Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143888.roa
File: AS143888.roa (raw, json)
Hash identifier: Jbxqiad2jLgyEfsNqrAmH1u4rIYHIqNIYdf0WOim1Gg=
Subject key identifier: CE:B8:73:61:7F:B6:49:CD:27:35:C9:F2:EE:BA:8F:5F:33:6E:FF:95
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 29839AF1265EAD62DE1D54790DDF5D0543E9B62F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143888.roa
Signing time: Fri 22 May 2026 07:41:20 +0000
ROA not before: Fri 22 May 2026 07:36:20 +0000
ROA not after: Fri 21 May 2027 07:41:20 +0000
asID: 143888
IP address blocks: 240a:a4d6::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:83:9a:f1:26:5e:ad:62:de:1d:54:79:0d:df:5d:05:43:e9:b6:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:36:20 2026 GMT
Not After : May 21 07:41:20 2027 GMT
Subject: CN=CEB873617FB649CD2735C9F2EEBA8F5F336EFF95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:0a:74:de:5a:73:d9:9c:dd:51:55:0d:c6:f0:
81:fe:37:a4:44:ff:13:f4:73:3d:58:82:2a:a1:b3:
c9:b3:9e:cb:61:dd:cb:6d:49:76:0e:aa:3c:f5:4e:
87:20:d3:04:c2:bb:3f:69:39:07:ae:76:b3:49:5f:
36:14:5c:24:1e:22:5a:8f:86:f3:ed:52:1c:1f:66:
8d:6b:db:50:26:b8:29:16:0a:9a:fa:94:2e:5c:35:
ec:48:88:88:ac:46:1d:6a:38:56:89:c8:92:27:97:
19:d3:40:93:f3:d3:de:d8:af:76:0f:4c:f2:b0:ac:
3f:2d:07:83:49:08:5c:39:73:e7:23:0f:03:8f:e8:
77:d1:05:f5:08:e7:62:c3:50:2d:69:e8:a3:58:d1:
5a:9e:7c:f9:0a:54:b6:9c:77:ea:0e:d3:76:80:e3:
f7:fe:27:8b:7e:16:03:bd:28:9a:ed:c5:5a:57:5d:
54:33:76:8a:7e:ef:a8:8a:23:30:2e:6f:07:7f:4c:
a4:d9:7a:9c:d5:55:aa:f3:5e:87:af:98:86:1d:49:
7b:27:3e:df:09:1b:10:23:29:b5:13:f6:b9:51:04:
fa:ed:a6:2f:5e:5c:7f:79:df:10:2c:9a:d5:8d:02:
9c:25:d2:c4:3a:ed:05:a9:da:38:6f:03:8a:48:89:
ce:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B8:73:61:7F:B6:49:CD:27:35:C9:F2:EE:BA:8F:5F:33:6E:FF:95
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143888.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a4d6::/32
Signature Algorithm: sha256WithRSAEncryption
33:6e:cd:a0:8c:13:2b:55:94:c9:e4:e0:45:fb:dd:61:93:20:
d1:5d:11:8c:1a:16:f1:1b:40:3f:7b:7a:a7:5e:d5:df:20:38:
b9:c4:48:4f:ec:4f:6e:af:de:d8:28:aa:5b:f7:95:e4:20:75:
ea:39:d4:f1:19:8a:a0:60:c3:dd:0a:98:c3:94:58:03:cc:e8:
1d:89:dc:13:fb:91:7c:0d:d6:45:35:a3:09:6e:dd:7d:39:9e:
a3:0d:35:05:3b:02:15:48:79:ed:e2:b4:82:37:94:9a:70:1f:
29:1f:fe:db:08:43:56:8c:fb:cd:dc:19:53:86:8b:29:79:ed:
df:ac:32:76:8b:8e:6a:65:50:26:08:0b:84:45:19:e4:44:40:
18:d7:33:d0:dd:33:c7:0a:a6:28:b7:e9:55:f5:d1:bd:3c:90:
f4:7f:b6:53:6e:d1:4d:95:48:65:9f:99:ba:15:71:c5:81:29:
c1:6f:97:7b:6a:13:db:77:e5:6f:22:b9:82:38:f2:b4:97:90:
45:62:56:fe:12:68:20:34:87:63:0c:be:3a:0c:75:73:77:a7:
76:e6:5f:85:36:34:72:b0:db:af:1d:08:b9:c4:b6:a4:7e:af:
6b:ee:21:7c:26:dd:bc:b9:3c:f6:5a:44:2b:dd:fa:b3:3a:eb:
a9:fd:36:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:55 2026 by rpki-client