8:cc:25:4a:47:fa:09:
a1:3a:b9:db:a0:f2:0f:ba:73:96:d8:5f:3b:d7:50:
b0:b3:4a:b0:4b:bc:cb:a6:c5:96:a3:86:c6:e6:62:
45:a0:79:a0:86:d7:7b:62:43:6f:9a:93:70:b3:c0:
8b:59:c3:54:51:9a:7f:1f:94:df:5c:36:f0:33:6c:
5d:48:0d:ad:34:fd:3d:45:b1:c1:94:d1:b7:23:82:
09:aa:09:d7:fa:97:00:c2:3e:1a:0b:72:59:d7:46:
9d:b9:06:72:7a:8c:a1:68:d7:69:98:e3:b8:63:5f:
b2:48:87:7a:24:41:22:15:d5:69:a4:67:2c:2e:17:
28:98:79:1d:df:00:f4:7c:d9:3b:18:95:2c:64:6f:
9f:cb:58:ce:b9:58:a1:9d:8a:2a:17:04:9b:e4:60:
a3:73:8b:c1:f8:27:5b:9b:1a:22:ec:c6:d9:57:da:
15:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:42:7E:BE:E5:27:AA:FE:3E:E9:8A:99:BE:DC:73:A3:6F:38:74:69
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a43c::/32
Signature Algorithm: sha256WithRSAEncryption
52:5e:2f:a6:82:65:d2:9a:de:f8:52:07:0f:83:f0:1b:23:10:
e9:94:20:c3:74:fe:a4:40:57:30:b7:bd:4a:05:20:fd:02:55:
13:49:5c:e5:d4:7e:04:3f:e1:e2:69:75:58:68:df:ee:9b:84:
a9:7d:28:5b:64:9d:70:cb:2b:87:35:88:3c:8c:5a:6d:0d:2f:
dd:c5:2f:d7:47:f7:49:8a:89:38:cf:31:03:95:24:1a:0e:3a:
1b:d2:b6:d2:8b:20:d7:a5:76:c4:7c:6c:74:48:6a:eb:69:7f:
47:e0:2c:62:5e:52:ae:3d:c3:bf:75:7c:4a:6c:6b:a5:3a:87:
1a:14:a7:29:d2:01:61:fd:98:a5:95:01:b2:84:84:7b:7b:80:
13:27:a5:d7:e1:6c:b4:85:c2:32:d4:9a:ce:ee:17:cd:7a:69:
77:08:56:6c:f6:99:1c:42:24:b5:a6:cd:8a:01:3b:1b:61:77:
d9:89:07:a1:5b:f9:1c:c0:da:86:04:b7:39:2f:cd:93:43:4d:
dd:89:3e:7b:a8:37:79:30:e1:4d:3c:19:0a:e8:a3:4e:c4:e3:
9d:98:c9:5e:4a:53:da:23:89:7b:d9:f7:a3:25:25:59:a0:0f:
53:ca:c5:b5:ee:5d:d5:3d:50:82:02:a2:a3:29:eb:b0:72:d0:
20:b7:74:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:28 2026 by rpki-client