Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143814.roa
File: AS143814.roa (raw, json)
Hash identifier: spZi0a7ueC8HcmJ9bn3yxzX5t5tLe33a3c7KCaPmHU8=
Subject key identifier: AD:A5:D2:C4:AF:C6:36:77:9A:56:2C:D8:77:6A:74:B9:2E:5A:07:07
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 529E8B5777D0F28E7ED48549F76E0BF029984D4D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143814.roa
Signing time: Fri 22 May 2026 06:05:39 +0000
ROA not before: Fri 22 May 2026 06:00:39 +0000
ROA not after: Fri 21 May 2027 06:05:39 +0000
asID: 143814
IP address blocks: 240a:a48c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:9e:8b:57:77:d0:f2:8e:7e:d4:85:49:f7:6e:0b:f0:29:98:4d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:39 2026 GMT
Not After : May 21 06:05:39 2027 GMT
Subject: CN=ADA5D2C4AFC636779A562CD8776A74B92E5A0707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7c:3a:01:da:e7:8f:54:7e:e4:d9:27:f8:54:
da:16:3b:d5:cc:39:5e:10:9d:62:4c:5f:f7:a1:84:
53:a4:4d:43:3b:41:40:d2:ad:ce:a3:36:11:ad:e3:
c0:85:43:7d:97:bf:20:38:1d:b1:32:a4:c7:97:b1:
5e:13:05:c9:1d:e8:8c:e1:54:09:9b:1b:fc:e9:3e:
09:43:1c:ee:24:34:1c:c6:e6:b4:8c:c6:5c:36:e1:
8a:d4:38:c7:51:62:2e:ae:e4:31:bb:87:56:20:13:
a0:54:74:d2:ea:ee:55:6c:a6:b2:a1:5d:1a:00:7e:
ca:fb:50:0d:73:4b:99:28:98:16:3f:e7:70:93:ba:
94:56:ae:00:91:f3:ac:3e:3a:ca:8b:e1:94:89:25:
e6:11:ac:85:16:44:56:8b:de:53:58:c5:71:2f:34:
f7:e8:55:0b:d1:de:80:d8:14:95:e3:6a:3c:6b:37:
92:b4:34:1a:53:65:43:54:a5:6d:94:3d:2a:7b:69:
d3:e4:77:86:27:4e:1a:14:44:0f:eb:e8:bd:82:1c:
df:eb:a0:14:07:1a:b3:15:f2:c2:c7:34:d3:da:d8:
51:89:a8:de:f1:1c:72:59:d5:d7:24:ca:d1:0d:43:
cd:c1:50:9a:7b:95:02:83:7e:84:9b:45:f4:62:e0:
7e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A5:D2:C4:AF:C6:36:77:9A:56:2C:D8:77:6A:74:B9:2E:5A:07:07
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143814.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a48c::/32
Signature Algorithm: sha256WithRSAEncryption
a6:44:c6:6c:bf:dc:8c:b0:87:ce:d0:2b:1a:9c:6d:6b:8f:f4:
b7:aa:3f:96:cc:8f:37:fc:97:e9:f3:1e:62:1c:5d:2a:e4:08:
56:30:57:07:b2:a3:b7:e0:06:9f:60:03:39:3c:5c:38:50:2f:
2a:d3:c6:b1:b2:f4:80:e8:0e:a4:b3:dc:2b:82:5f:84:cf:d9:
5d:f4:65:4f:dd:c9:40:e3:81:2c:53:42:92:03:a5:b1:5d:79:
5c:2d:38:3b:63:96:b6:58:11:1a:b3:0d:ff:fa:c5:b6:c8:24:
7e:a6:f3:7c:5e:39:69:57:c4:1e:9c:97:94:cc:ec:ba:bf:7d:
2d:be:e8:64:a8:1a:c1:44:c5:3b:84:db:f4:2c:c5:f3:c4:9c:
f4:07:00:47:a1:1f:fa:2b:89:ae:ce:f5:f5:dd:26:08:de:39:
00:16:e8:f7:12:c2:a8:12:34:55:b3:47:a1:a5:02:90:32:7a:
5e:74:d9:62:9b:b3:d7:db:c2:36:82:d5:07:de:94:a3:74:bb:
dd:b3:ff:af:dd:c5:cc:c2:a0:69:f4:72:33:d6:78:b4:ad:7d:
28:59:b3:21:6f:f5:c1:fc:72:f7:29:bb:8d:78:47:1c:b9:5a:
d7:7c:ff:5d:af:e8:bb:d3:a3:21:19:3e:8b:ec:6b:f1:c0:0c:
6d:48:e4:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:12 2026 by rpki-client