Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143922.roa
File: AS143922.roa (raw, json)
Hash identifier: 3TgQqq+3YgZKa1JZXai9O02surF83HWRVaeYi60Anjo=
Subject key identifier: 33:9E:3F:72:95:2B:CF:E8:D7:E3:CE:AD:22:8A:7D:89:81:9D:EB:78
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 388B90ACA6DDE06E394AED0A1DB61F423223466F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143922.roa
Signing time: Fri 22 May 2026 04:08:22 +0000
ROA not before: Fri 22 May 2026 04:03:22 +0000
ROA not after: Fri 21 May 2027 04:08:22 +0000
asID: 143922
IP address blocks: 240a:a4f8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:8b:90:ac:a6:dd:e0:6e:39:4a:ed:0a:1d:b6:1f:42:32:23:46:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:22 2026 GMT
Not After : May 21 04:08:22 2027 GMT
Subject: CN=339E3F72952BCFE8D7E3CEAD228A7D89819DEB78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bd:ce:35:f3:bf:33:70:84:03:be:61:34:ad:
06:77:e5:5f:12:09:9a:b7:fe:7d:12:44:30:da:99:
30:ee:5b:51:7d:9e:58:71:c8:71:85:0c:e8:4a:fa:
60:72:cf:05:42:dd:3b:b6:8b:8b:34:f3:c6:d1:89:
d9:06:4f:ed:d8:ce:b6:a2:f0:b5:7e:28:69:96:84:
85:c9:75:9e:39:47:18:6d:75:0c:70:aa:1e:89:79:
32:2b:da:fa:83:e6:a5:9e:f5:da:ee:3f:73:59:88:
bd:b4:89:2b:59:76:a9:f0:29:04:50:3c:5c:66:c6:
a6:b0:3c:4a:59:62:f3:23:05:30:41:81:63:df:8c:
19:cc:9f:14:ba:03:11:c4:23:59:23:7a:e8:de:2b:
7d:36:69:89:3f:f0:c6:af:c9:5a:a5:f3:62:a1:76:
33:64:e5:d4:36:39:5a:1d:0e:9a:be:76:38:54:3b:
81:5c:13:0a:ec:ec:eb:98:db:ff:82:47:16:4f:a9:
fe:c8:66:ba:d0:18:81:27:6d:4a:51:9a:43:0f:67:
f3:a4:63:3d:03:4d:85:a4:11:fb:c4:cc:45:8f:fb:
4d:8e:22:e3:20:a7:89:6b:4b:29:a1:aa:09:21:7e:
cf:21:5a:15:d6:63:7d:5a:a0:4e:37:d5:95:35:c8:
e3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:9E:3F:72:95:2B:CF:E8:D7:E3:CE:AD:22:8A:7D:89:81:9D:EB:78
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143922.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a4f8::/32
Signature Algorithm: sha256WithRSAEncryption
32:b6:9e:30:46:2d:2a:8d:f3:51:82:23:f5:88:a4:75:34:d0:
4f:5f:52:8b:ce:15:98:3f:ed:26:b9:65:93:4c:bf:f4:30:a6:
3a:ee:cb:bf:39:15:09:3a:1b:e7:ad:f3:12:8d:6c:d9:79:f0:
1e:a5:92:6b:62:7b:ab:38:a6:bc:27:9c:31:58:b8:60:2c:bc:
b8:f4:d5:38:09:58:14:6a:c7:82:c0:95:a3:94:da:f9:31:08:
37:91:2f:71:3b:98:5b:62:b9:75:74:51:a6:66:83:a5:e4:56:
cb:1a:ab:b9:3c:3a:b1:22:a9:9d:90:34:b5:53:7f:f8:6a:26:
6d:b9:bb:fe:51:7c:52:dd:11:21:64:01:70:76:d8:4c:f5:07:
da:3e:ae:4f:50:89:40:c4:7e:33:02:30:64:d6:a8:66:84:57:
a5:c5:78:be:37:dd:58:50:9c:11:3e:e2:77:4b:d5:48:bd:05:
48:bf:d5:8f:15:8f:35:b8:72:f3:8d:a3:f7:a9:48:9a:55:3a:
3a:f9:8d:29:d4:5e:5e:df:e1:e1:dc:1a:59:e7:0c:74:76:59:
ef:74:1e:f9:cd:59:6a:e8:53:98:70:28:da:f2:d5:7d:7b:c5:
94:d0:fc:c8:ef:2e:53:96:58:b4:8d:f0:49:fe:37:be:21:30:
e2:00:50:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:42 2026 by rpki-client