Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143877.roa
File: AS143877.roa (raw, json)
Hash identifier: KekFATENpZd2IxjTDqd81M436Vhd4+Oz+j7MTmxXWuI=
Subject key identifier: 90:98:BD:ED:B5:AD:B6:34:E3:3B:F2:BE:A7:69:4B:BF:FF:98:1B:CA
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6C9E5C1DFDAB98D48CA403DEC1012A110689E019
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143877.roa
Signing time: Mon 25 May 2026 03:19:33 +0000
ROA not before: Mon 25 May 2026 03:14:33 +0000
ROA not after: Mon 24 May 2027 03:19:33 +0000
asID: 143877
IP address blocks: 240a:a4cb::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:9e:5c:1d:fd:ab:98:d4:8c:a4:03:de:c1:01:2a:11:06:89:e0:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:33 2026 GMT
Not After : May 24 03:19:33 2027 GMT
Subject: CN=9098BDEDB5ADB634E33BF2BEA7694BBFFF981BCA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9c:b0:ff:cc:02:d6:d2:2f:db:99:47:9b:ff:
f1:a3:c1:f8:40:dc:ae:7f:74:91:04:b8:72:e5:3c:
48:a9:ae:ab:c9:f6:d3:41:72:d6:81:1f:0f:fa:0f:
27:d8:2a:10:be:cf:54:b9:2e:19:74:00:4b:1b:2a:
72:df:45:c6:9d:e1:0b:a5:61:14:c0:74:94:0e:32:
32:ef:86:c1:3d:b7:f0:d5:bd:4f:41:a1:65:40:53:
3d:bb:97:c1:77:69:a6:5b:fa:80:ef:3b:1f:b3:a2:
aa:07:06:0d:22:83:00:15:c6:12:ef:be:30:37:2d:
67:30:78:e2:20:4e:dd:21:ea:02:f3:54:9b:3d:19:
2d:61:e1:6a:64:2f:00:9d:c4:88:4d:68:c7:1f:41:
0e:76:ee:16:fa:e2:03:fe:2d:74:0a:95:fc:de:2b:
b3:94:56:e7:51:aa:19:4e:6d:3f:fe:a6:54:ca:a8:
4e:bd:0b:b9:40:54:57:c0:a1:4e:08:67:31:36:1a:
a9:5c:db:02:f0:df:46:87:44:84:a2:05:04:d7:bd:
90:ac:b3:fa:f4:f0:23:1f:2b:08:ac:83:55:da:75:
ef:35:be:4e:b7:a3:d3:b1:6d:3f:9c:8b:d5:79:43:
98:9d:e7:48:6c:eb:9a:1a:68:13:e0:2b:55:cf:16:
3b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:98:BD:ED:B5:AD:B6:34:E3:3B:F2:BE:A7:69:4B:BF:FF:98:1B:CA
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143877.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a4cb::/32
Signature Algorithm: sha256WithRSAEncryption
47:c8:e3:45:84:16:61:58:d7:07:03:ea:ad:25:20:f0:8e:09:
d9:4a:76:b9:c2:7f:2b:60:24:22:a4:c5:26:ef:7f:c3:32:76:
b7:37:62:db:7a:da:11:49:3e:00:9a:9d:72:18:4b:9e:8b:0a:
ca:b0:70:0a:e6:b4:bc:7b:e2:c5:ea:0f:71:fb:ce:88:f0:8a:
46:f6:b2:01:40:d2:2d:4b:da:78:00:c0:ad:0c:30:ab:3f:5c:
7d:bc:8d:57:72:c3:a1:38:b0:be:10:22:c9:2e:04:4c:3e:a2:
61:63:42:73:41:28:c3:b3:b9:d8:31:f5:fe:36:aa:aa:c0:a7:
83:a5:6d:50:f1:d9:ca:a8:67:c5:79:8f:70:0f:f0:25:08:25:
43:d0:46:c4:1b:f7:91:ce:3f:a1:2c:d0:6c:c5:38:80:fe:be:
2d:62:ab:34:b8:55:9d:47:ac:16:e7:ea:2c:41:19:98:cd:9d:
03:93:39:e1:3c:fe:40:5d:8d:0c:c2:e0:8b:18:2c:ab:0e:a8:
d4:39:7e:e6:fd:28:59:eb:49:f9:95:65:4b:02:c1:e5:9a:09:
9e:d3:b5:c1:5d:1f:4d:ac:59:06:22:ad:b9:fc:fd:25:5e:83:
4f:a9:14:a6:b5:f9:c4:7d:f3:74:c2:32:e5:e0:fe:cb:87:52:
ac:f9:db:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:37 2026 by rpki-client