Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143769.roa
File: AS143769.roa (raw, json)
Hash identifier: xFmwVTYq1jR4GYgqv4oZJXlAqAVZ9vJaiquohUP2Hls=
Subject key identifier: C8:91:C8:D0:34:5C:7D:B3:3F:2B:77:B5:B9:70:00:0E:85:83:85:9E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1F96D4B6AD62552C303C5F89DD6F82C6E92D0C03
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143769.roa
Signing time: Mon 25 May 2026 06:28:37 +0000
ROA not before: Mon 25 May 2026 06:23:37 +0000
ROA not after: Mon 24 May 2027 06:28:37 +0000
asID: 143769
IP address blocks: 240a:a45f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:96:d4:b6:ad:62:55:2c:30:3c:5f:89:dd:6f:82:c6:e9:2d:0c:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:37 2026 GMT
Not After : May 24 06:28:37 2027 GMT
Subject: CN=C891C8D0345C7DB33F2B77B5B970000E8583859E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:98:53:29:34:36:73:80:f3:66:2f:c8:3c:b9:
41:91:9d:34:a0:cf:50:a0:32:fd:14:6f:e5:c5:ca:
22:c4:c3:67:fb:2b:1d:1f:9e:08:6d:6f:7e:20:ef:
8c:fa:a0:43:64:5b:06:a9:87:2e:78:a6:1e:b6:bf:
7b:bc:cb:1d:7d:e4:fa:62:53:ee:a4:c3:e6:da:67:
87:cc:24:a4:2e:7e:4f:8d:73:47:4b:be:ed:44:cf:
ae:64:74:f1:9e:23:e6:7c:22:13:f1:18:f3:8c:e3:
69:db:ae:b2:f7:9b:9b:58:6e:a5:7d:f8:e2:b4:7b:
c6:27:7d:9c:85:ef:76:05:9d:3e:dc:6d:2c:25:0f:
63:b0:94:67:cc:f4:3f:98:7d:59:9f:02:4f:73:09:
2f:92:53:53:b8:f1:11:60:5a:21:af:17:0a:07:ad:
3d:49:00:78:77:44:e5:1d:b5:06:69:92:f7:b5:d3:
6b:a8:22:d1:ed:9d:0a:95:ac:be:fb:8b:4c:10:9c:
b1:46:e8:a6:16:bc:d3:75:43:3b:f5:ad:00:5a:ea:
62:af:18:c1:58:ac:9d:95:78:41:8e:a2:13:13:9e:
a5:b9:b4:50:b9:3a:39:37:96:68:0f:ae:52:4e:4d:
1f:69:24:ae:06:43:b2:74:df:7a:dd:e3:6b:27:a7:
e5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:91:C8:D0:34:5C:7D:B3:3F:2B:77:B5:B9:70:00:0E:85:83:85:9E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143769.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a45f::/32
Signature Algorithm: sha256WithRSAEncryption
2d:9e:55:2f:5c:bf:40:1a:ce:8a:93:25:80:8d:24:19:18:59:
0e:97:fa:f3:28:da:19:db:61:82:7f:0f:02:b0:7c:08:38:12:
59:fb:dc:06:0d:ca:68:6d:47:5e:cd:f9:0e:d4:cf:c6:cf:c9:
e8:5e:53:9d:02:7f:f1:ed:8a:e7:31:99:76:93:6c:51:d4:88:
fb:f8:6e:60:a6:f3:c3:92:62:85:55:83:83:e8:4a:9e:d9:4a:
ba:c5:d1:ef:0d:b4:d2:f6:f5:f9:66:be:a8:4f:71:fe:00:51:
8c:c1:05:c3:ad:c2:61:f7:5f:e7:9e:17:cc:9d:b2:d0:04:24:
7a:c5:94:a7:11:f9:20:66:41:3a:4d:04:0d:e4:f0:19:99:b1:
e0:98:19:5e:4d:35:6f:3f:c0:ec:43:20:b5:08:b9:3e:35:89:
50:1c:27:37:fa:1c:0a:91:10:53:a6:aa:af:09:4f:d8:3f:24:
4a:d3:a0:b7:77:5b:06:31:aa:7e:27:c6:b7:20:34:a3:3a:32:
b3:a9:12:c5:0b:00:4b:d6:56:cc:bd:bd:22:ac:e2:13:2d:ac:
10:4a:81:48:d3:82:e0:53:45:67:a0:e3:aa:04:76:91:08:a1:
fd:dd:57:1d:09:47:40:03:7d:10:f7:b8:ef:6f:7f:f0:85:ac:
bf:41:24:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:56 2026 by rpki-client