Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143870.roa
File: AS143870.roa (raw, json)
Hash identifier: 9V1pejtaRxbBrK8vzaBKjoLliMxCDjJoatfLeuPbXe8=
Subject key identifier: 60:6E:D9:13:7A:0A:24:7A:FD:AF:B8:26:15:10:77:EE:36:99:87:3F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 038602E8A5750449F7C48B34E1A2D334C951AD8E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143870.roa
Signing time: Fri 22 May 2026 04:27:03 +0000
ROA not before: Fri 22 May 2026 04:22:03 +0000
ROA not after: Fri 21 May 2027 04:27:03 +0000
asID: 143870
IP address blocks: 240a:a4c4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:86:02:e8:a5:75:04:49:f7:c4:8b:34:e1:a2:d3:34:c9:51:ad:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:22:03 2026 GMT
Not After : May 21 04:27:03 2027 GMT
Subject: CN=606ED9137A0A247AFDAFB826151077EE3699873F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:70:a8:65:c0:fa:ec:fb:d5:d1:24:72:c2:48:
c4:b3:6a:27:40:33:b6:38:30:68:dd:3f:1f:a4:78:
d7:a9:c2:61:4d:1b:ef:2d:4a:7a:1b:d2:c7:5d:fa:
30:be:25:8e:6d:a3:3e:cf:a1:ca:75:9c:e2:e0:86:
be:02:b5:82:08:4d:4c:3b:08:e6:83:89:9b:16:21:
97:3e:e8:b1:63:79:dd:c0:f5:48:8c:26:fd:10:96:
fc:b3:f8:ae:82:90:7b:dd:8e:36:55:7d:78:63:4c:
a9:fa:77:f5:7e:35:14:a3:6c:68:fd:ad:ac:82:67:
f3:34:2f:74:28:63:4d:97:5d:4d:e9:2f:01:f4:41:
64:1e:f5:6b:f2:60:c0:94:79:d2:6e:d0:8b:05:2c:
cf:df:d5:69:95:b3:24:35:b9:09:cc:59:09:53:a9:
b6:d8:f2:54:65:8b:16:44:33:02:12:f9:85:d0:07:
8e:76:dc:31:dd:d9:c3:96:33:13:36:3c:20:2d:66:
c5:ff:30:c9:5e:50:05:a1:bd:ab:db:0d:b7:7f:82:
df:6a:0d:8e:78:94:62:00:41:94:b2:9a:52:4a:e5:
5b:3a:c1:69:02:e5:33:d9:79:90:46:48:bf:31:81:
75:d5:02:19:9a:6e:7e:9a:ee:bd:03:4b:5c:27:46:
e4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:6E:D9:13:7A:0A:24:7A:FD:AF:B8:26:15:10:77:EE:36:99:87:3F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143870.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a4c4::/32
Signature Algorithm: sha256WithRSAEncryption
14:46:de:64:d0:b3:8a:ac:d1:7b:28:23:ed:79:ef:0c:79:4d:
ac:dc:46:b1:67:7a:34:ed:af:51:f9:c1:55:97:f5:54:8b:45:
90:53:30:8a:90:19:4b:68:6e:ce:ed:ff:99:8f:a3:1b:d9:23:
ee:46:7e:62:ff:92:12:00:b4:c1:c3:0c:c8:70:92:1c:8f:91:
d0:c0:4c:26:81:59:5c:c4:d1:93:47:ea:66:f0:32:98:1a:c9:
5a:1f:64:91:1a:51:15:da:a8:c9:bc:b7:f7:1f:2e:4a:6b:b3:
94:d6:14:6e:b4:3e:4a:b4:10:6a:03:42:38:36:53:e5:2f:77:
e6:b9:f1:ec:5d:67:14:b1:6e:36:1a:d4:b6:f9:72:7f:9c:4c:
d0:5f:12:ef:38:63:b9:b4:e3:15:dd:21:97:5a:0f:25:67:ad:
8a:ac:3e:c5:b4:71:07:29:cc:63:7a:83:a4:e7:69:a6:d8:33:
fe:7c:c1:99:bc:e1:4d:aa:b1:2e:c0:e8:c1:cf:de:00:07:e0:
79:32:b5:02:5d:6d:b8:6f:15:d4:dc:13:0d:44:e7:78:a2:b6:
f6:d7:8b:eb:10:35:3d:87:3b:61:48:11:9f:73:91:75:1b:f3:
af:cd:23:b2:31:78:65:60:93:84:84:7d:1c:16:30:2a:66:99:
a4:19:b0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:07 2026 by rpki-client