Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143857.roa
File: AS143857.roa (raw, json)
Hash identifier: 0j8ul4a73P3/G4LTUy9cIRnxTakU0DwflP8xcnG3sUE=
Subject key identifier: 69:E2:1D:E0:C9:58:26:0D:32:86:C2:38:7F:1B:88:1D:71:87:7F:35
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 130D3314EF8F91101AD3D15E2F68E559A2A605C5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143857.roa
Signing time: Fri 22 May 2026 07:24:38 +0000
ROA not before: Fri 22 May 2026 07:19:38 +0000
ROA not after: Fri 21 May 2027 07:24:38 +0000
asID: 143857
IP address blocks: 240a:a4b7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:0d:33:14:ef:8f:91:10:1a:d3:d1:5e:2f:68:e5:59:a2:a6:05:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:38 2026 GMT
Not After : May 21 07:24:38 2027 GMT
Subject: CN=69E21DE0C958260D3286C2387F1B881D71877F35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2d:a4:b2:d0:28:a2:5a:14:4e:73:5c:4f:dc:
4a:35:1f:69:71:4b:fe:f4:da:37:84:e5:7b:e0:82:
09:bf:98:80:f0:63:11:a0:32:60:0b:4c:61:87:26:
ea:64:e8:29:7b:02:96:68:32:79:dd:1b:7b:76:89:
31:8f:27:b1:19:ff:fa:4d:df:be:77:4d:05:64:65:
20:30:85:c2:9c:a1:1c:dc:50:87:0e:da:0b:3c:ea:
5c:38:27:30:1d:56:21:61:4d:73:d5:e8:0c:db:e8:
82:d8:99:5a:2f:09:14:26:2f:11:63:d2:1b:94:eb:
c1:3f:5f:4e:12:d1:30:97:c3:2f:0e:75:23:6c:d6:
5b:41:3d:81:76:51:84:3a:02:e3:f2:1b:35:1d:f8:
88:c1:05:f8:f6:3b:de:d7:ca:a1:02:17:3b:62:38:
a0:aa:d3:69:ba:5b:f2:6a:e4:ae:9b:64:50:c4:9a:
3b:71:b2:63:08:8d:1d:3a:5b:ff:7a:0e:d2:a8:4f:
a9:18:05:b2:2a:bc:28:84:3d:43:67:c6:bd:98:d3:
7f:3f:39:f3:58:ce:e1:0f:f5:bb:28:00:dc:5a:98:
1b:2c:82:12:06:f8:8c:24:5b:f5:c5:0a:5b:aa:6e:
d1:6c:72:85:fe:a5:ae:b3:1b:57:c9:28:12:91:7f:
db:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E2:1D:E0:C9:58:26:0D:32:86:C2:38:7F:1B:88:1D:71:87:7F:35
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143857.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a4b7::/32
Signature Algorithm: sha256WithRSAEncryption
2e:06:ee:bc:b8:98:b4:29:d4:30:05:b0:41:fe:da:95:5f:43:
19:12:d3:47:97:a6:c4:e7:06:c7:b7:11:6c:81:77:04:eb:9c:
8d:7b:28:79:01:0d:d5:a3:7c:40:21:3f:b7:8b:4c:62:27:7e:
00:38:04:a6:ab:26:91:a0:c7:b2:0f:c8:18:12:f2:04:97:1e:
b5:59:8b:cd:6d:e5:6c:d6:a5:01:19:de:80:d0:e5:c0:cc:95:
da:ef:99:97:6e:e2:cd:f0:a6:e3:c5:2a:94:75:54:39:de:43:
aa:5a:44:69:1a:de:fe:ea:ff:8c:69:96:ff:1e:8b:3a:4c:5b:
9e:1c:b9:79:62:ab:c0:41:92:91:b5:4a:fc:a0:0b:81:b2:bb:
44:73:97:be:07:0f:d9:61:87:da:26:c7:51:b4:96:49:70:d8:
0c:7b:ad:5e:2d:07:3a:f5:6a:55:72:00:21:42:fd:67:7f:30:
2d:23:82:57:84:35:dd:26:16:fa:54:5e:21:71:ff:af:fc:7c:
5f:6b:41:05:e1:0b:b8:fe:da:01:65:ed:80:5d:a3:d9:50:70:
57:4a:57:b9:3e:63:22:cf:22:82:98:e9:6e:8c:88:ee:6c:0e:
6f:1a:98:1f:54:70:59:a8:41:a3:d0:5c:fa:b7:50:01:b1:0c:
9a:66:83:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:14 2026 by rpki-client