Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143761.roa
File: AS143761.roa (raw, json)
Hash identifier: 76NawqU6WcogelaVSyPgAIyKFYGbr8zlI5tN18mRsB8=
Subject key identifier: 2E:03:0D:A9:79:3A:4F:2C:99:D7:C4:EF:EF:54:2D:67:0C:D4:01:33
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 024843336362675C033DBDB334FA92593F8FB485
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143761.roa
Signing time: Tue 26 May 2026 03:16:42 +0000
ROA not before: Tue 26 May 2026 03:11:42 +0000
ROA not after: Tue 25 May 2027 03:16:42 +0000
asID: 143761
IP address blocks: 240a:a457::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:48:43:33:63:62:67:5c:03:3d:bd:b3:34:fa:92:59:3f:8f:b4:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:11:42 2026 GMT
Not After : May 25 03:16:42 2027 GMT
Subject: CN=2E030DA9793A4F2C99D7C4EFEF542D670CD40133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:57:7d:45:a9:f8:d2:a6:b1:49:f2:93:da:d9:
82:8d:54:50:5f:9a:fa:93:5b:31:54:ee:29:8f:06:
64:cc:12:fa:26:3c:e7:69:48:be:65:81:18:f5:14:
eb:e8:a2:6e:4f:10:43:fc:5b:16:e5:9b:62:29:ed:
e5:3e:66:7a:22:b7:32:8b:37:de:c8:e8:73:2b:1a:
1e:4c:fe:93:72:06:cd:87:58:0c:fd:8d:90:a0:6f:
c3:bf:a9:06:33:36:10:f9:3f:6a:58:a3:8e:8b:39:
cf:7f:ca:ce:04:e2:e5:b1:44:9f:03:db:7b:b9:43:
92:12:0a:17:f8:17:59:8c:4a:e2:78:3f:08:c8:13:
fe:b1:39:f4:be:44:5b:a4:ca:4a:81:30:25:66:6d:
cb:fb:a7:cf:3e:05:94:d1:81:5b:45:fc:c5:a5:68:
13:67:dc:55:91:a1:cd:69:7b:84:0a:63:48:f0:c1:
cb:cd:d5:d5:5f:1e:80:5e:18:b2:c0:7e:37:b5:ed:
69:60:01:ab:93:72:52:7b:7d:cd:f8:96:0a:74:36:
77:e9:8c:75:99:16:7d:58:86:b5:b6:c4:bb:f4:f5:
06:b6:fb:25:21:33:e1:21:70:47:13:0e:1f:98:57:
1a:1f:04:a0:bd:5e:57:9b:a0:d6:6b:c8:ce:16:10:
c6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:03:0D:A9:79:3A:4F:2C:99:D7:C4:EF:EF:54:2D:67:0C:D4:01:33
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143761.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a457::/32
Signature Algorithm: sha256WithRSAEncryption
50:5b:a5:2b:5b:1d:8f:4b:6e:1f:22:de:96:d6:f2:bd:e8:55:
8c:39:e3:80:b9:bf:db:14:92:df:e2:87:ed:a4:2a:fe:94:c4:
95:3d:08:b2:e4:e0:c2:02:c4:19:ad:e4:48:8f:f6:88:d2:40:
48:bf:9a:32:12:ae:fc:9a:8c:4e:4b:42:a5:22:1e:9a:86:2d:
4d:0b:c0:06:75:02:13:98:5a:74:30:9e:af:4b:6c:ef:ea:fd:
3c:6f:bc:02:e8:29:53:bb:75:ff:77:98:20:ef:35:dd:29:04:
88:83:92:c2:fd:18:10:41:fd:39:7d:24:c8:60:75:d6:82:71:
c4:64:ba:5b:d9:6e:4f:22:9f:45:d6:fd:e0:05:6b:17:23:29:
54:c4:b7:6f:b8:0f:4d:c5:96:45:05:ee:b7:4f:a0:40:18:06:
bb:e2:6b:17:4b:11:fe:cf:08:14:80:b9:8d:07:ac:38:18:7a:
52:5f:24:b2:ee:0a:3d:51:34:7d:42:b2:8c:01:53:c9:0b:1d:
b8:33:45:3b:73:54:1c:fc:1e:8f:f0:74:5b:cd:f5:4c:52:e9:
54:66:32:d9:69:45:10:10:b0:8e:2f:50:d4:e4:2d:f3:1d:82:
8b:ab:48:a2:60:34:2d:cb:a4:03:b7:9b:5e:cf:90:a3:30:76:
94:1f:4c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:00 2026 by rpki-client