Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143810.roa
File: AS143810.roa (raw, json)
Hash identifier: APXEQ633xujxoSUJmDOexE5os22iFNdNhuqLC0Xp00I=
Subject key identifier: DE:1A:3A:85:87:CF:B3:D3:79:8D:7B:72:AF:37:20:27:6E:65:81:E0
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 408C00B52B612A72747AB2F1173251831B1EC077
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143810.roa
Signing time: Fri 22 May 2026 01:50:22 +0000
ROA not before: Fri 22 May 2026 01:45:22 +0000
ROA not after: Fri 21 May 2027 01:50:22 +0000
asID: 143810
IP address blocks: 240a:a488::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:8c:00:b5:2b:61:2a:72:74:7a:b2:f1:17:32:51:83:1b:1e:c0:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:22 2026 GMT
Not After : May 21 01:50:22 2027 GMT
Subject: CN=DE1A3A8587CFB3D3798D7B72AF3720276E6581E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:af:33:40:9c:45:fb:a6:da:aa:1a:40:18:d8:
b9:72:d0:f9:2f:39:2b:47:9b:0a:5e:be:c1:f9:d3:
d7:42:8c:0e:65:2c:df:69:0c:a0:13:ec:18:a3:6e:
7b:cc:2c:42:17:32:24:7e:6b:0d:7d:c1:38:48:ad:
90:32:35:91:68:6b:66:9f:c4:f6:03:67:d0:3f:8a:
cb:c8:23:88:cc:b1:0b:97:df:4a:06:7f:8a:9e:67:
ae:fb:5f:7f:41:e7:dd:c8:1c:0c:9b:2e:d5:80:eb:
1a:f1:23:43:cb:b9:f2:11:41:22:33:96:af:83:e5:
94:de:a1:3c:d9:bb:94:64:92:df:f0:66:88:65:09:
d2:6f:f7:4c:2d:25:9b:7a:e4:0b:71:7d:6e:47:3c:
77:db:74:ec:ef:eb:55:44:08:f2:31:1b:17:35:a7:
65:26:ac:ee:fd:a8:f9:c2:29:5c:a2:ba:4e:5f:ef:
fd:80:d9:b0:27:2a:47:c4:a5:1a:a4:77:4a:17:ff:
fb:59:40:99:22:f2:e7:c7:47:1e:ba:25:34:c4:d7:
ad:f4:f1:00:05:d6:d4:9b:74:86:2c:97:59:67:f0:
ed:1f:20:3f:58:5e:04:e8:27:71:0b:0d:9d:46:ff:
b2:b7:43:3b:85:8b:57:19:8a:11:2a:fe:de:9c:b1:
a1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:1A:3A:85:87:CF:B3:D3:79:8D:7B:72:AF:37:20:27:6E:65:81:E0
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143810.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a488::/32
Signature Algorithm: sha256WithRSAEncryption
0f:d2:cf:67:67:7f:75:0e:d4:b0:2b:f9:82:8d:ca:27:dd:ca:
ba:a5:29:74:98:35:0b:98:d7:98:1d:d7:40:82:10:0a:69:83:
71:f2:23:8c:42:49:b7:c6:1a:01:7a:8c:28:14:d1:1e:72:a9:
d8:1e:27:19:ba:40:7c:5b:d4:a7:91:0a:43:a0:cd:56:5b:0c:
71:a8:36:cc:37:d8:9d:e6:ca:db:2d:6b:a3:4a:a2:da:cb:78:
9c:cf:f0:77:af:7d:27:76:01:21:13:0b:77:94:5a:e3:f1:8a:
28:55:9b:60:80:7a:bd:25:d0:57:ca:f3:1f:9f:dc:e7:34:67:
f1:0b:22:cf:9f:6c:33:7e:d3:52:de:7e:c9:06:8e:6a:f4:18:
ae:ea:a1:cd:dc:66:46:f8:4b:9f:cf:21:b6:07:14:96:29:ce:
d0:b3:cf:55:b7:49:b5:b0:cd:74:06:95:6a:c9:a6:1e:fd:d7:
2f:b2:04:be:15:b9:13:df:f3:17:16:c6:75:44:88:76:bc:e3:
e5:45:88:ca:0e:cd:e8:4b:5c:bc:3a:d8:83:15:73:f3:19:bc:
27:de:e6:97:d2:de:e1:0c:a6:2b:f7:d6:2b:dd:1b:f6:d3:1d:
e6:41:16:4d:2e:a5:bf:bc:e3:7a:17:7b:c1:17:2c:55:3e:d8:
22:7b:28:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:07 2026 by rpki-client