Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143936.roa
File: AS143936.roa (raw, json)
Hash identifier: KDR9rVhvdPhkn4/FD4X/uLm4zGj/CScmndJB7K6sD24=
Subject key identifier: 51:0E:7F:E1:71:C6:A1:81:A4:1A:30:7C:70:12:55:6C:A1:D4:10:59
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 55AC11B4ABFA733BAA13009B631163CD98041C56
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143936.roa
Signing time: Fri 22 May 2026 06:28:00 +0000
ROA not before: Fri 22 May 2026 06:23:00 +0000
ROA not after: Fri 21 May 2027 06:28:00 +0000
asID: 143936
IP address blocks: 240a:a506::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:ac:11:b4:ab:fa:73:3b:aa:13:00:9b:63:11:63:cd:98:04:1c:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:23:00 2026 GMT
Not After : May 21 06:28:00 2027 GMT
Subject: CN=510E7FE171C6A181A41A307C7012556CA1D41059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:fc:1d:1a:85:22:64:aa:60:dc:e5:95:c5:3c:
65:05:8f:93:56:11:58:36:85:85:25:ce:b0:3a:f3:
d0:d7:e7:e6:a2:f8:7d:24:07:8b:01:40:48:96:7d:
f3:b8:7c:d0:60:52:5d:27:e9:04:af:b4:00:54:7a:
61:76:9a:b6:22:57:42:2e:4d:6c:32:d1:08:bf:3d:
90:bc:f5:a5:35:3b:80:61:bb:09:d8:2f:91:3d:6c:
e9:85:82:3b:31:40:65:4a:ed:b8:54:e3:25:bb:b8:
4e:3f:0b:af:80:91:b5:d3:21:e1:50:0f:38:79:ad:
e4:f4:0c:6b:93:d6:38:57:d8:81:88:57:67:56:ab:
2e:91:bf:2e:85:8c:04:73:1c:7c:ed:fc:3f:2a:1d:
1d:52:b4:39:85:29:b0:de:ac:b5:c6:df:b8:9a:7e:
32:56:ae:a4:6b:08:89:82:19:56:1f:b0:1e:73:bf:
f5:1f:ba:1e:9d:9e:79:30:ac:fa:36:fc:b2:8d:c8:
92:7d:ce:a9:3e:cc:fc:14:79:9c:9f:73:ce:d6:0b:
ec:45:1d:57:6c:10:6a:f2:5c:69:c8:c9:c0:39:57:
5f:7d:45:88:d9:ee:dd:30:89:e8:b1:bf:64:85:36:
11:88:ad:f4:aa:d4:8d:b4:be:d7:59:a4:79:ec:24:
e7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:0E:7F:E1:71:C6:A1:81:A4:1A:30:7C:70:12:55:6C:A1:D4:10:59
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a506::/32
Signature Algorithm: sha256WithRSAEncryption
3a:ad:5d:63:61:ff:e2:41:ab:41:f0:86:72:0f:f1:f8:42:6d:
9e:23:76:07:1c:f3:0c:c2:83:0c:28:b5:c8:3f:7c:cd:51:49:
63:da:3d:24:51:95:ee:1a:bf:35:61:03:86:fd:fc:19:f3:63:
4f:97:00:e6:0c:f0:55:2a:4b:59:14:63:fd:5c:bf:50:d3:ca:
6a:c1:84:84:e5:1d:ba:a2:81:17:9c:e2:16:35:c1:de:04:95:
4e:29:58:70:95:3b:69:e7:d5:68:a4:e9:7e:ac:91:be:f7:14:
5c:1f:b0:89:73:7d:14:1d:55:12:72:27:c3:9d:0f:20:73:7a:
92:28:b0:ce:51:f0:ce:4f:72:ca:8b:b8:1a:11:3f:4f:3e:91:
27:a7:66:95:2f:18:71:cf:de:1e:95:39:bf:c9:51:1a:77:51:
66:45:9a:ca:6c:dc:b3:35:c0:05:50:e5:0e:9b:81:d7:5e:8f:
15:5e:91:e7:e8:bf:7d:fc:aa:2e:5f:0a:25:d4:79:97:e7:93:
31:34:d8:d2:fe:c7:fd:b6:18:49:14:0e:4b:1a:11:45:b3:5d:
3e:7f:92:83:4f:8b:53:db:68:3e:37:6d:54:8a:0b:67:97:7c:
5f:ed:2c:da:bb:0b:26:5b:97:fa:97:b9:06:a8:86:12:a0:8b:
1d:75:3f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:09 2026 by rpki-client