Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143912.roa
File: AS143912.roa (raw, json)
Hash identifier: SGEKPciJd0+od9ukrGUpjzwCOUZNaYM6s++IfSsmBmM=
Subject key identifier: 3F:DE:3A:01:1D:03:19:E4:54:6D:A8:64:84:61:A6:89:E8:DB:86:66
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 41BE8B89367A84D3D7629B8A03797A86A96FF6D7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143912.roa
Signing time: Fri 22 May 2026 06:58:50 +0000
ROA not before: Fri 22 May 2026 06:53:50 +0000
ROA not after: Fri 21 May 2027 06:58:50 +0000
asID: 143912
IP address blocks: 240a:a4ee::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:be:8b:89:36:7a:84:d3:d7:62:9b:8a:03:79:7a:86:a9:6f:f6:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:50 2026 GMT
Not After : May 21 06:58:50 2027 GMT
Subject: CN=3FDE3A011D0319E4546DA8648461A689E8DB8666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8f:40:2f:11:67:56:6d:7a:aa:49:84:15:6b:
75:83:b7:76:b1:15:a6:8d:44:4e:1e:3b:a6:44:eb:
2d:d2:77:fc:c3:b5:c9:89:50:b6:4a:df:88:45:aa:
f8:2f:0c:5b:ad:3c:47:9e:c6:b5:c0:59:d7:43:31:
38:13:7b:11:0b:e2:cc:ef:9f:d1:6b:5b:11:5d:e6:
8a:cc:b3:a4:74:71:44:ed:14:cf:3e:17:81:0a:e7:
01:d2:1d:1b:47:c5:d5:67:0d:27:6e:3d:f9:b7:62:
28:7e:95:3d:3e:6a:01:8d:76:a3:36:c9:85:d0:73:
a1:73:50:55:34:a9:a3:34:ca:d1:4a:e9:ab:3d:b9:
5a:75:ba:d9:cf:ec:70:ac:3e:1a:46:98:fd:21:5b:
91:7b:ca:5b:bd:cb:80:da:e4:bf:cf:05:94:25:50:
c4:c3:2b:9a:e8:d5:e1:35:b9:ad:9c:5f:82:cc:34:
2c:01:34:c6:28:83:32:56:54:ba:45:97:ac:f8:b8:
6c:50:c1:e2:23:d0:71:9f:0a:3e:b7:bd:cc:6d:a0:
56:76:9c:8d:a5:b3:f3:cf:b3:b4:5f:17:8e:f1:1f:
ae:db:78:c3:3f:e6:c0:3e:48:a8:d4:03:ce:3e:8b:
ca:f6:b0:db:99:42:c2:92:75:4f:46:d1:3a:b0:e9:
b9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:DE:3A:01:1D:03:19:E4:54:6D:A8:64:84:61:A6:89:E8:DB:86:66
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143912.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a4ee::/32
Signature Algorithm: sha256WithRSAEncryption
50:d1:16:6a:7b:03:2e:5d:91:9b:65:7c:44:5b:88:3c:c4:47:
cf:ab:23:a9:df:af:2b:63:8e:83:b8:ff:b8:59:55:d4:b4:d2:
ac:d0:ea:15:72:7d:3f:fc:ec:77:bd:c9:ac:cb:06:26:54:79:
10:77:1a:24:01:d9:2e:9d:cb:53:60:5d:e7:5c:4f:5e:a6:3f:
77:5d:25:3d:21:32:b8:87:b7:73:82:ac:b7:5e:f5:80:b5:8a:
fb:93:77:ca:b3:98:5f:89:dc:24:a3:94:0b:3f:99:50:91:e1:
9d:af:60:d4:c8:ee:d4:7e:07:b1:4e:30:52:55:cb:ce:f0:c2:
d2:15:08:1d:59:f3:d6:f0:8a:1a:c6:05:8f:b1:47:57:d8:1b:
b5:95:a7:f4:b6:29:6f:4b:c7:83:a7:ac:a4:16:aa:ed:9e:42:
11:ac:36:1c:93:ea:95:15:69:05:2a:93:de:be:4d:0f:c1:26:
73:2e:e7:86:dd:07:f8:ce:db:8f:4a:5f:36:6d:70:a5:cc:8f:
50:fe:c1:15:a8:ea:01:23:c8:c0:15:61:5e:75:01:be:b9:9e:
85:78:aa:56:f2:86:9f:cb:08:1f:03:2d:d4:75:ee:d2:40:c0:
0a:b2:13:89:2b:45:4b:a2:79:b9:84:90:c4:c4:4e:70:c0:bb:
d7:6a:90:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:57 2026 by rpki-client