Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143864.roa
File: AS143864.roa (raw, json)
Hash identifier: C6UcRUnsjIitym7O0Glb7xIrltWJ22AGGhHjHd2wnOo=
Subject key identifier: 35:C0:EB:A1:17:A4:97:6F:08:EC:C2:39:50:BF:14:87:A6:81:D2:CE
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 45671C989277CCAE9E03CEE544B0262567A74AE3
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143864.roa
Signing time: Tue 26 May 2026 03:16:55 +0000
ROA not before: Tue 26 May 2026 03:11:55 +0000
ROA not after: Tue 25 May 2027 03:16:55 +0000
asID: 143864
IP address blocks: 240a:a4be::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:67:1c:98:92:77:cc:ae:9e:03:ce:e5:44:b0:26:25:67:a7:4a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:11:55 2026 GMT
Not After : May 25 03:16:55 2027 GMT
Subject: CN=35C0EBA117A4976F08ECC23950BF1487A681D2CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f7:6d:12:5b:a3:93:b3:9b:50:7b:62:90:62:
7c:83:a0:34:27:71:ad:b9:86:2c:5a:89:3c:43:f5:
46:c7:e4:9c:a9:e3:2d:0b:4c:95:ec:56:2b:50:d1:
e9:ff:86:3f:da:92:64:8c:5b:83:fa:b2:a1:9a:71:
36:61:17:78:06:ba:6c:cb:43:6f:16:1f:0f:13:f4:
30:a0:9f:1f:0d:eb:96:0e:d6:65:b0:33:29:42:c2:
96:94:6a:07:62:8e:36:bc:b1:3e:79:bb:17:4c:46:
fb:48:3b:87:75:8d:c5:a8:09:ab:d0:5e:3e:4c:52:
7e:e8:0a:33:67:2c:39:df:cb:55:d9:b8:6c:ac:9f:
e0:d6:b2:93:27:76:e7:70:d5:a7:38:77:b1:ee:a3:
16:cf:08:f6:2f:59:67:d8:04:55:03:26:d4:4f:59:
b2:b6:b1:16:c4:ff:d0:ad:fe:05:47:34:11:35:32:
85:38:8c:85:dd:19:87:2b:16:7c:cc:14:67:78:25:
4c:0e:38:45:0a:8e:7d:15:d1:09:d5:db:e3:1e:48:
c8:74:ae:e1:42:e3:2f:f0:c7:6d:29:b6:42:92:64:
d0:d5:05:ea:57:7e:35:47:77:cc:8f:5e:48:44:24:
86:f9:72:20:c8:ee:d9:46:8a:76:cd:c4:15:08:8a:
ce:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C0:EB:A1:17:A4:97:6F:08:EC:C2:39:50:BF:14:87:A6:81:D2:CE
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143864.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a4be::/32
Signature Algorithm: sha256WithRSAEncryption
b0:52:d4:88:fb:24:fe:50:12:2e:56:df:03:a5:0f:be:db:0d:
49:3c:be:ef:08:ea:2f:7b:14:9f:35:9f:0e:34:7e:27:d8:10:
74:a4:2d:bc:e9:47:72:00:4b:59:c3:c9:91:46:2f:c9:56:0e:
e7:17:93:3c:f7:6c:1f:9e:63:55:4f:54:35:bf:27:aa:ab:25:
f2:d0:39:6c:97:b4:ae:02:c6:87:e3:65:29:ef:be:f4:67:73:
ff:66:f3:5e:6b:ca:68:3c:7b:27:8a:4c:3d:e6:cb:6f:5d:30:
ff:39:a6:d4:26:ef:a9:d4:69:a9:5b:c9:29:2e:79:dc:21:08:
31:34:0e:f4:7c:6f:e9:90:e0:56:3e:b6:70:a9:e5:6b:69:68:
71:4a:8b:27:9a:22:e2:d8:91:47:30:65:8f:89:33:08:ff:b2:
08:33:56:e2:39:35:58:c8:b6:e8:00:66:63:82:f1:a3:bd:84:
b2:aa:7a:5c:0a:44:87:38:03:b5:33:ba:a5:02:9f:e4:0a:5b:
29:22:83:0a:a4:1e:2f:d1:33:d0:50:75:39:b2:49:1e:8b:85:
8e:71:c6:f8:7f:5e:63:e9:1e:fd:71:d1:3f:1d:9f:57:63:c1:
c4:e1:e8:fc:1a:87:32:73:8f:bc:76:5a:bf:62:d3:59:df:4f:
cc:0b:8c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:07 2026 by rpki-client