Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143745.roa
File: AS143745.roa (raw, json)
Hash identifier: pxST1CXBE8K8hHUQEN5tlLXVqdNyz02zpIfiDXUapJM=
Subject key identifier: 7F:35:85:23:E9:F6:C7:94:E5:D3:0A:80:E7:25:42:C3:7F:A8:96:2B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0BAC7FC86F828810E55A182A112A3DF21F38EB8D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143745.roa
Signing time: Fri 22 May 2026 07:24:44 +0000
ROA not before: Fri 22 May 2026 07:19:44 +0000
ROA not after: Fri 21 May 2027 07:24:44 +0000
asID: 143745
IP address blocks: 240a:a447::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:ac:7f:c8:6f:82:88:10:e5:5a:18:2a:11:2a:3d:f2:1f:38:eb:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:44 2026 GMT
Not After : May 21 07:24:44 2027 GMT
Subject: CN=7F358523E9F6C794E5D30A80E72542C37FA8962B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:e8:2c:f3:8f:15:9a:48:f7:71:48:b0:14:e7:
a9:b3:dd:ce:9c:3c:1b:d6:25:6a:df:73:99:3c:a4:
83:35:5d:ef:96:03:53:3c:72:8e:99:a0:1e:f0:bb:
f6:4e:3c:6c:08:21:94:94:75:aa:8d:19:6e:aa:fb:
35:d4:43:fe:14:7a:ab:b9:51:a0:cf:f0:f4:01:ee:
33:f3:fa:da:19:02:8b:cd:28:f8:91:ae:38:9e:ae:
fa:ac:2d:e1:7a:bb:0e:be:0a:5e:02:3f:38:8b:b2:
20:40:f5:0a:df:36:58:99:e1:28:59:10:dd:d7:86:
bd:4f:ec:c6:1d:1a:f5:87:91:e1:94:e6:4c:0c:5b:
73:a9:56:b0:bb:5f:b3:b2:9c:b0:9e:11:49:1e:f4:
0e:c1:13:b1:88:8a:1e:8f:28:b2:db:30:cf:32:60:
c2:e3:63:fc:2d:4c:e1:96:1e:47:f3:6f:68:3f:c7:
35:f7:40:6e:01:0f:df:13:29:68:f2:e0:53:62:54:
2e:cd:f2:d3:47:0a:11:c8:b1:21:24:f1:7e:84:2e:
87:59:1f:cb:9f:a5:f2:bc:aa:77:fb:b2:df:44:f7:
38:f5:86:52:62:82:79:56:00:07:c6:38:76:cc:ee:
05:06:bf:0b:06:7e:5d:ea:6a:0c:93:44:37:0f:a2:
4d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:35:85:23:E9:F6:C7:94:E5:D3:0A:80:E7:25:42:C3:7F:A8:96:2B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143745.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a447::/32
Signature Algorithm: sha256WithRSAEncryption
6c:0f:20:9f:d0:54:33:a4:c9:21:ff:ef:1a:1d:b0:fd:7f:ea:
2e:09:19:c5:bb:5d:d7:3b:7a:df:ef:91:30:60:10:3a:47:8d:
5c:44:5b:d5:35:de:92:06:9d:51:8e:a8:b3:04:fe:22:8c:1a:
ad:03:61:44:f5:a4:bd:09:df:f1:a6:29:64:c8:2f:51:c5:b5:
c1:b3:b0:85:3c:df:58:82:16:24:88:ec:4d:11:05:b5:94:ff:
a5:26:e8:f8:74:68:49:09:2a:36:7d:5f:21:b6:89:6a:e6:d5:
2a:18:c9:80:77:ac:ac:d6:66:fc:b5:f7:cc:57:dc:9c:65:88:
f2:e1:b0:c7:f5:fe:c1:64:a9:71:44:6d:4b:45:96:a7:e1:e2:
87:1d:6a:c3:0d:9d:1e:92:d0:e0:c0:b5:9a:70:c8:af:65:bc:
ee:3d:51:a6:33:e0:d7:f7:f0:b7:6f:d5:5b:d0:36:ce:0b:17:
1e:e1:d4:47:2c:8b:d1:16:75:9e:a6:6e:77:d1:63:94:11:2e:
37:dd:00:83:18:ea:bf:c4:6a:dc:0f:e2:3a:74:d0:cf:a6:8c:
0e:54:bd:8a:a2:64:0a:fd:e0:c0:a2:6c:12:7f:5d:a8:b8:87:
44:8e:d6:68:c9:a6:07:fd:76:4d:2e:2c:fa:77:78:51:e1:8f:
c4:ee:e3:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:21 2026 by rpki-client