Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143748.roa
File: AS143748.roa (raw, json)
Hash identifier: rSkNCehhs6SVt37IP5cxA1r40vXNjEXVUd5NR7S4P7c=
Subject key identifier: 7C:E0:7F:0F:D5:7A:AF:F9:BB:74:68:65:6B:DA:E3:08:2A:C1:40:2C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 62CC1AD02F9526CCC52B1B95BCE6B01F81C9BF15
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143748.roa
Signing time: Mon 25 May 2026 02:22:51 +0000
ROA not before: Mon 25 May 2026 02:17:51 +0000
ROA not after: Mon 24 May 2027 02:22:51 +0000
asID: 143748
IP address blocks: 240a:a44a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:cc:1a:d0:2f:95:26:cc:c5:2b:1b:95:bc:e6:b0:1f:81:c9:bf:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:51 2026 GMT
Not After : May 24 02:22:51 2027 GMT
Subject: CN=7CE07F0FD57AAFF9BB7468656BDAE3082AC1402C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:fb:1c:d2:2e:45:33:af:5b:d4:3a:ab:e8:0e:
55:aa:ca:68:f8:fc:4d:92:0f:24:d6:f3:8a:a8:fb:
6e:df:98:6b:0d:7e:9c:2e:20:86:3c:99:d4:a6:cf:
a3:b3:ee:3f:46:53:b3:7e:f7:d6:f5:7d:d0:11:21:
ee:12:08:f2:67:6a:e1:cb:97:36:ec:bd:60:47:af:
71:1d:fe:38:58:eb:f3:5c:34:59:ca:db:8e:45:ca:
1e:fa:f0:1a:06:11:5f:7d:0c:6f:a6:85:a8:68:90:
68:68:6e:48:e4:b1:96:ea:31:0b:38:57:91:b4:51:
a4:f5:18:de:5c:16:f3:f3:7a:3b:76:47:b8:a5:e0:
34:c1:e2:08:14:c3:9e:d8:c6:6e:80:7d:10:2d:cd:
72:cc:ed:98:2f:5c:99:3b:d9:4f:27:b0:eb:fa:d9:
55:e0:bf:2a:15:89:95:0a:a7:12:f9:b1:6a:51:fb:
fa:b6:46:06:c8:d3:cc:cd:c5:d6:11:9e:6b:87:35:
e6:1f:c3:47:b5:84:9b:08:4d:e8:40:76:2a:12:af:
bb:74:1c:c5:48:eb:71:b0:2c:12:25:87:14:76:89:
f4:35:6e:88:b3:f3:91:a4:ce:7f:21:2d:30:4e:b0:
8f:36:fd:ea:27:7c:22:bc:bf:5e:dc:dc:42:55:44:
c6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E0:7F:0F:D5:7A:AF:F9:BB:74:68:65:6B:DA:E3:08:2A:C1:40:2C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143748.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a44a::/32
Signature Algorithm: sha256WithRSAEncryption
19:df:53:c7:e4:9e:c7:5a:72:6e:29:67:38:3e:2e:8a:63:c7:
15:72:f8:c0:52:d8:7c:2c:d7:8e:be:44:6e:d2:43:59:dc:3f:
e6:f5:a4:9c:18:b8:2f:cf:01:95:8c:d9:f3:91:be:1a:f2:b5:
32:16:fc:5b:a0:19:1d:cc:59:5d:51:ad:dc:09:7f:45:53:c7:
90:3d:53:cc:8d:aa:c1:fe:d2:5e:bd:45:6a:3c:9e:95:b8:bf:
52:e6:c1:df:44:79:ed:a6:5e:4f:99:e8:e5:ad:61:13:c0:71:
56:ee:44:ea:6f:33:6c:cd:53:a0:2f:8f:a7:74:3c:98:b5:45:
30:84:be:c4:61:96:93:43:09:aa:db:c3:36:53:cd:7b:1f:22:
37:e7:51:a9:d7:91:95:1b:89:6c:b4:ac:26:c1:b7:3b:57:0e:
56:62:11:fc:b2:d4:6a:92:2c:7d:88:23:79:20:1d:ec:85:20:
44:ba:01:b4:06:87:68:6a:b7:22:8f:ca:1a:16:98:3f:7c:fa:
d9:5a:ef:b5:d0:09:67:05:35:e5:c6:48:fe:1b:16:c6:88:34:
ce:e4:ea:3f:40:84:16:12:a0:60:92:d5:75:7d:8c:b9:c1:3c:
92:6b:d1:6f:79:37:95:75:a4:ac:94:73:a7:9e:af:0f:aa:e8:
9f:18:1b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:36 2026 by rpki-client