Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143812.roa
File: AS143812.roa (raw, json)
Hash identifier: m5QYbrQpJ4YdMlLFQQOU+QCOr+bN9rbUFPhQXtVRMC0=
Subject key identifier: 75:2A:F8:83:DE:00:6E:B4:1C:D8:92:5E:29:21:9A:97:E6:21:6F:40
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: E75A9EC874872EA64FA8B7258EA6F8EA6FFBF4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143812.roa
Signing time: Tue 26 May 2026 01:13:27 +0000
ROA not before: Tue 26 May 2026 01:08:27 +0000
ROA not after: Tue 25 May 2027 01:13:27 +0000
asID: 143812
IP address blocks: 240a:a48a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
e7:5a:9e:c8:74:87:2e:a6:4f:a8:b7:25:8e:a6:f8:ea:6f:fb:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:27 2026 GMT
Not After : May 25 01:13:27 2027 GMT
Subject: CN=752AF883DE006EB41CD8925E29219A97E6216F40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e9:d7:83:ab:70:f8:4b:82:91:87:b3:cd:07:
dd:c4:3f:9e:0f:43:ed:f8:99:60:fe:41:08:05:c0:
1c:fe:9f:ee:79:e2:67:88:de:3c:20:02:dc:ac:0d:
e9:bf:42:9e:95:42:ce:cb:91:d6:6d:66:25:da:0e:
7e:85:c7:f8:23:2f:88:2e:28:8b:9c:38:8a:29:71:
90:59:00:01:00:52:da:e9:57:41:d0:9f:24:6a:cc:
b7:e5:a4:1f:a4:37:c9:91:31:e8:b1:f4:bb:f5:ec:
e0:7e:e5:14:7a:d0:53:33:38:8d:2d:49:53:79:c5:
f4:d9:e1:91:35:7c:ad:11:40:d8:54:b9:79:05:72:
b2:57:8c:2f:8f:72:7b:ff:4c:ad:cd:8d:79:4d:fc:
71:bd:a3:e8:fe:4e:d0:00:55:e9:8d:f9:46:97:6b:
a5:61:11:6e:be:e2:b5:d6:7d:74:41:16:88:0e:68:
31:ad:1b:8f:56:f0:a2:31:e1:0e:e9:71:28:e2:70:
fa:a4:39:9d:fc:8f:58:19:e4:e8:bf:d8:c1:e0:65:
ac:fc:2f:36:80:62:1e:c0:13:23:08:8c:09:27:a9:
22:2f:2f:43:83:03:cc:04:13:25:0c:a4:de:20:af:
20:14:e6:02:a5:87:fc:e2:98:f4:7a:24:1f:07:1e:
c2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:2A:F8:83:DE:00:6E:B4:1C:D8:92:5E:29:21:9A:97:E6:21:6F:40
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143812.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a48a::/32
Signature Algorithm: sha256WithRSAEncryption
6e:26:dc:6a:d9:89:77:ef:f3:3a:e4:d0:2a:b2:9a:97:9f:ae:
cd:89:89:9b:37:47:2a:0d:5a:8a:9f:27:81:a3:8b:53:23:55:
db:25:ad:fa:0e:43:c3:bd:c4:f6:94:fd:de:34:c3:d1:64:74:
21:7a:8d:cd:d9:fe:1c:2a:2a:1a:7d:5c:f4:db:fc:7c:42:cf:
a6:04:2c:9b:e9:ea:39:44:1e:e6:04:f1:f7:58:be:cd:27:b9:
6b:2e:72:8b:8a:8d:7f:5f:b3:9e:45:7f:20:0c:aa:f2:7e:ea:
84:57:34:a1:1d:8f:a0:b3:13:ad:2b:9c:e8:57:23:52:0d:a8:
93:2b:1d:fd:44:60:8d:e1:54:74:20:aa:b8:40:7a:84:e4:a1:
91:97:52:d1:6f:3b:73:e6:cf:38:b5:3f:a6:a5:ba:95:f6:69:
ee:78:ec:00:06:f0:34:f2:e9:32:df:f8:2f:99:6d:61:c9:94:
a5:67:af:88:58:d6:a8:5a:46:ca:af:ba:16:a2:93:e7:7f:17:
94:d7:fd:76:cb:ab:da:47:fc:cb:34:a7:44:16:09:58:f2:0e:
ca:03:c7:a6:23:6f:fd:67:5c:2c:84:4a:1c:3a:d4:fb:61:91:
f8:d2:bb:dc:15:6f:38:92:ad:b1:9c:a1:2b:e2:28:86:65:cd:
d4:61:66:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:18 2026 by rpki-client