Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143842.roa
File: AS143842.roa (raw, json)
Hash identifier: JiHmXcJbHxQwiLl5imQRQ7xEejbmJn1IKdkws4kNxU4=
Subject key identifier: 1B:94:19:3E:E8:2C:9E:FE:B8:81:57:C6:7F:B3:53:B6:4B:21:8A:60
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 45231253CB9A80575059A09FC8B7A461DF1B6D05
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143842.roa
Signing time: Tue 26 May 2026 01:12:55 +0000
ROA not before: Tue 26 May 2026 01:07:55 +0000
ROA not after: Tue 25 May 2027 01:12:55 +0000
asID: 143842
IP address blocks: 240a:a4a8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:23:12:53:cb:9a:80:57:50:59:a0:9f:c8:b7:a4:61:df:1b:6d:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:07:55 2026 GMT
Not After : May 25 01:12:55 2027 GMT
Subject: CN=1B94193EE82C9EFEB88157C67FB353B64B218A60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:05:07:f6:0e:fc:ec:96:b6:47:90:a3:05:ec:
44:c6:06:9f:f8:7b:82:90:0d:43:df:67:15:55:8e:
78:4d:01:c3:38:e3:28:9c:7e:de:ee:d6:e1:57:49:
70:23:1d:e8:84:1e:0b:9e:ea:25:98:0c:a0:f3:90:
ed:33:0f:2c:db:77:fa:8e:0a:14:2f:45:d7:ed:ad:
5b:18:f9:c9:78:fe:c6:17:bb:22:25:d8:ff:74:8c:
e0:65:1b:45:b1:15:88:f7:04:2b:09:8c:c0:a0:32:
cd:5e:dd:2c:a0:6f:8c:ae:98:db:a9:bf:db:84:42:
a1:61:cf:02:59:0f:19:e9:ee:ea:42:1b:28:f2:6a:
b1:ec:8f:e7:55:27:92:35:fa:53:5e:ba:f0:c2:d8:
5c:2b:13:cb:25:a4:35:df:01:37:0b:dc:6d:0b:66:
2a:b7:8c:70:36:3f:e1:82:1c:b4:13:71:31:46:e1:
d8:f7:7b:1f:a9:62:ba:79:c6:5e:97:05:68:d8:18:
b0:db:c3:0c:37:ad:76:82:5f:79:5e:8c:ab:fb:63:
b2:a6:e4:0a:41:28:7c:84:0f:7a:09:4b:df:1f:66:
d8:60:3a:0f:5d:0c:03:ff:ab:2f:95:06:b3:79:b1:
2c:f2:82:3a:8e:3b:1d:2f:0f:51:f8:e7:0e:f1:69:
4d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:94:19:3E:E8:2C:9E:FE:B8:81:57:C6:7F:B3:53:B6:4B:21:8A:60
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143842.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a4a8::/32
Signature Algorithm: sha256WithRSAEncryption
51:32:2b:c8:71:50:63:29:a8:4c:aa:2f:63:f7:10:89:7d:89:
e8:db:e9:2c:e7:27:80:53:62:b0:48:aa:bd:b7:5b:84:8e:b3:
41:b1:b4:56:b4:28:9c:43:05:7c:73:56:8b:66:1d:a4:b8:8e:
99:06:53:d8:06:24:8a:a7:b9:a6:e9:f0:24:d0:36:39:fa:f9:
a2:1b:71:38:b3:04:9a:30:eb:f5:77:8c:37:ac:a6:eb:d2:2e:
b4:5b:78:5d:bc:f2:68:20:eb:5a:a9:ba:8b:9a:88:e3:89:9b:
60:96:35:21:36:dc:5c:40:1b:93:5c:5c:ab:97:20:c6:9b:60:
99:d5:20:fd:41:d9:37:19:fe:fa:3b:cc:8d:6a:16:ee:c3:1c:
58:70:e4:7b:bf:d0:77:ee:71:5c:6e:db:6b:49:39:e5:87:53:
d7:d0:45:a7:13:3a:97:6d:ff:f9:a5:c4:49:85:b7:de:80:c2:
77:e1:7e:b3:79:dc:fe:ec:6c:db:ab:ee:16:ec:82:db:ce:f4:
80:a3:cb:e8:35:df:0a:e4:f6:02:25:99:b5:4b:32:b4:9b:63:
d7:9f:f5:a3:31:6a:a5:08:b4:c0:15:5a:90:36:c0:ed:08:5e:
e1:fb:51:1e:ff:f7:2d:8f:66:5e:23:6c:84:09:49:0f:00:86:
f0:ec:02:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:33 2026 by rpki-client