Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143898.roa
File: AS143898.roa (raw, json)
Hash identifier: d41c9084s/u57yK0oHqXWJu/N9XczckoFUgTmWzr0Ig=
Subject key identifier: 81:37:AE:D7:DC:D2:66:77:5F:87:27:0D:7A:79:14:28:96:9D:4B:2A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7C2A3FDD4A057615338E6D3A9B8BC65AC2D17975
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143898.roa
Signing time: Tue 26 May 2026 01:12:54 +0000
ROA not before: Tue 26 May 2026 01:07:54 +0000
ROA not after: Tue 25 May 2027 01:12:54 +0000
asID: 143898
IP address blocks: 240a:a4e0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:2a:3f:dd:4a:05:76:15:33:8e:6d:3a:9b:8b:c6:5a:c2:d1:79:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:07:54 2026 GMT
Not After : May 25 01:12:54 2027 GMT
Subject: CN=8137AED7DCD266775F87270D7A791428969D4B2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:45:cb:a6:e8:af:7b:9e:d5:bc:9e:7b:39:a3:
f0:e8:85:41:2b:64:d5:44:97:02:9c:8e:e3:8c:f2:
d2:00:6e:d2:e2:11:83:dd:fe:88:ab:36:91:5b:ad:
19:91:9b:11:73:8d:ef:e0:f9:01:d1:64:a3:6a:16:
a9:e4:1e:2e:49:62:3d:ca:9c:87:4a:07:f7:76:e2:
44:84:09:1d:78:f5:65:52:8f:3a:e4:ad:19:10:f5:
07:82:5b:51:4c:98:d4:86:92:ee:cb:cb:bf:be:e1:
1c:35:71:21:90:c4:e0:3f:86:63:a7:af:f6:1b:21:
7e:a8:cf:63:a7:43:cd:23:7f:21:02:1d:23:70:27:
4c:2b:be:f0:5b:f4:a0:b3:ee:fd:1c:1e:03:38:ac:
bc:78:1b:42:c2:38:6b:e5:c2:67:71:e6:9e:f5:25:
77:40:f4:5f:06:2b:3b:19:08:96:29:c7:ae:ec:b0:
3f:bc:8e:20:88:d2:3b:98:6c:cb:42:8e:be:2c:2d:
d4:1e:0a:82:17:5a:5e:4d:a2:ad:87:57:3d:79:d5:
4f:ad:92:96:0c:4a:47:ca:13:c0:45:ce:fc:4f:1f:
b7:68:be:32:32:da:23:ce:90:78:1c:be:03:cf:56:
76:b2:e4:d1:5b:64:3e:0b:06:ee:fe:5c:7e:27:ed:
6d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:37:AE:D7:DC:D2:66:77:5F:87:27:0D:7A:79:14:28:96:9D:4B:2A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143898.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a4e0::/32
Signature Algorithm: sha256WithRSAEncryption
13:86:ca:bd:b6:a1:3a:62:3f:c6:97:2a:cf:e6:b4:f1:bc:b7:
58:ad:1d:38:26:49:42:78:15:fc:4d:f2:7e:0a:68:4f:b2:64:
ef:a6:50:ac:9a:0d:8c:00:04:64:ec:0b:41:c2:0d:fe:64:d6:
c4:b2:a3:a1:5c:8d:58:c9:db:e2:41:ac:e4:c0:73:62:7d:16:
bf:4a:8b:f6:7a:5a:88:61:b7:76:56:64:ce:d9:aa:b0:3c:ff:
8f:b1:bc:64:3e:ba:4f:37:35:14:42:c1:54:a7:5d:f6:24:c2:
e2:e6:d5:d5:2e:af:2f:5d:61:04:3d:ab:e9:54:d8:dd:09:d9:
44:d3:6b:35:d0:8b:ba:42:3c:ea:60:6c:ed:cf:01:eb:46:1f:
8c:66:d4:bd:cd:13:27:a8:de:f7:af:59:a4:f2:28:86:9b:2d:
be:36:d4:bc:16:8f:d3:0d:d0:9d:3a:c6:56:02:5f:62:1c:6e:
88:3d:d0:33:83:41:56:59:26:43:88:de:a3:c9:72:a0:41:02:
33:36:e2:1d:20:90:4b:f8:dd:ce:3b:1a:9f:e6:0c:c7:ea:a7:
bf:d3:4d:16:93:55:85:26:23:8d:52:6f:8b:c4:89:97:38:68:
c7:ca:51:db:8e:fa:f3:c5:c9:85:28:a2:18:ba:60:fb:14:8d:
ac:70:f3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:04 2026 by rpki-client