Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143893.roa
File: AS143893.roa (raw, json)
Hash identifier: ANmomQ1eKdtiuWfFEHtHibELV4ru85EMPF1KMpNO8gw=
Subject key identifier: 86:76:6D:92:C9:94:DA:A3:29:57:9B:4F:5B:5F:52:5B:07:E3:7B:41
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 566D73275090E397922472EF1C71DC6C744570F5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143893.roa
Signing time: Fri 22 May 2026 04:26:53 +0000
ROA not before: Fri 22 May 2026 04:21:53 +0000
ROA not after: Fri 21 May 2027 04:26:53 +0000
asID: 143893
IP address blocks: 240a:a4db::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:6d:73:27:50:90:e3:97:92:24:72:ef:1c:71:dc:6c:74:45:70:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:21:53 2026 GMT
Not After : May 21 04:26:53 2027 GMT
Subject: CN=86766D92C994DAA329579B4F5B5F525B07E37B41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:fc:58:c8:19:fb:66:9f:9f:96:45:6e:2f:97:
a0:95:bb:6b:9d:1a:70:ad:76:9a:d4:03:a4:2d:17:
b6:bd:f5:78:64:eb:5c:d5:26:25:f3:95:08:1a:15:
23:42:1f:d7:c4:28:29:ca:c0:cb:49:5d:74:d7:76:
02:c6:94:be:fd:54:e5:29:fd:d2:84:ca:89:be:e7:
d8:c3:22:eb:e8:47:04:38:32:66:44:a4:7f:d1:90:
df:d7:5d:ce:a4:46:2b:ba:23:aa:40:60:6d:3b:55:
af:c5:78:93:73:74:2b:8e:d3:6c:aa:55:9b:15:38:
d4:ff:fa:3f:88:ff:2a:72:0a:50:ca:d8:a7:5d:70:
7e:de:e7:5d:da:09:65:1d:8b:80:45:c5:ec:61:eb:
5e:1e:8d:b2:ef:db:c9:ea:57:dd:6f:43:42:64:a9:
3a:47:d2:77:ac:5b:36:a2:f2:79:13:14:ab:4e:af:
67:81:6f:cc:37:7e:78:9b:17:56:3f:83:2f:06:15:
ea:bd:c8:3f:ee:26:82:a0:d8:19:4c:9f:a6:c8:c8:
de:01:89:b3:c2:e3:3a:f3:4f:e9:23:ee:57:e3:27:
5b:ff:ca:cb:f0:c3:b4:8b:1e:eb:cb:5b:cc:5a:94:
aa:f5:c4:1c:d6:17:67:d1:fb:1a:c6:dc:89:79:88:
35:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:76:6D:92:C9:94:DA:A3:29:57:9B:4F:5B:5F:52:5B:07:E3:7B:41
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143893.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a4db::/32
Signature Algorithm: sha256WithRSAEncryption
52:9e:0c:5d:78:3a:f5:14:51:b2:fa:ee:48:12:2f:47:55:09:
b4:28:fb:0b:2c:ee:9f:08:fc:02:2c:74:9f:3f:bb:d7:47:4c:
39:7d:a6:30:b6:1b:42:ad:ca:62:dd:d7:18:05:4c:0b:4f:2c:
39:53:da:e1:1c:5d:a6:21:a8:b0:27:f1:b0:29:0f:ab:a0:b4:
af:30:f5:da:40:b9:8b:b0:77:27:74:6a:f9:be:82:25:48:dd:
79:e2:b3:27:b4:d0:28:b5:5c:37:30:99:78:1c:be:d6:9a:cf:
09:b8:75:86:18:fb:36:00:bf:b8:fd:75:ba:4d:4d:9c:7c:dc:
34:57:1e:f9:17:6e:3c:8f:52:35:f1:ef:f2:df:7a:a6:fd:0b:
4d:de:34:12:5a:08:4b:f6:9f:ca:98:5e:67:f3:50:cd:e9:dd:
21:0f:b7:b8:0b:91:67:08:16:9a:44:96:05:49:10:ea:0b:cb:
8b:b3:d6:07:e5:f7:69:e0:2e:cb:c3:5d:c5:1e:8b:73:1d:bf:
6d:81:be:03:3f:37:c0:de:03:05:7f:32:80:11:2d:ce:25:dd:
b3:c4:e8:b7:b5:f1:95:51:ec:6e:e4:6f:8f:99:c1:e8:67:7b:
56:6b:8e:f4:a0:48:2b:40:31:a6:6b:29:96:95:40:66:33:ea:
1f:a6:10:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:33 2026 by rpki-client