Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143854.roa
File: AS143854.roa (raw, json)
Hash identifier: 7zvY50rIsCVvFRn5n+ckGAzLiJ9eH7FErU9m3NkQEso=
Subject key identifier: 2F:A7:56:CB:3E:DE:43:44:9A:1A:8C:16:4E:F5:86:53:DC:F4:81:04
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7F864A0F1B5158D9619D1CDF837D226CD523E741
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143854.roa
Signing time: Fri 22 May 2026 07:41:01 +0000
ROA not before: Fri 22 May 2026 07:36:01 +0000
ROA not after: Fri 21 May 2027 07:41:01 +0000
asID: 143854
IP address blocks: 240a:a4b4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:86:4a:0f:1b:51:58:d9:61:9d:1c:df:83:7d:22:6c:d5:23:e7:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:36:01 2026 GMT
Not After : May 21 07:41:01 2027 GMT
Subject: CN=2FA756CB3EDE43449A1A8C164EF58653DCF48104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:dc:47:8d:91:94:5c:2a:27:ff:40:fe:e8:22:
43:79:63:31:12:95:93:3d:95:90:ae:aa:c1:f6:7f:
26:13:cf:51:b9:92:e5:b8:13:d7:b4:fd:2e:66:e8:
c9:1c:31:20:15:29:1d:1e:92:a1:d7:82:22:8f:55:
4c:90:d3:97:6e:57:ad:3d:25:70:56:fb:b0:23:cb:
b1:7f:bf:53:26:3a:c1:da:fe:fa:c4:ef:35:7d:a8:
a0:95:93:9b:2e:a9:26:f8:fc:ca:98:eb:a2:64:28:
d6:1b:40:46:5a:1a:50:ce:2f:71:a4:86:91:64:c1:
aa:a4:4f:4c:4c:76:ec:6f:93:56:e1:50:92:f4:2f:
97:ad:b4:01:70:0c:5d:26:82:ed:0d:f9:99:2f:b7:
db:c2:c9:68:8c:48:b9:37:56:8c:c1:98:aa:89:45:
60:e4:69:91:b1:d8:86:d2:2c:40:61:f5:30:6f:a9:
6b:f5:31:47:9f:d7:b9:36:e5:a7:1d:ce:52:25:2f:
cb:10:61:df:1d:db:5c:7b:91:fc:e7:93:09:ab:d1:
70:57:7b:8c:b3:d0:09:17:c4:ca:62:0b:12:b3:45:
a7:7b:cf:ad:b0:ce:b6:ca:1d:44:73:9e:95:e1:8c:
d0:25:58:5b:c9:f8:2b:26:9d:31:b1:d4:18:2c:c4:
9a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A7:56:CB:3E:DE:43:44:9A:1A:8C:16:4E:F5:86:53:DC:F4:81:04
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143854.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a4b4::/32
Signature Algorithm: sha256WithRSAEncryption
25:29:9c:c3:02:86:96:9c:91:a1:01:cf:57:a5:a2:cd:eb:28:
83:d5:af:d5:3b:7d:c4:7e:d1:02:93:e8:f6:0c:97:eb:9f:ab:
76:ad:20:69:28:1a:d6:0c:b8:f1:3b:4e:37:3f:08:4a:c5:6e:
45:f8:5a:70:d6:34:7c:a4:c1:fa:0d:01:ea:ec:a5:9e:98:b0:
f2:d3:a7:cf:13:be:86:94:c2:51:a3:90:e3:99:72:df:90:22:
75:2f:c6:20:54:5e:d6:7a:ef:ca:b4:90:b7:7e:3e:3a:f1:54:
7c:0f:83:d3:3b:52:e3:dd:ff:f6:80:36:22:4e:63:46:a6:f4:
c1:b2:a2:c6:70:c4:2d:7f:bd:e0:9c:b0:4c:51:f9:47:3b:4e:
b4:20:43:e3:b0:af:55:71:5d:0d:c5:46:82:4a:c8:2f:fc:65:
ec:f3:3f:37:8c:7f:af:55:5a:63:e5:20:15:b9:b7:50:86:68:
b4:47:9a:03:96:7b:30:28:fa:e5:f7:9d:77:93:27:7a:fa:20:
6d:29:b1:26:60:3c:f9:59:b9:3e:6c:4c:59:e9:2d:3f:79:56:
1e:e7:a8:72:65:68:6f:3f:96:09:b2:8f:f0:77:03:af:41:79:
e3:1c:b4:51:c0:0e:9a:00:b0:89:da:f7:05:ae:41:e5:5a:3a:
5e:9a:40:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:50:00 2026 by rpki-client