Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143818.roa
File: AS143818.roa (raw, json)
Hash identifier: KGZ0vpqcfg4TseO8+AqraKRSRY+4dGrjSM2O0zNyNrU=
Subject key identifier: 63:B2:59:4E:EE:88:6F:ED:7C:62:44:EF:57:AE:2E:4E:96:D0:BF:15
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7684EC1F861C9DF620D40E0632612C59A1BA0F94
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143818.roa
Signing time: Tue 26 May 2026 06:30:37 +0000
ROA not before: Tue 26 May 2026 06:25:37 +0000
ROA not after: Tue 25 May 2027 06:30:37 +0000
asID: 143818
IP address blocks: 240a:a490::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:84:ec:1f:86:1c:9d:f6:20:d4:0e:06:32:61:2c:59:a1:ba:0f:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:25:37 2026 GMT
Not After : May 25 06:30:37 2027 GMT
Subject: CN=63B2594EEE886FED7C6244EF57AE2E4E96D0BF15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e8:c8:e9:03:14:51:2c:b8:2f:04:19:0c:44:
49:ad:8e:c3:81:93:f9:34:08:1f:51:19:ea:c1:ea:
c3:2f:39:30:9d:28:32:00:48:95:fd:63:58:6e:20:
ae:a0:02:51:19:95:7d:d1:ac:0f:3c:a2:64:8b:ae:
77:7b:63:d2:f9:23:53:9b:f6:16:75:91:3b:f4:b5:
86:99:76:8d:2a:7b:0e:de:f9:e2:82:c6:ea:5c:cb:
2a:e5:09:5a:49:4f:7b:df:73:66:5e:c8:5e:dd:d2:
02:2c:e3:06:ea:6c:11:0c:bc:89:8a:a4:4f:17:21:
05:6a:81:41:d5:25:05:3f:db:a8:c6:1c:be:82:93:
e4:0a:56:d9:a1:62:c9:8a:20:a0:0f:bb:0d:86:ea:
5b:92:bf:2f:1f:8f:8b:ce:69:07:82:a4:5f:16:42:
e2:94:04:fa:5e:ed:4c:1b:95:a0:27:0d:90:39:f0:
ba:c4:c0:1d:2d:46:73:f0:74:af:cc:e1:ad:1d:88:
c3:ec:bb:0c:c7:ed:c7:02:e9:23:cf:f8:2a:a5:80:
90:89:ba:c5:32:21:1d:70:39:90:96:bd:f6:43:6b:
28:c5:af:41:a3:e9:06:74:b5:41:db:87:d7:73:4f:
6b:f5:a4:00:1c:06:8c:b7:f1:1f:37:d9:fa:d3:82:
bd:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B2:59:4E:EE:88:6F:ED:7C:62:44:EF:57:AE:2E:4E:96:D0:BF:15
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143818.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a490::/32
Signature Algorithm: sha256WithRSAEncryption
ad:31:93:3f:2a:51:14:be:22:cf:88:94:f9:58:5e:70:16:fd:
b2:5b:c0:17:83:56:ec:78:2b:08:3b:a5:39:4c:65:54:84:ec:
1e:aa:a8:a5:a8:cf:34:36:94:ee:b3:8b:df:a6:49:88:83:41:
ce:41:81:a1:e0:a6:74:2a:b8:a6:82:48:9b:08:4f:44:c9:60:
52:bb:7e:bb:49:7d:e7:7f:85:7a:40:80:e7:45:24:19:f0:51:
16:72:f1:86:03:47:ff:c6:33:16:c1:fc:4b:a1:8a:71:8e:6b:
be:a7:7b:cb:67:ca:a1:1f:42:3e:d0:90:6b:72:a6:6b:33:73:
af:90:7e:cd:68:fe:a7:24:b4:bf:ff:5e:71:da:61:9c:43:64:
f8:7f:40:10:0a:87:58:4d:ef:9c:fd:24:da:2f:87:68:70:46:
af:3f:83:3c:29:f1:b1:2f:0b:9e:f1:9a:0a:fe:a6:1d:00:99:
8a:73:a3:81:74:3b:e1:24:d4:78:b0:3e:3d:db:ec:41:14:80:
42:9f:c7:fc:fa:4d:fc:51:fd:f3:c5:93:22:18:5e:45:2e:81:
0e:01:56:78:cf:49:4b:bf:00:ad:2a:e3:c1:6f:a4:48:d8:77:
04:a5:5c:f0:d5:8f:64:d8:c2:83:c3:9a:77:4b:c6:91:1f:cd:
f3:ab:6c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:09 2026 by rpki-client