Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143865.roa
File: AS143865.roa (raw, json)
Hash identifier: tgprYpGJ+/YLA6UOdoX6hH2gZJi4vM0EUzlFpYeVutY=
Subject key identifier: E0:44:1D:B4:AF:34:5C:4B:9D:33:48:11:57:39:37:24:9C:B3:7B:9A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7C47ECFC100C234742D7921CC4C2BB7F726725B6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143865.roa
Signing time: Fri 22 May 2026 07:25:00 +0000
ROA not before: Fri 22 May 2026 07:20:00 +0000
ROA not after: Fri 21 May 2027 07:25:00 +0000
asID: 143865
IP address blocks: 240a:a4bf::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:47:ec:fc:10:0c:23:47:42:d7:92:1c:c4:c2:bb:7f:72:67:25:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:20:00 2026 GMT
Not After : May 21 07:25:00 2027 GMT
Subject: CN=E0441DB4AF345C4B9D334811573937249CB37B9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:35:b2:c0:19:b5:ba:60:7a:17:4c:07:ba:e0:
86:02:00:22:19:1d:c0:5e:23:40:ed:30:ea:7e:25:
7e:fe:58:9d:09:e8:98:10:df:ca:78:59:46:db:05:
c3:e3:43:61:39:6d:f7:2d:64:bc:b4:5a:16:22:4f:
b2:c9:c8:24:20:7a:6a:0f:81:f0:53:4a:7a:a4:42:
9f:e2:ce:54:09:b0:8b:6e:41:06:00:28:58:d6:2c:
ae:29:2b:fb:d4:33:38:89:06:22:de:ee:e3:cf:cb:
6d:5c:75:ae:88:91:50:c5:15:28:82:d5:6f:69:2a:
7b:2a:89:db:8d:5b:b9:57:8e:f0:07:a6:b3:4b:d1:
41:ca:85:3a:8c:a0:1d:fd:38:83:1f:3a:4e:bb:68:
0a:e4:d6:4c:67:07:eb:e2:20:2b:ea:72:02:b3:87:
9e:5b:bd:a5:4e:9e:a8:58:fa:ba:ec:fc:4f:b2:7c:
fa:0b:ff:f2:2e:b7:08:09:c5:7f:eb:96:86:0f:0e:
f0:d4:c8:df:2a:f5:0e:4d:e3:6c:50:52:8f:ed:c5:
9c:b4:87:27:8a:81:3f:2e:ae:e4:9b:d2:6f:f3:6f:
fe:73:f5:92:c1:b6:76:ae:b5:c6:ae:59:5c:76:2e:
be:0d:53:28:11:a9:b4:34:99:d0:72:01:41:17:82:
e0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:44:1D:B4:AF:34:5C:4B:9D:33:48:11:57:39:37:24:9C:B3:7B:9A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143865.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a4bf::/32
Signature Algorithm: sha256WithRSAEncryption
09:6b:a3:b9:d3:5a:50:5e:ec:ab:e5:4e:08:df:ac:5f:d8:7f:
75:10:ef:f4:4c:c4:ae:6d:7f:46:00:39:5a:02:e8:b1:a4:46:
98:80:cc:d9:26:26:d6:b2:18:c3:7f:2c:93:a1:72:81:d8:20:
df:d8:73:a5:12:6f:cd:c4:90:b8:12:79:75:f9:f0:85:32:4c:
83:04:0f:8b:cd:5b:84:43:7f:01:f1:b5:d2:6f:07:77:6c:fb:
ba:c3:9b:ac:ce:17:74:18:66:81:59:7f:4a:ff:48:25:89:fd:
23:4c:7a:d9:de:82:bf:e7:83:93:02:ae:dc:a0:79:e7:f4:8c:
6e:3a:68:a4:65:dc:9c:01:ee:58:48:74:04:f0:88:02:1f:ef:
32:18:4e:6c:f3:65:99:da:09:0f:06:8b:5c:95:ca:e1:38:d9:
5e:ba:a4:21:4d:d8:8f:4b:a3:70:06:46:0d:3c:09:89:a5:5c:
7a:e6:3b:11:58:11:e1:3c:fd:17:95:87:2b:eb:50:a1:1e:82:
8b:0c:a0:2b:78:7c:b5:a8:e6:28:f2:f3:7d:c3:42:0d:19:ec:
74:20:45:49:ad:f5:7c:f8:c0:f0:5d:4f:17:fa:09:14:f1:27:
92:5a:46:31:5f:a9:f2:d9:79:28:b6:ad:d1:06:fb:c6:fe:4f:
6f:59:6e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:00 2026 by rpki-client