Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143910.roa
File: AS143910.roa (raw, json)
Hash identifier: i7iusZq5IU66xvhTe070fLaataNoFiY+FLXVRxlpFhs=
Subject key identifier: BF:31:43:12:A9:07:33:63:BF:2E:75:9E:62:8C:DF:7F:87:46:0B:BA
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4B3E7F155D7ADABA227E73C1FE8ADFFCB56B3A90
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143910.roa
Signing time: Fri 22 May 2026 06:58:24 +0000
ROA not before: Fri 22 May 2026 06:53:24 +0000
ROA not after: Fri 21 May 2027 06:58:24 +0000
asID: 143910
IP address blocks: 240a:a4ec::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:3e:7f:15:5d:7a:da:ba:22:7e:73:c1:fe:8a:df:fc:b5:6b:3a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:24 2026 GMT
Not After : May 21 06:58:24 2027 GMT
Subject: CN=BF314312A9073363BF2E759E628CDF7F87460BBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:43:ba:13:cf:ea:c1:9e:86:cc:eb:74:8c:97:
a5:ec:43:f1:bf:c9:43:58:15:5d:cc:49:f7:a8:0a:
63:ab:7d:5b:5a:95:73:8b:fd:07:ec:50:b1:9a:b8:
77:48:15:83:85:a6:7d:04:22:3f:26:62:82:b6:91:
22:cd:a8:75:5f:c9:ee:27:3b:82:d6:f9:0c:f8:9f:
ea:4d:02:63:fa:45:a0:8e:13:4c:49:c7:ac:c5:e7:
7b:9b:e2:49:b6:cb:6d:ee:f0:b0:6b:3b:d2:45:63:
9d:39:67:ff:ad:78:c3:df:18:1a:c4:e7:60:af:6f:
6c:3c:63:b5:f4:00:dc:29:67:f6:68:89:e2:f5:df:
cb:90:2d:15:77:fb:1c:7e:d0:b5:35:46:7f:c1:ed:
1f:64:94:00:bd:fe:9b:4e:0a:78:d1:23:e1:36:54:
45:c1:f3:13:76:43:84:40:9f:b8:ea:ec:b7:68:58:
7f:15:a3:13:2c:58:c6:7b:d4:7b:3c:ad:14:2b:30:
67:cc:4a:7b:00:4d:30:43:e6:60:69:70:20:a4:e4:
ff:c8:c7:7f:47:c0:12:3a:d9:ba:dc:4a:5f:ac:bd:
36:f3:bb:e8:16:d8:e4:89:dd:34:6c:b8:f0:6f:71:
41:4c:63:70:87:e0:64:6e:7c:47:64:0e:a6:7c:a2:
b3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:31:43:12:A9:07:33:63:BF:2E:75:9E:62:8C:DF:7F:87:46:0B:BA
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143910.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a4ec::/32
Signature Algorithm: sha256WithRSAEncryption
b2:66:31:87:93:b4:cb:5e:ea:58:46:96:98:5b:0f:30:35:47:
28:92:70:65:e4:a4:96:91:f2:69:ba:bf:08:e9:16:70:1c:1f:
7e:95:3e:b9:c3:ab:84:06:9d:40:8f:51:16:37:e1:28:be:97:
b2:45:63:06:62:03:82:d1:7b:c4:62:b6:b2:5f:88:8d:2e:d1:
bc:cd:39:63:a3:e4:14:41:6d:8f:3a:9a:53:78:aa:20:62:7e:
38:a6:65:1e:0e:77:2a:16:b6:c4:58:ff:fd:ce:ab:1f:d4:b4:
de:68:39:a3:1b:3e:5b:29:51:93:4e:29:c9:33:0f:b8:97:62:
2c:0c:2f:96:fe:ab:cd:ba:70:6b:0b:74:74:3e:5c:76:04:00:
e4:67:81:ef:20:c0:4b:91:dd:0f:e2:4e:8c:57:9f:1e:8d:9d:
b4:d3:d1:04:4d:7f:51:18:4c:dc:63:db:fb:54:1b:64:5c:16:
a0:5f:15:6f:df:77:7b:86:ce:52:63:5c:66:cc:de:cf:6c:84:
03:2c:c6:9b:70:3f:7a:a5:29:8c:51:24:55:41:6a:09:df:68:
3b:b7:96:9b:1d:02:fa:a9:0d:4a:78:e1:67:c6:a5:6c:09:60:
7e:db:41:63:c9:dc:dc:08:d0:9d:33:d4:f1:ae:71:78:cd:86:
0c:9b:d5:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:56 2026 by rpki-client