Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143926.roa
File: AS143926.roa (raw, json)
Hash identifier: EYXZA4oj2+SirQ04oVggwr0oim/Ig3RdhVOK/CFt0Oc=
Subject key identifier: E7:F1:22:05:0D:C4:B8:C8:C9:EE:6A:96:F9:23:43:7D:FF:7B:F7:AC
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4283AE4D5B89CD0AFCF9224B5413DD71E38C9D07
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143926.roa
Signing time: Fri 22 May 2026 07:24:47 +0000
ROA not before: Fri 22 May 2026 07:19:47 +0000
ROA not after: Fri 21 May 2027 07:24:47 +0000
asID: 143926
IP address blocks: 240a:a4fc::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:83:ae:4d:5b:89:cd:0a:fc:f9:22:4b:54:13:dd:71:e3:8c:9d:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:47 2026 GMT
Not After : May 21 07:24:47 2027 GMT
Subject: CN=E7F122050DC4B8C8C9EE6A96F923437DFF7BF7AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3a:83:73:14:0f:b0:d1:17:01:e9:26:eb:66:
91:32:b5:98:65:44:08:03:98:56:3b:8f:aa:31:8d:
af:2c:a8:ab:7a:5d:d0:59:91:b5:bf:6e:41:c0:2c:
98:1c:07:21:fc:43:fd:fb:04:ad:27:16:b5:db:c2:
fd:dd:2b:47:53:6a:d9:8a:97:3f:9d:21:53:50:59:
fa:2f:39:1c:3a:aa:11:e2:07:16:8d:18:71:22:cb:
40:22:c4:1b:77:bb:f0:0f:65:dd:92:4e:d3:4b:57:
18:c8:4d:c7:36:f2:ff:59:e1:48:04:fb:60:1e:9b:
d6:0b:e3:68:8f:63:fd:de:c2:c6:5b:41:42:0e:6b:
50:54:81:44:72:7a:1f:47:a5:b0:a5:a2:f6:4a:c3:
e1:0c:a5:c1:7a:6c:de:23:95:96:b0:3a:d9:d6:5e:
d8:db:72:24:38:29:ad:0e:2d:6e:34:79:d1:3e:b5:
e6:2a:88:f2:61:fb:c5:27:3a:93:b1:85:90:24:bd:
aa:2c:70:d8:87:5f:15:ea:ed:5b:bf:77:6a:6b:32:
70:b3:16:75:ab:fb:d1:fc:91:47:ed:c3:92:65:6e:
03:ab:bf:03:81:ac:26:83:94:9d:3a:33:43:10:46:
77:76:8b:1c:94:79:03:8f:8d:09:23:96:ab:b0:82:
3e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F1:22:05:0D:C4:B8:C8:C9:EE:6A:96:F9:23:43:7D:FF:7B:F7:AC
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143926.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a4fc::/32
Signature Algorithm: sha256WithRSAEncryption
6d:fb:cc:8a:66:af:4e:bb:62:b7:18:83:29:f7:31:fe:90:e2:
08:f7:7b:42:65:cf:da:70:71:a1:a8:ce:6d:f3:9f:7d:b7:a0:
61:9d:45:66:14:5d:10:12:96:db:b3:08:94:13:e6:72:60:48:
c5:d1:a5:5e:51:10:b3:1e:ed:d7:49:77:9a:86:49:d0:ac:8b:
85:3a:02:cd:35:7c:c3:3f:36:41:38:13:f6:e6:e0:30:cf:39:
df:78:5c:81:ce:7c:cc:92:b2:bf:6d:8b:13:93:b3:4f:18:4f:
83:62:e4:ba:f6:58:b8:d8:f4:32:37:cf:4b:e1:0c:83:96:25:
08:79:c7:ac:a7:d5:aa:70:fb:f7:fb:7d:98:36:ac:38:f4:c7:
2b:87:8c:9a:16:9c:5f:85:4a:d4:eb:ac:57:64:19:6f:97:cf:
5f:d9:42:f3:ae:f9:fb:c8:15:e5:bf:6d:c7:0d:c8:89:c2:55:
a3:c6:f2:ea:06:3a:db:d9:00:09:4f:8c:5a:bb:c5:58:b2:d3:
c3:07:94:fd:b9:0e:3e:24:12:5b:67:d9:54:3b:28:ef:9f:c8:
11:a5:a2:18:51:3d:70:d9:bd:0b:4d:3c:81:31:27:cd:4d:6a:
5e:f0:f7:35:5c:25:8a:0b:62:40:1c:d2:da:68:4d:d3:0b:d9:
29:d0:58:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:05 2026 by rpki-client