Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143900.roa
File: AS143900.roa (raw, json)
Hash identifier: 01QImRBTcQ5hFfnPfUkM80RgxF/d9G/z4JrEWF52mKE=
Subject key identifier: C1:08:5B:91:91:6B:EF:65:AA:7C:77:B7:BC:EB:19:FF:D7:10:C5:D9
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7BAB58F893C38ADE8823AB4575402ECC9D03C417
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143900.roa
Signing time: Fri 22 May 2026 07:25:01 +0000
ROA not before: Fri 22 May 2026 07:20:01 +0000
ROA not after: Fri 21 May 2027 07:25:01 +0000
asID: 143900
IP address blocks: 240a:a4e2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:ab:58:f8:93:c3:8a:de:88:23:ab:45:75:40:2e:cc:9d:03:c4:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:20:01 2026 GMT
Not After : May 21 07:25:01 2027 GMT
Subject: CN=C1085B91916BEF65AA7C77B7BCEB19FFD710C5D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e7:34:0b:06:4a:07:d0:e6:c1:7c:bf:21:ed:
1b:bb:11:e4:5f:c0:dd:9d:0d:18:46:66:71:64:f6:
46:2f:05:8c:d3:af:2b:b8:0f:a8:24:33:9e:33:dc:
87:cf:49:d9:19:45:51:e2:3e:01:1a:ac:ca:33:38:
0a:66:19:a0:87:f9:b2:ef:b1:15:64:16:b9:a5:77:
51:39:ff:3c:c1:48:67:25:96:b0:92:f4:dc:5b:70:
3d:f0:41:98:8d:34:08:18:1e:1e:18:f5:ea:17:c5:
08:93:f9:fd:a1:13:30:02:50:aa:60:6b:92:41:d9:
f1:2e:f2:88:60:1c:a7:0a:a9:f8:54:43:90:88:fc:
ef:8d:0c:02:2a:4b:6e:e7:9b:c4:97:33:c0:bd:80:
43:be:ea:ff:0e:ba:2d:9a:f3:75:4d:f3:aa:6d:60:
a4:e2:1f:6b:a9:41:7a:1c:4c:00:7c:4a:84:17:07:
72:e6:eb:8c:2e:07:77:29:dc:29:aa:04:df:87:2c:
67:c4:f7:02:cb:6b:c5:a2:bd:e1:67:9a:d7:9e:49:
01:2e:05:66:77:1f:58:90:ba:fc:be:30:a9:b3:c9:
f6:18:c8:cb:04:2c:63:b8:71:b7:3a:6b:a2:d8:b9:
be:75:7c:88:56:07:1f:f8:57:f5:a4:12:a9:c2:ad:
97:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:08:5B:91:91:6B:EF:65:AA:7C:77:B7:BC:EB:19:FF:D7:10:C5:D9
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143900.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a4e2::/32
Signature Algorithm: sha256WithRSAEncryption
47:26:f4:c9:8a:51:c3:41:aa:51:4a:23:2e:75:7b:fa:bd:df:
a6:e8:62:f4:b3:88:43:b5:4c:63:07:51:be:59:5d:07:79:ef:
2f:8c:bf:32:f4:3a:fd:6f:b6:a7:ad:09:18:f4:4b:a9:65:b7:
04:0f:5a:5e:da:23:42:f7:f9:dd:44:ab:7e:83:7f:2a:a2:82:
34:c4:75:03:b0:b3:ff:e2:d5:d7:1d:52:25:93:52:73:b0:e2:
69:2a:02:19:1a:4c:51:14:9a:f3:83:17:d9:bc:14:80:a8:45:
6f:33:a7:40:38:25:3a:53:39:4d:17:f1:c7:76:bd:53:68:50:
c2:bc:cb:56:57:ac:c3:aa:de:e4:d1:25:41:c4:af:38:45:3c:
80:77:6a:31:1f:83:c1:1f:0f:fe:52:94:88:fc:9e:f3:23:54:
71:07:1f:c4:72:14:7f:7b:99:99:45:c7:30:fe:e2:66:ae:69:
c7:49:ed:04:13:e0:bd:77:a2:67:49:03:58:94:42:db:65:ee:
69:a5:0b:96:4b:fb:d4:71:cf:c6:fb:c3:a9:03:8e:72:8d:22:
c6:52:9c:54:a0:5f:a3:10:08:9a:fa:2e:ad:ad:4c:88:b0:9c:
b2:78:6b:85:92:8e:95:63:93:62:fb:05:ff:b2:a6:60:47:f1:
46:57:3f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:48 2026 by rpki-client