Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143944.roa
File: AS143944.roa (raw, json)
Hash identifier: npEYmAflTBGg8sZ+PefrqvoUITUtUOmw5ngCOR967r8=
Subject key identifier: 20:5B:86:40:C6:F0:F8:D0:EA:D8:41:70:FA:52:22:F7:8E:03:71:1A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 395B5461AA0A200E4EF2CE446F3FB4123B8DF4D6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143944.roa
Signing time: Fri 22 May 2026 04:26:53 +0000
ROA not before: Fri 22 May 2026 04:21:53 +0000
ROA not after: Fri 21 May 2027 04:26:53 +0000
asID: 143944
IP address blocks: 240a:a50e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:5b:54:61:aa:0a:20:0e:4e:f2:ce:44:6f:3f:b4:12:3b:8d:f4:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:21:53 2026 GMT
Not After : May 21 04:26:53 2027 GMT
Subject: CN=205B8640C6F0F8D0EAD84170FA5222F78E03711A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e2:00:f0:f4:72:d2:9a:37:7d:ca:ba:27:0c:
84:19:97:c5:c9:d6:75:ab:13:4f:46:39:9f:d6:48:
53:11:b7:48:cc:9b:ef:c4:69:83:73:7f:8b:22:97:
03:bd:e1:50:9b:e3:81:5d:0f:05:df:9d:b9:de:35:
e4:c1:5a:99:eb:7b:dd:c8:2a:33:12:87:99:77:42:
4d:10:82:2d:42:e3:3a:33:1d:8d:25:36:44:3e:43:
10:c7:f7:6f:b2:a1:93:70:8b:81:76:65:b2:52:34:
73:74:2b:00:b7:c7:91:da:7f:76:3f:b2:92:d9:61:
3f:6d:c7:7c:08:db:8c:44:6f:28:94:b3:69:9f:4f:
ed:4e:ba:e0:53:e7:f1:a2:49:a9:38:e6:ec:79:0d:
0e:89:9b:0d:c6:9a:57:c0:fc:7c:66:9f:0b:29:ed:
0a:ed:20:0c:fd:18:73:7f:5e:f8:ca:73:75:53:d2:
c1:19:74:5b:f6:72:ab:ce:a9:b4:ff:2a:1c:6c:ba:
0a:15:f2:2a:cd:3f:f1:25:39:e0:45:9a:a6:e6:f3:
db:26:28:c2:94:72:c7:ed:1e:8b:5c:cd:b0:bf:13:
0c:72:69:e1:c7:98:ff:da:06:57:ec:9c:e3:25:03:
cc:24:f9:f3:66:14:94:d1:7e:f9:91:0f:66:cd:94:
12:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:5B:86:40:C6:F0:F8:D0:EA:D8:41:70:FA:52:22:F7:8E:03:71:1A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143944.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a50e::/32
Signature Algorithm: sha256WithRSAEncryption
31:8c:97:99:41:5a:ff:69:3d:34:25:6d:e5:cf:ad:b4:df:89:
7d:ad:f2:64:bd:c3:f1:fc:d5:ac:83:3f:70:ae:10:a9:46:4f:
91:6a:91:3c:97:4e:e8:e8:06:c8:d2:35:d6:7e:ba:e1:96:d5:
63:f7:8e:f0:47:f5:81:8d:87:9e:66:3a:17:39:59:90:d6:25:
26:d9:b6:ca:d5:47:29:a6:7a:39:bc:4d:79:42:bd:56:6f:4d:
7f:af:fd:81:77:e6:58:e4:64:8a:3c:32:00:1f:4e:ef:26:3a:
f9:84:80:1f:aa:fb:5a:7c:c3:17:1f:7b:d4:67:8b:ae:9c:7f:
88:a7:59:5b:a6:85:a5:25:dc:97:ff:ff:0a:7b:fb:bd:e2:50:
f6:ff:43:21:25:e1:57:73:02:25:38:7b:84:ba:eb:d7:62:23:
1f:e7:fd:0b:15:ee:a8:ca:88:b1:20:b2:cc:b7:35:e7:55:1d:
16:9d:62:43:34:c3:4a:09:81:16:3b:66:88:97:8a:43:6c:08:
46:12:4e:4e:df:50:6e:af:c2:4d:ae:45:da:ff:3f:77:da:48:
e3:4f:7a:a9:60:1a:41:84:2e:9d:a6:f3:54:d1:06:63:92:c4:
39:17:88:91:b1:d2:56:92:48:c6:e7:bf:e6:b3:b6:72:b6:f1:
f2:ff:57:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:18 2026 by rpki-client