Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143762.roa
File: AS143762.roa (raw, json)
Hash identifier: 5VEyO6Fs4ybWn32Scag/3zLoy+5BiD9PfFK193GcVWk=
Subject key identifier: E5:0A:15:CB:F6:92:73:C7:FB:C0:04:33:07:A1:74:19:5F:38:06:7B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1E96683DD16123B0F11B3322740B7DD638FEF1A1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143762.roa
Signing time: Mon 25 May 2026 01:20:17 +0000
ROA not before: Mon 25 May 2026 01:15:17 +0000
ROA not after: Mon 24 May 2027 01:20:17 +0000
asID: 143762
IP address blocks: 240a:a458::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:96:68:3d:d1:61:23:b0:f1:1b:33:22:74:0b:7d:d6:38:fe:f1:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:17 2026 GMT
Not After : May 24 01:20:17 2027 GMT
Subject: CN=E50A15CBF69273C7FBC0043307A174195F38067B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8c:1b:42:19:82:c3:5d:00:38:0f:c2:be:0b:
b5:60:83:0e:b2:db:e1:1a:10:71:d7:13:59:b5:f1:
56:3d:43:89:31:1b:10:4f:04:90:eb:2a:08:2f:73:
44:95:f4:e8:0a:a5:90:b8:de:3b:f3:02:3d:b9:c9:
80:98:15:cb:a0:a6:1a:22:ee:9b:44:a5:d5:0d:10:
59:95:29:4a:e5:c0:c8:7c:75:33:5b:2c:bd:12:17:
73:2f:f0:87:7c:98:ea:0b:8b:b2:eb:df:11:da:40:
81:1c:f2:5b:fd:72:54:1f:50:1d:fb:2f:93:8c:ad:
1e:fe:64:36:0c:03:a6:9d:5d:5f:9f:4c:57:e7:1d:
14:c0:f4:1c:8d:c7:4a:c5:92:52:ca:a7:d9:bf:f1:
c5:dd:f8:48:05:bb:b5:d5:55:fe:31:a7:3b:2b:9c:
3c:4f:21:c0:8d:4e:71:2c:b5:1a:c6:f7:2a:eb:e8:
cc:eb:5e:71:f6:c7:c0:bb:ee:40:2e:d7:29:5f:42:
5f:08:fb:ff:ca:1e:e8:e1:94:94:0e:f9:f8:c3:09:
40:41:46:8b:19:4f:d4:86:0c:d6:29:2b:0a:2d:70:
83:63:f5:ce:5d:aa:b1:0e:bd:bc:11:a6:24:9e:ca:
eb:37:02:13:91:82:a3:54:16:27:92:14:35:c0:f0:
0b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:0A:15:CB:F6:92:73:C7:FB:C0:04:33:07:A1:74:19:5F:38:06:7B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143762.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a458::/32
Signature Algorithm: sha256WithRSAEncryption
32:a3:9a:47:ff:eb:95:7a:5b:77:cc:40:b1:57:a5:bc:e0:7d:
3e:53:d5:56:ec:58:9f:14:cf:b6:3d:50:4f:17:36:b8:b0:e2:
0a:ab:f0:e3:a9:b8:86:51:da:c3:44:8d:7d:d2:45:5d:ba:96:
5d:85:e7:34:e6:69:b5:0f:70:e2:12:9d:9f:7f:7e:e9:f4:74:
7f:78:38:7d:a7:c9:5e:20:e5:da:79:94:5d:2f:7f:0d:43:98:
52:d5:06:02:a9:95:a5:19:81:99:d9:06:9d:4d:d5:95:47:d8:
04:ff:9a:15:57:5b:45:ef:dd:35:2d:4e:18:b0:ae:d6:ff:91:
75:b8:c5:e0:be:05:25:77:4c:96:9e:0b:cd:6e:9e:fd:a4:2d:
c5:3d:6a:f5:00:63:76:99:1a:e8:ee:51:44:05:98:2a:5c:f2:
a0:e4:f8:38:95:ab:8c:35:bc:cf:57:20:af:5f:f3:6c:31:29:
7e:70:45:91:9f:1b:ba:bd:46:2f:38:fa:cf:05:74:fe:38:a2:
1d:0b:11:a0:d2:a2:01:92:fd:98:be:5d:45:d2:f9:ad:66:20:
0d:e0:c3:6f:d5:5e:a0:26:6c:30:8b:47:02:ca:ce:b2:63:d9:
4a:d5:ee:4d:2d:b9:38:98:0a:59:b4:02:6d:52:b6:a9:cf:1d:
3c:54:49:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:15 2026 by rpki-client