Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143787.roa
File: AS143787.roa (raw, json)
Hash identifier: 9Hv4DZE/ct7/OOkG+HVXMgZ3OGbwBBfxQPNFR9R9xD4=
Subject key identifier: FE:F6:DA:63:6D:23:14:01:75:E4:DC:06:0D:C4:47:82:E0:B4:D0:A5
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2022F15859268F2FF46B9922804CB6EA1657871F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143787.roa
Signing time: Fri 22 May 2026 06:05:34 +0000
ROA not before: Fri 22 May 2026 06:00:34 +0000
ROA not after: Fri 21 May 2027 06:05:34 +0000
asID: 143787
IP address blocks: 240a:a471::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:22:f1:58:59:26:8f:2f:f4:6b:99:22:80:4c:b6:ea:16:57:87:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:34 2026 GMT
Not After : May 21 06:05:34 2027 GMT
Subject: CN=FEF6DA636D23140175E4DC060DC44782E0B4D0A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:94:18:fe:67:7e:97:65:78:48:af:1c:f6:e2:
1b:38:d0:1e:1a:07:99:b7:47:bb:6c:b0:25:a4:85:
04:6f:1c:cc:d5:a3:f2:91:36:f4:4c:d1:b7:28:bc:
0f:ab:4a:03:70:77:87:bb:45:d8:0f:43:7c:65:7d:
9a:aa:3d:ba:17:8e:93:d7:94:e6:48:52:0b:28:ca:
e5:23:9f:96:ea:e0:e4:eb:09:15:df:b6:80:6f:0b:
b5:03:36:b3:55:ba:44:e8:bc:0a:70:49:2e:23:e9:
8f:4b:eb:9f:48:f5:ea:80:87:ff:1f:59:c5:80:0d:
3d:cc:18:c6:d4:33:45:56:74:ba:d8:b8:ff:a3:11:
a3:9a:59:5b:6e:dd:53:7b:83:8a:4c:74:a9:d9:07:
37:ed:25:e3:ca:63:52:14:37:4d:67:d4:6d:41:f6:
d2:7b:45:6e:cc:9d:cd:e1:af:8b:2d:62:ff:50:de:
3c:10:f1:b2:1f:05:e3:78:0a:29:b6:12:41:3b:70:
c3:b8:88:95:30:48:85:cb:ee:a8:88:10:57:a9:6b:
26:0a:02:6f:60:06:2d:d7:1c:6f:8e:1e:72:94:3b:
0d:a7:84:8a:ec:cd:31:ce:f9:cd:db:db:62:73:62:
92:5b:3d:e0:f6:f8:de:a1:be:d6:b6:91:3e:01:de:
1a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F6:DA:63:6D:23:14:01:75:E4:DC:06:0D:C4:47:82:E0:B4:D0:A5
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143787.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a471::/32
Signature Algorithm: sha256WithRSAEncryption
6b:1c:b7:e1:9a:8d:eb:b3:03:a0:4f:38:07:ac:00:0b:d2:b0:
42:bf:66:94:f5:4c:c8:de:ba:28:72:10:be:f5:5f:6a:e3:5e:
96:1f:4f:eb:ad:28:d5:9a:a0:46:14:3a:bb:01:65:9d:8a:be:
80:7d:62:ca:23:ec:8c:c0:f9:de:5b:c8:09:5f:63:6b:fb:ed:
19:53:3f:1e:91:58:76:06:d3:42:db:9f:11:cf:44:79:3d:ea:
3b:1c:9d:eb:e2:08:35:64:14:95:e9:60:16:cf:97:12:3c:6d:
78:80:51:d7:bf:ad:b6:d2:11:6c:4e:82:70:40:44:16:e7:2b:
f5:94:a7:4a:03:0e:0d:36:2b:a1:eb:ec:ff:3f:3a:e4:e0:da:
65:ec:5e:e1:c0:31:c0:b1:39:24:6a:7a:46:de:70:34:98:3a:
4c:a0:24:73:51:56:0f:d8:ba:60:43:ec:09:96:e2:72:19:6b:
7a:3c:bb:dd:a9:41:12:14:17:8a:e3:e1:b7:62:d3:ff:b8:9c:
b6:bc:ad:aa:a2:99:70:32:c2:4e:b6:a8:c1:77:82:9a:df:d9:
97:71:b0:65:76:99:1e:b4:e5:fc:bb:c3:55:b4:d9:84:af:12:
9b:da:68:b9:86:52:c2:5e:4e:47:6d:c6:c7:dd:47:28:97:ab:
61:2e:17:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:53 2026 by rpki-client