Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143758.roa
File: AS143758.roa (raw, json)
Hash identifier: hIAxst4Fh/0igfJMNLsJ7+aDZy9QDjR0AIBUBwGa7/4=
Subject key identifier: F9:24:16:00:3E:CE:BD:1F:9E:03:7E:B1:82:FC:1C:0B:D2:2E:8C:7E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3AD41FD66021ED2717009163648889A7C5306D25
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143758.roa
Signing time: Fri 22 May 2026 06:05:41 +0000
ROA not before: Fri 22 May 2026 06:00:41 +0000
ROA not after: Fri 21 May 2027 06:05:41 +0000
asID: 143758
IP address blocks: 240a:a454::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:d4:1f:d6:60:21:ed:27:17:00:91:63:64:88:89:a7:c5:30:6d:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:41 2026 GMT
Not After : May 21 06:05:41 2027 GMT
Subject: CN=F92416003ECEBD1F9E037EB182FC1C0BD22E8C7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:8a:61:dc:4f:b6:e9:26:67:d0:93:69:41:7b:
8d:ef:07:1b:fa:89:f7:5d:21:01:53:57:61:78:03:
7c:6f:7a:79:a6:ce:ac:02:2d:56:8f:30:c1:26:db:
a6:47:07:be:69:3d:ad:ac:dc:f8:18:2d:b5:da:97:
5c:1d:90:86:d8:09:2c:0d:f1:39:f5:26:2f:b1:65:
be:94:15:86:fc:53:ed:8a:7b:e0:51:94:02:58:ab:
3e:0f:70:cf:59:d1:79:1f:8d:ec:57:7c:ac:c6:ca:
27:8a:33:ba:5e:11:8e:e6:1c:fa:dc:fd:95:2c:1a:
cb:a3:6d:39:01:43:8c:ea:93:b4:e9:c2:4b:fb:d3:
53:51:fc:6a:7e:53:21:19:cc:41:5e:43:97:f9:f7:
c4:cb:83:46:7f:c5:55:a2:31:17:71:04:ae:96:5e:
0f:cc:aa:d5:d3:4a:fb:e1:8c:b0:94:57:59:19:3f:
1a:f6:ad:9a:22:bc:02:40:5c:bd:50:06:43:06:cd:
10:c0:5e:82:2e:e4:46:b3:45:c2:b4:83:93:45:c7:
64:ea:f1:f7:da:0c:60:65:e4:8b:7b:e8:01:82:b8:
30:c6:f8:2c:f4:7f:c9:6e:82:d2:66:0e:df:61:9c:
bc:a4:61:cf:8a:d1:b5:aa:22:01:14:69:c3:57:c8:
8f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:24:16:00:3E:CE:BD:1F:9E:03:7E:B1:82:FC:1C:0B:D2:2E:8C:7E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143758.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a454::/32
Signature Algorithm: sha256WithRSAEncryption
1e:5e:74:72:40:26:08:44:ab:7d:31:1e:08:02:90:87:cc:b3:
49:f2:5d:16:0d:20:07:63:10:87:20:b6:1d:14:06:ef:1f:98:
1c:b2:f9:33:bb:88:44:6a:f9:7d:94:2f:90:b2:27:dd:1f:18:
65:21:2f:15:7c:50:85:b5:59:21:1d:64:37:47:9a:4c:a7:66:
a2:49:ca:9a:b2:b8:eb:8f:27:bb:ba:02:60:64:fd:9b:fe:ff:
35:22:21:a7:d4:d1:cc:3b:d3:2f:98:06:57:6e:29:ac:cb:79:
fd:68:49:00:3f:87:9b:29:e8:55:5a:a1:03:aa:71:f9:09:c9:
97:f1:81:ae:7a:ec:c8:61:bf:f6:c3:05:12:bf:c5:17:97:3b:
19:a7:9b:b3:01:99:78:9f:89:a1:6a:b1:15:36:ed:e4:4b:c5:
49:e9:f7:b8:cb:d8:f0:25:29:6d:d0:85:62:c1:7f:3b:c8:72:
29:63:6c:99:3b:ac:7d:6e:4a:59:70:13:cf:69:ab:59:1e:1c:
05:3e:28:19:5b:af:e0:99:dc:8f:64:90:1a:47:a4:73:e3:9d:
31:87:a8:91:6f:e9:ee:e4:9f:24:e1:7f:1e:53:71:92:91:2b:
7e:ac:84:a6:91:84:f5:48:cf:e8:b6:69:61:c6:b1:20:2f:6e:
6f:04:1f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:09 2026 by rpki-client