Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143863.roa
File: AS143863.roa (raw, json)
Hash identifier: gVO75lgMGjkeanEFAe42NiL66t8wE9CdzPuhfDt7LYI=
Subject key identifier: 3B:86:D0:73:47:0F:04:A7:56:7C:19:7A:C4:29:D5:C7:94:AF:17:BD
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1F0F383C3A93A7BD6491994193CF24B374708C32
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143863.roa
Signing time: Tue 26 May 2026 01:13:06 +0000
ROA not before: Tue 26 May 2026 01:08:06 +0000
ROA not after: Tue 25 May 2027 01:13:06 +0000
asID: 143863
IP address blocks: 240a:a4bd::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:0f:38:3c:3a:93:a7:bd:64:91:99:41:93:cf:24:b3:74:70:8c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:06 2026 GMT
Not After : May 25 01:13:06 2027 GMT
Subject: CN=3B86D073470F04A7567C197AC429D5C794AF17BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:de:bb:de:92:26:18:5a:47:0d:11:fa:51:f0:
69:0d:46:f2:f4:18:c3:df:ce:69:af:fe:3c:3e:c0:
0f:42:0d:01:1a:fc:32:23:24:b7:88:7b:92:97:77:
10:5f:89:de:71:64:7d:7d:80:f1:fa:ec:2f:a9:27:
11:eb:68:fa:eb:02:59:e6:b2:b9:c3:32:9e:db:39:
5b:56:0d:4f:d3:3a:34:98:60:fb:2f:5a:8e:f0:e3:
27:0f:c1:49:75:12:07:87:ff:69:2b:4d:c4:2f:bc:
ea:8a:e9:4d:56:4d:42:03:03:10:ae:90:5b:6f:32:
0d:c9:1d:b8:ab:c7:16:ba:8c:47:4a:a5:d8:3a:16:
7a:34:2b:eb:3f:47:40:c8:20:4d:d9:2e:4e:23:d6:
54:fd:3c:dd:69:a8:f1:40:6f:03:e2:60:03:d4:9d:
3d:78:b8:4d:81:09:3a:7e:54:72:5c:71:7c:0e:26:
ff:20:8f:c9:4e:a5:8d:ad:62:20:c1:59:c3:c3:e5:
85:62:25:41:b5:00:4c:35:1b:bf:68:78:a8:32:c7:
33:cd:82:e3:24:d4:ab:af:91:d4:a8:d1:f0:35:b8:
09:b0:4d:ab:18:52:a2:d8:11:6c:10:e6:fc:c4:67:
60:49:c2:23:24:9c:6c:c8:8e:e9:bc:dc:a5:8e:78:
a6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:86:D0:73:47:0F:04:A7:56:7C:19:7A:C4:29:D5:C7:94:AF:17:BD
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143863.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a4bd::/32
Signature Algorithm: sha256WithRSAEncryption
1b:56:b6:38:cf:ba:23:64:24:d0:7e:e2:31:b1:50:d0:cb:d5:
fe:09:0b:05:ee:3f:11:45:48:5e:af:f7:10:a8:96:96:de:78:
1d:95:a7:fb:28:5b:71:22:0a:1c:d0:9e:a5:e2:88:62:75:00:
f6:cf:39:78:f8:bb:7c:8a:8e:5e:cd:00:55:49:62:1b:ff:32:
57:ec:80:3d:d7:29:bf:ae:c7:71:4c:ef:7f:71:d7:92:d3:1e:
76:26:6b:df:02:42:66:fc:0c:a2:7f:a6:95:e3:05:79:a1:8a:
b0:32:cd:5b:4a:b4:ed:84:ed:6c:10:cd:5d:bc:48:a6:c5:fa:
a6:ce:c4:4f:e9:c1:82:77:c3:3a:90:37:d4:3f:38:c3:6d:0e:
90:3c:bc:30:4c:2c:a0:52:b3:92:8a:c5:84:93:9e:93:11:10:
07:8e:ed:a6:a9:5a:b0:87:31:23:93:fe:6d:e1:2c:6d:4f:a9:
9b:f2:81:bc:2b:31:fd:97:a7:58:be:f1:74:bc:3d:53:97:dd:
00:2c:01:5b:90:e1:20:01:e3:2e:1c:ad:88:9c:41:42:16:39:
9a:7b:4e:fb:c2:2f:4c:e6:71:a9:fd:5b:a3:c4:76:44:38:a4:
36:bb:d0:c1:b2:04:c1:3e:c2:48:98:4b:03:dc:6a:d4:ba:fc:
52:62:ba:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:11 2026 by rpki-client