Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143760.roa
File: AS143760.roa (raw, json)
Hash identifier: JCNm+zuZy/+oPsFjuONR4tPb/vWs7EwfN5jIhQW+ryw=
Subject key identifier: 5B:26:2C:DC:CE:11:46:D8:3C:3B:B7:B3:32:CE:C4:1D:4A:E6:DF:D5
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6D216CF2AE6D86DF5E3D01AD4C4D39067643FE0D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143760.roa
Signing time: Fri 22 May 2026 04:26:47 +0000
ROA not before: Fri 22 May 2026 04:21:47 +0000
ROA not after: Fri 21 May 2027 04:26:47 +0000
asID: 143760
IP address blocks: 240a:a456::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:21:6c:f2:ae:6d:86:df:5e:3d:01:ad:4c:4d:39:06:76:43:fe:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:21:47 2026 GMT
Not After : May 21 04:26:47 2027 GMT
Subject: CN=5B262CDCCE1146D83C3BB7B332CEC41D4AE6DFD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5e:cb:ae:3e:aa:89:9f:b6:04:41:40:09:83:
9c:ec:5c:05:24:46:23:92:e7:e7:ce:fe:e0:37:cc:
be:1b:a0:c3:b1:44:a9:32:1c:cc:39:b9:8e:c5:59:
55:85:9d:de:e7:76:36:7d:94:8e:e2:cb:db:2c:53:
da:e7:49:fc:4e:94:2b:27:99:53:39:a3:91:d5:9d:
8d:bc:bc:a6:e4:a0:1b:df:26:56:dc:08:dd:81:ad:
76:bd:e4:5f:3e:eb:74:a2:61:c8:27:90:de:1f:f6:
45:00:74:c9:9c:f6:f0:25:65:8c:1e:fd:24:f7:c0:
5e:5c:cd:3e:45:94:89:a5:0f:4c:e5:d3:b3:ed:23:
d4:45:79:ba:0d:56:7b:9b:ad:79:14:dd:5f:56:87:
3d:a7:16:a8:be:ed:61:28:60:52:eb:12:53:f9:40:
02:c5:9c:bd:3b:43:2a:3a:56:fe:78:4a:25:98:b6:
d8:60:5b:b7:b3:05:9f:2d:25:6a:72:14:8b:54:7a:
4d:5b:1e:77:81:03:6e:11:f2:2e:2c:de:54:09:81:
74:b0:0a:f8:f4:09:f4:6b:5f:92:78:8e:93:3c:b3:
d9:21:60:8a:91:ac:9f:78:5e:34:07:c8:23:13:54:
8e:bd:85:b3:5e:f0:d7:7a:fd:40:3c:2b:2d:c0:3f:
48:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:26:2C:DC:CE:11:46:D8:3C:3B:B7:B3:32:CE:C4:1D:4A:E6:DF:D5
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143760.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a456::/32
Signature Algorithm: sha256WithRSAEncryption
32:63:87:da:80:ad:8c:14:b6:77:ab:6e:b0:13:f8:75:e7:4e:
48:da:c0:c8:6d:c2:08:d9:17:3f:f8:a5:3d:b3:72:4d:02:7d:
8c:4b:26:c6:b7:79:52:eb:d9:67:9d:d6:19:d0:0e:c3:59:1e:
a9:70:d8:7d:ae:6a:32:82:64:25:68:9e:9d:16:1a:e9:f8:71:
6c:81:20:9d:e9:c2:73:77:d4:12:d4:63:f7:15:77:83:75:51:
66:d0:e7:a0:93:7e:b4:e6:77:ed:d5:e2:d0:4f:6d:bb:a0:2d:
ac:6c:09:3c:cb:a9:6d:10:be:00:f8:72:b5:86:ac:25:e3:e3:
2c:90:54:69:a3:d6:c2:37:18:f1:34:45:07:6a:85:c8:52:56:
15:60:e6:80:93:3e:57:3a:84:4a:94:9f:f3:1e:c4:96:6d:11:
66:4e:85:47:ba:72:9c:e7:0f:db:b7:34:95:b8:12:b0:eb:23:
56:39:18:89:11:89:24:44:b5:b5:34:d7:ce:b6:84:7c:74:f2:
a0:36:cb:c1:d2:8c:70:c4:90:98:c0:05:87:ec:60:8c:fb:23:
42:41:44:15:04:63:0c:9b:76:ec:81:02:11:ee:ed:e9:b0:7b:
29:83:3c:f5:d8:62:c6:ac:8f:08:f3:e3:4d:2f:a5:f5:fe:98:
8f:d4:53:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:17 2026 by rpki-client