Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143764.roa
File: AS143764.roa (raw, json)
Hash identifier: 0vufj0bIUILv+T/cOieEjiC9kRNgwGqkJuBiq2hfqrk=
Subject key identifier: DC:14:22:73:AF:63:2E:F2:B3:46:E3:DE:A2:BD:B9:7C:6B:42:8B:FC
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 25DC4F1F305044D87613F38B7D9C17A814854D0C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143764.roa
Signing time: Tue 26 May 2026 02:35:15 +0000
ROA not before: Tue 26 May 2026 02:30:15 +0000
ROA not after: Tue 25 May 2027 02:35:15 +0000
asID: 143764
IP address blocks: 240a:a45a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:dc:4f:1f:30:50:44:d8:76:13:f3:8b:7d:9c:17:a8:14:85:4d:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:15 2026 GMT
Not After : May 25 02:35:15 2027 GMT
Subject: CN=DC142273AF632EF2B346E3DEA2BDB97C6B428BFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d5:d2:87:4e:c6:30:c3:8d:43:e9:04:31:3e:
30:ec:b3:7f:9d:9d:c2:4e:8e:5e:f9:a9:9e:d1:06:
67:be:f6:01:13:f3:ad:df:4c:40:2c:d3:d8:5a:57:
d6:4a:da:b5:f1:4c:43:64:f0:5a:24:7f:19:1e:2b:
08:9a:61:0d:78:02:90:4b:0a:67:ba:e5:4f:b4:b5:
eb:f1:16:78:72:fe:65:3a:d7:b2:be:0b:2e:d4:63:
b1:80:92:be:8f:cd:10:17:27:9e:23:d4:85:37:88:
1e:02:34:1f:66:92:8c:92:18:0b:a6:b7:77:ca:ff:
fa:3d:69:ac:a9:45:f2:99:86:84:b9:53:55:aa:d3:
eb:bc:8b:8b:a7:e9:d4:0e:56:a0:99:96:c9:7a:3f:
f8:73:53:62:aa:2a:1b:91:d7:10:2b:ff:74:6f:12:
84:0b:03:44:f5:17:2b:42:09:3a:d5:38:2e:40:c8:
67:6e:19:58:52:a3:ec:6b:8d:a2:0f:ad:31:64:4e:
b8:29:13:3c:f9:38:f7:16:23:ff:fe:b6:c8:3a:c4:
a4:69:29:b7:dd:9c:31:19:b5:74:08:be:dc:30:27:
a6:90:78:ee:1b:9f:4f:a5:e6:5f:8d:ae:17:0d:81:
34:74:2f:8e:a2:c3:7a:63:f1:37:35:60:76:52:94:
c7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:14:22:73:AF:63:2E:F2:B3:46:E3:DE:A2:BD:B9:7C:6B:42:8B:FC
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143764.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a45a::/32
Signature Algorithm: sha256WithRSAEncryption
32:99:35:02:7c:42:5d:ad:77:64:60:09:ca:e9:a9:4f:3d:24:
d2:18:1c:b2:9b:c3:19:86:04:ff:bd:23:40:19:36:fd:ca:97:
d1:07:e8:81:78:e8:dd:f1:22:68:17:b9:60:a2:ac:1d:55:f5:
5d:c7:8f:35:30:3c:78:2a:bc:1f:6c:98:ac:62:97:b0:ca:df:
fd:4c:84:a7:9c:9f:37:23:b6:68:74:94:08:12:90:a0:e7:82:
4a:f2:69:2f:d5:eb:49:62:01:75:cf:49:d3:82:56:bc:39:31:
5d:f4:6a:ae:fc:eb:dc:77:2f:07:4e:15:86:7d:a5:95:f3:90:
4e:fe:b8:d3:54:a9:ca:50:0c:23:88:78:51:be:f7:3f:93:9d:
f2:e9:6c:d9:37:9c:3a:3c:8f:3e:88:64:85:81:34:73:77:93:
19:a8:ab:4b:12:ce:c8:15:36:89:0e:4c:38:7a:d5:a2:03:2d:
48:8e:5b:ac:84:09:8e:35:71:66:3d:d4:c3:e8:12:4f:3c:06:
5e:c9:11:35:52:7e:4d:a8:b7:90:d4:18:44:d8:2d:a8:d9:b4:
6c:f8:7b:ea:98:a8:a8:64:f6:ae:ad:7f:ef:7b:e7:87:a8:55:
6f:b1:a9:61:79:32:bd:41:47:ca:00:f0:1d:86:55:22:ca:db:
75:37:49:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:49 2026 by rpki-client