Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143803.roa
File: AS143803.roa (raw, json)
Hash identifier: bY+eXRu4ZpQmqHHhXHMpN7BO4Qv/xvqU4KF3fz8n2QE=
Subject key identifier: EC:B0:3A:95:E0:F1:3D:A2:26:52:63:3F:52:1B:F8:1E:BF:8C:FF:D9
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 70D30EB0229BD163F99783C2FAC454DB1E5821DF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143803.roa
Signing time: Fri 22 May 2026 06:27:57 +0000
ROA not before: Fri 22 May 2026 06:22:57 +0000
ROA not after: Fri 21 May 2027 06:27:57 +0000
asID: 143803
IP address blocks: 240a:a481::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:d3:0e:b0:22:9b:d1:63:f9:97:83:c2:fa:c4:54:db:1e:58:21:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:22:57 2026 GMT
Not After : May 21 06:27:57 2027 GMT
Subject: CN=ECB03A95E0F13DA22652633F521BF81EBF8CFFD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f5:d5:3d:1e:a9:67:83:7d:1e:d6:2c:36:d9:
1d:41:10:f1:fd:6a:71:11:c9:5d:4c:f3:79:c4:43:
53:e1:f6:05:48:ba:37:dd:43:61:dc:3a:ce:ea:3e:
cb:eb:74:32:b1:ea:55:b5:7f:e2:7f:99:f8:73:ed:
88:72:06:10:f1:4c:b1:f9:fd:76:d4:a1:48:a8:87:
05:9c:4d:65:6d:62:37:c0:be:e3:78:1c:ec:0e:78:
c1:d1:71:a7:3e:3e:61:0a:70:a9:a4:de:5d:7c:47:
e6:15:a6:c9:05:0b:5e:8a:65:d6:53:f4:7e:ed:1f:
f5:f1:83:c0:6f:e7:0f:45:a0:fe:4d:1b:4e:5c:e1:
6d:c5:9c:91:71:a4:29:39:b3:bf:12:c8:21:a6:2f:
cd:06:d6:65:30:32:b8:23:a6:e5:d3:13:ec:73:5e:
a0:96:c9:97:0d:de:ea:83:86:41:2a:ea:d2:eb:10:
6a:55:0d:63:c3:02:b5:6c:98:67:0c:40:6d:2c:4c:
36:7e:08:d2:ce:3c:4d:c5:a4:a6:14:2f:f6:2d:ed:
cf:2c:cc:0a:89:12:e0:34:22:97:c9:82:4b:18:1d:
b6:22:51:83:0c:d9:5e:73:42:6b:b6:0d:43:a1:d2:
ed:2b:2c:4a:54:29:c4:54:c9:0e:79:92:e6:19:3f:
bd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B0:3A:95:E0:F1:3D:A2:26:52:63:3F:52:1B:F8:1E:BF:8C:FF:D9
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143803.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a481::/32
Signature Algorithm: sha256WithRSAEncryption
32:e1:97:a1:b8:a3:78:ca:02:99:40:3d:8d:cd:b5:88:e3:0d:
75:7a:d9:42:fc:6b:71:81:d5:95:0b:31:a1:f4:83:d8:31:3f:
b7:5c:13:55:b4:6e:0d:51:24:91:59:ae:81:5a:57:04:09:4c:
33:c9:57:61:8c:df:96:31:52:e1:00:44:20:ba:f5:0a:03:a0:
1d:f2:44:2d:63:03:17:25:68:2a:58:01:cd:10:08:09:11:f3:
ae:bb:a2:dd:05:10:e4:29:7f:04:e6:03:ef:50:ec:82:cc:d6:
11:20:cc:94:65:90:61:31:5f:00:75:71:ee:26:da:6b:27:8e:
92:ba:ea:77:dd:fe:79:be:7a:80:9d:c4:74:05:5a:db:75:7a:
8b:a6:7b:a7:38:db:0b:7e:6f:d3:a6:25:52:ad:45:27:12:af:
db:0e:97:6b:55:cd:00:59:1e:0e:5b:7c:37:b3:12:0b:39:f9:
ed:89:1d:e8:39:88:9d:a9:2d:f4:3f:6f:cd:9b:3f:55:dc:43:
c5:6c:10:a9:df:58:a3:94:ec:18:03:fd:d7:9b:be:c8:6e:ad:
b6:a2:ec:41:9e:03:32:03:95:06:0e:a5:37:ca:8d:3e:a9:7f:
6b:59:9f:93:fc:cb:45:4e:dd:c8:26:74:69:09:70:d4:a3:cb:
19:e8:82:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:00 2026 by rpki-client