Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143756.roa
File: AS143756.roa (raw, json)
Hash identifier: w43rEMmbkGsWHFqtIVc+I3hVq2cZrIm2n6J5im2izo8=
Subject key identifier: E5:5B:0E:3F:BB:81:E6:98:AA:70:A7:B9:A9:A5:A2:89:6B:93:5E:27
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2ECE70F2D5589195A30AA74DE1615FD2F4AEEC7F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143756.roa
Signing time: Fri 22 May 2026 06:46:05 +0000
ROA not before: Fri 22 May 2026 06:41:05 +0000
ROA not after: Fri 21 May 2027 06:46:05 +0000
asID: 143756
IP address blocks: 240a:a452::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:ce:70:f2:d5:58:91:95:a3:0a:a7:4d:e1:61:5f:d2:f4:ae:ec:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:05 2026 GMT
Not After : May 21 06:46:05 2027 GMT
Subject: CN=E55B0E3FBB81E698AA70A7B9A9A5A2896B935E27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5f:d5:e4:e7:00:93:77:c0:62:2c:58:c3:8f:
10:5f:23:44:7d:5a:b3:2c:9c:71:32:b4:d4:c6:5c:
5c:18:78:75:c2:1d:95:bb:af:1f:f8:3d:a1:08:f5:
6d:55:ea:c3:1c:3b:fb:d8:f8:70:26:c9:00:4f:25:
75:98:af:2b:37:7d:a5:ef:65:93:c1:5a:a8:eb:04:
d4:7f:ed:78:75:54:ca:b9:a8:ce:fb:57:4e:68:7b:
7f:e8:73:e2:52:cf:42:31:ba:84:ea:bf:54:40:9c:
fd:e4:48:5e:71:63:c4:b6:12:dc:d5:89:47:90:be:
9e:e8:ec:76:a2:1b:fe:3f:33:a1:19:ff:53:7a:56:
3b:79:83:61:c9:36:e6:a4:ea:20:96:ea:51:d3:5a:
be:94:5b:7b:cc:d7:a9:e5:9c:50:e3:fc:b8:22:ca:
40:93:12:45:f9:36:39:cd:02:20:08:b9:a3:a9:8c:
75:51:92:36:47:cd:b9:f1:79:a1:8d:45:4c:c6:3a:
de:8e:c9:2e:63:9f:76:1f:0f:d3:6b:04:08:b1:21:
22:8d:94:46:af:54:ea:1c:90:a5:4c:1c:79:fc:5d:
4c:69:93:ce:10:59:81:d7:8a:a5:31:6e:fa:ba:fa:
2e:86:dd:ea:61:14:68:26:09:4d:13:e2:35:fe:60:
88:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:5B:0E:3F:BB:81:E6:98:AA:70:A7:B9:A9:A5:A2:89:6B:93:5E:27
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143756.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a452::/32
Signature Algorithm: sha256WithRSAEncryption
94:db:bd:db:87:00:29:12:a2:ee:a0:a5:48:8e:48:91:9e:87:
85:26:08:28:22:2a:c7:26:f7:60:fb:18:84:64:db:ab:e7:00:
30:98:ad:da:e6:da:63:03:e4:a0:5d:a3:77:db:8e:26:a7:64:
71:61:f9:71:b9:7c:83:f6:bb:ba:f3:43:e0:8d:5a:fc:c3:34:
e8:e0:5a:9b:dc:6a:7e:a4:ee:10:2b:71:bc:78:dd:5b:57:69:
2f:1a:40:6f:62:72:dd:25:89:5f:7f:94:7f:b4:66:9d:31:fd:
16:1b:4c:af:16:5f:8a:d4:62:27:5a:95:0f:36:f2:09:c0:39:
87:aa:a2:ac:7e:27:ec:ac:2e:d5:3c:3a:8a:db:b3:ed:ca:e1:
e1:7c:7f:11:d9:72:09:16:1f:aa:66:3c:21:ab:f1:d2:70:b1:
dc:b2:b6:9b:fc:bf:08:55:4f:51:06:66:86:88:17:e4:90:52:
c0:0c:42:41:76:5c:56:69:8c:35:58:00:89:71:5f:ea:91:91:
a5:4a:67:14:2b:cb:cb:69:e6:63:95:97:14:7e:2e:68:30:f8:
25:e8:21:f8:18:49:b8:c6:04:00:76:5b:df:33:47:c9:69:4a:
1e:93:50:bc:40:29:a0:05:83:f3:ea:6c:14:47:c1:fb:33:f9:
0a:b9:49:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:14 2026 by rpki-client