Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143890.roa
File: AS143890.roa (raw, json)
Hash identifier: E3d67VguslVFqsZHmH/ZPzYZ/TbT0VZAXIz3SF79FLc=
Subject key identifier: D0:BC:29:97:DE:B7:54:30:42:00:6C:A5:F7:57:A3:71:7B:17:0B:14
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 416A6D33711A843643F974A58018960B33A1D0D6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143890.roa
Signing time: Fri 22 May 2026 07:24:52 +0000
ROA not before: Fri 22 May 2026 07:19:52 +0000
ROA not after: Fri 21 May 2027 07:24:52 +0000
asID: 143890
IP address blocks: 240a:a4d8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:6a:6d:33:71:1a:84:36:43:f9:74:a5:80:18:96:0b:33:a1:d0:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:52 2026 GMT
Not After : May 21 07:24:52 2027 GMT
Subject: CN=D0BC2997DEB7543042006CA5F757A3717B170B14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:99:78:d5:e3:e4:81:ef:9f:67:3d:fc:63:ba:
0d:c6:de:6c:52:01:c2:30:ea:f6:b0:4a:94:17:d9:
f2:19:3f:1a:c3:cb:c3:9a:c6:2d:2a:6e:65:01:32:
ac:1e:2b:f9:c2:b2:bd:3a:62:b6:f1:36:c0:65:b8:
6f:51:14:86:d9:b8:92:7e:91:cf:cf:3e:c3:37:71:
ab:c5:a5:5b:58:d7:4d:fd:0e:d4:e5:20:83:40:54:
aa:84:c5:a5:1f:21:b2:2f:1f:6e:df:69:ce:d4:6e:
c4:2f:da:30:28:8b:30:d0:9c:4b:96:7c:3e:1b:15:
ee:b6:48:4e:9c:d6:ea:68:8a:a9:eb:6f:90:64:01:
f8:0b:ac:18:e4:df:d7:34:93:73:16:91:42:49:be:
c8:63:8d:99:d7:26:04:bd:59:f4:60:25:f9:7a:fd:
e5:c4:87:8c:09:1d:e9:d2:66:e8:e8:6f:32:d9:10:
3f:e9:a0:28:22:20:57:2e:20:48:09:d7:8b:df:3c:
df:3b:66:1b:09:e9:0a:c8:92:e7:bc:be:a1:be:a9:
70:06:33:96:1c:1b:5a:66:f0:5e:d9:5e:76:6b:87:
8f:75:13:6d:8a:11:b5:37:f5:25:89:3e:0a:80:47:
e3:df:48:f7:f7:ad:d3:b5:a7:26:62:fc:eb:56:62:
12:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:BC:29:97:DE:B7:54:30:42:00:6C:A5:F7:57:A3:71:7B:17:0B:14
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143890.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a4d8::/32
Signature Algorithm: sha256WithRSAEncryption
b2:4a:b7:c0:b6:1b:e0:05:4d:a0:dc:ae:4a:76:9c:91:de:91:
fd:80:f1:2c:48:6a:28:1f:b2:4d:4a:80:3f:e7:02:6d:53:4b:
9a:7d:e4:95:a2:27:09:55:c9:ab:65:38:13:f9:19:16:02:4b:
0b:68:0e:19:8e:56:f0:c1:e2:98:fb:01:8c:c4:f4:ed:a3:a5:
de:82:2c:cb:7a:2e:76:f4:f2:d5:81:71:74:ab:a9:cb:8b:6e:
4a:84:dd:21:82:4f:43:0a:95:4a:5e:66:ee:b8:e6:d8:7b:c8:
a5:2a:c0:3a:01:7e:cd:6b:5e:5c:b0:d8:15:30:96:8f:95:63:
54:ba:f7:05:fb:58:35:88:5d:c2:7c:e4:10:76:84:b3:03:f2:
9a:ac:23:53:aa:63:f1:bd:d2:26:53:d0:a3:01:a7:83:3f:21:
7d:7c:b7:43:a5:58:53:3c:c7:01:be:da:96:7a:b6:6f:30:64:
b5:31:a2:e3:42:42:ca:86:94:e8:ec:2a:3c:70:e6:33:ed:bb:
42:02:84:95:37:ac:11:85:c8:3d:e4:57:c0:fb:36:6e:02:00:
bc:59:33:57:d6:6c:a3:1a:e8:41:29:1b:f9:70:44:0c:1e:3d:
71:48:41:f2:fe:0d:a5:8e:1b:84:1d:39:ef:e3:7a:6b:dd:c1:
a9:be:59:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:15 2026 by rpki-client