Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143902.roa
File: AS143902.roa (raw, json)
Hash identifier: NKI8f6cciwZ0+xIHz4dzmitgu1gkf+j6Ay/IP/OP6Ao=
Subject key identifier: AD:D1:F6:FD:5A:7E:83:6A:81:C6:12:A7:DF:E9:C5:BE:C8:C7:05:E1
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2014850373CF8A97528A995C82D361FB923413A6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143902.roa
Signing time: Fri 22 May 2026 01:50:09 +0000
ROA not before: Fri 22 May 2026 01:45:09 +0000
ROA not after: Fri 21 May 2027 01:50:09 +0000
asID: 143902
IP address blocks: 240a:a4e4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:14:85:03:73:cf:8a:97:52:8a:99:5c:82:d3:61:fb:92:34:13:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:09 2026 GMT
Not After : May 21 01:50:09 2027 GMT
Subject: CN=ADD1F6FD5A7E836A81C612A7DFE9C5BEC8C705E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ea:c7:93:f1:b9:fa:b3:df:8e:fa:9b:df:1a:
9b:7e:3c:ab:2b:41:7e:4d:fa:7f:5e:18:03:a0:ce:
a6:1f:fc:50:e9:91:55:7d:09:f4:2f:19:13:8b:1c:
90:04:fe:8a:6d:73:a4:8d:5b:2e:62:36:fe:e3:60:
f9:17:4d:50:c8:87:d6:4a:de:59:8e:24:d8:9e:c5:
35:5e:ce:b8:bd:9e:4e:a4:db:cb:d6:61:d3:2d:2c:
cb:2c:59:14:52:ae:e4:52:b4:52:04:2c:44:3f:49:
2e:bf:71:35:6c:f7:7a:43:dc:53:99:85:4d:d5:b7:
30:f2:72:95:70:52:a5:b8:09:ec:89:c5:bf:56:9b:
c2:5e:c5:88:4b:65:92:1e:81:c7:1e:ed:4c:ea:ee:
74:c2:08:a5:84:2e:af:f4:a0:fc:2d:0b:2a:c0:7b:
dc:ea:dd:fc:d9:21:0a:3e:ac:5a:b9:5d:90:32:bf:
77:d1:86:d9:da:0b:2c:41:10:77:c1:5c:aa:80:fa:
74:63:fa:76:a1:1c:22:1a:d6:11:d3:f6:8f:b6:85:
05:8f:4a:08:d0:97:84:59:9b:66:19:c9:18:6f:e2:
42:38:cb:07:f2:a3:0f:43:4c:c4:63:a1:48:5c:ca:
df:79:20:1b:76:d6:20:47:fd:70:dd:5b:82:93:a1:
b9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D1:F6:FD:5A:7E:83:6A:81:C6:12:A7:DF:E9:C5:BE:C8:C7:05:E1
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143902.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a4e4::/32
Signature Algorithm: sha256WithRSAEncryption
63:3e:31:f7:ff:87:7d:17:bb:c6:2f:ae:9c:cc:a3:4a:27:ae:
ec:a1:08:ec:08:53:fe:85:f4:e3:46:dd:09:dc:5a:04:f2:5b:
53:d0:b9:75:3f:f2:d5:45:8b:fc:a5:37:f4:24:2b:0f:4f:96:
79:92:98:28:3c:ad:2d:9a:a9:b7:7b:43:ab:22:d4:83:90:be:
74:47:92:69:38:7e:9f:85:24:42:77:1c:03:b2:fc:7c:22:68:
d8:25:80:ae:e3:48:f2:6d:94:cd:62:c8:5c:84:e9:43:41:07:
6b:9d:5e:07:21:d5:d4:15:b9:59:51:25:be:c5:3c:46:d2:83:
c4:42:05:05:0f:02:f3:0b:6f:39:d8:8b:cc:5f:3d:c8:0b:43:
eb:f4:8e:35:d6:2f:ae:e4:7b:5b:34:d9:41:91:6c:ac:7b:c2:
41:f8:71:67:18:47:35:99:6f:61:0d:44:82:32:b8:57:e9:27:
cf:be:36:72:5d:25:1f:76:66:b8:1b:bd:55:62:48:90:bc:81:
18:f0:06:65:25:54:94:c3:76:42:72:ec:76:4b:d9:3a:c9:ac:
ca:c0:30:74:17:78:68:ce:f6:96:f0:38:84:c6:0d:73:72:2b:
a8:4c:e4:70:c2:28:3d:38:8f:07:d4:cb:0a:0b:3a:e8:88:23:
25:81:0b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:37 2026 by rpki-client