Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143786.roa
File: AS143786.roa (raw, json)
Hash identifier: p6VkBVcZTMf/Qf/qXGWGvI9ep3gtgmz8fizDAxP8brI=
Subject key identifier: B9:D2:05:C1:9C:0C:AB:AA:E0:9E:BB:8C:36:CE:E6:8E:A5:23:4B:59
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7BABD49445C8F6BD7C2D2E83B165F13EE4C2FBBA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143786.roa
Signing time: Mon 25 May 2026 06:28:23 +0000
ROA not before: Mon 25 May 2026 06:23:23 +0000
ROA not after: Mon 24 May 2027 06:28:23 +0000
asID: 143786
IP address blocks: 240a:a470::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:ab:d4:94:45:c8:f6:bd:7c:2d:2e:83:b1:65:f1:3e:e4:c2:fb:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:23 2026 GMT
Not After : May 24 06:28:23 2027 GMT
Subject: CN=B9D205C19C0CABAAE09EBB8C36CEE68EA5234B59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ea:65:cb:ee:07:d6:79:8f:1a:fa:40:11:65:
87:d7:1b:4a:e3:61:98:ae:60:ee:27:29:08:23:21:
4d:d8:af:46:ee:71:60:bf:90:ce:14:3f:31:43:6e:
21:4c:7e:ed:ab:0f:12:a4:bf:e8:55:29:0f:1c:f7:
8b:66:ee:ad:f3:c1:8b:48:5b:76:4b:a7:77:42:de:
ab:d4:3e:5e:db:5d:fc:c0:e5:fd:26:ae:ed:dc:01:
20:00:55:94:86:e5:22:eb:cf:8f:db:d8:cd:0f:be:
af:cd:5f:5c:73:8a:6b:76:ef:10:37:02:df:32:9d:
15:0c:78:8a:f5:9a:21:a8:a7:e4:32:9c:d8:53:68:
41:5f:1c:07:82:94:6f:e9:7a:0d:94:58:09:be:1a:
2a:35:b0:d0:1f:3c:91:90:ac:15:f8:78:41:79:ba:
ea:a4:e1:43:a2:dd:86:2a:b7:c8:42:86:83:4c:d7:
ea:bb:aa:33:5f:5a:ed:05:51:39:42:83:f9:a4:db:
4f:cf:65:b1:17:61:fd:26:e8:67:65:72:aa:9e:4c:
81:01:bb:a1:88:32:65:22:64:e9:dd:c8:b1:3f:5d:
64:e3:6b:2a:37:b0:6f:3c:99:d9:10:a3:f1:13:a4:
81:0c:38:ac:9b:12:27:09:bc:bc:ac:f9:9d:0b:be:
da:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D2:05:C1:9C:0C:AB:AA:E0:9E:BB:8C:36:CE:E6:8E:A5:23:4B:59
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143786.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a470::/32
Signature Algorithm: sha256WithRSAEncryption
09:20:f5:95:a6:d7:91:1d:4c:32:ec:2b:7a:5e:84:25:22:de:
3f:51:2c:89:9a:77:e7:a0:a9:0e:cf:68:cf:4a:4e:ee:6d:80:
e9:69:bc:a8:0c:06:0b:a7:e1:65:92:5b:79:d4:ef:15:26:a4:
0e:4d:a7:0e:d7:3b:ab:76:1b:14:1b:75:64:34:19:76:3c:4c:
8a:ef:84:60:37:7d:68:6f:d7:d9:47:d0:7c:d1:0e:14:68:f4:
18:db:66:58:49:6f:f1:eb:27:d8:da:a4:13:c2:fe:e7:f6:d3:
3d:5f:cf:1c:d7:e4:58:e7:c6:92:d3:40:85:c0:5e:fa:17:dd:
41:4a:56:14:dd:a7:d3:32:3b:14:0b:19:6f:6c:62:ab:29:a6:
89:a4:85:e8:36:84:d0:d8:a5:c4:b1:b8:2f:d4:c2:cd:28:5f:
7e:8f:f6:a7:96:9e:7d:37:5d:f0:29:c3:8e:8a:3e:86:54:15:
da:30:5f:fd:3c:f4:21:90:3c:3c:db:61:4b:cd:fb:ff:5d:fa:
82:ff:67:b7:e0:75:fc:e6:38:a1:c5:6f:c7:19:79:4a:94:4c:
a4:8c:98:61:1d:89:01:2f:8d:6c:46:3c:d2:0f:c6:a0:34:5d:
27:ff:40:1a:fa:75:9f:e7:3c:65:e9:56:08:de:59:b9:e9:d9:
b6:80:69:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:36 2026 by rpki-client