Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143946.roa
File: AS143946.roa (raw, json)
Hash identifier: DR16Lv5cf8dIvrfGsUu/L+Ai3XsVzdX0Ak5ZU7+fC1w=
Subject key identifier: 29:E5:DD:F0:77:53:D9:2A:6A:80:A2:64:02:F6:C7:EC:A7:70:19:2A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3C86EAFB631CAED116FC475A5867BF92A1D28A93
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143946.roa
Signing time: Fri 22 May 2026 02:47:42 +0000
ROA not before: Fri 22 May 2026 02:42:42 +0000
ROA not after: Fri 21 May 2027 02:47:42 +0000
asID: 143946
IP address blocks: 240a:a510::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:86:ea:fb:63:1c:ae:d1:16:fc:47:5a:58:67:bf:92:a1:d2:8a:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:42 2026 GMT
Not After : May 21 02:47:42 2027 GMT
Subject: CN=29E5DDF07753D92A6A80A26402F6C7ECA770192A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d4:ee:9e:fb:5f:39:e5:26:f6:27:48:d5:3e:
ac:21:74:f0:84:96:61:dd:9e:04:f2:0e:60:20:6a:
b6:c8:0f:c2:aa:2f:14:8e:20:f3:07:d7:ef:24:d0:
97:92:f9:8b:41:ce:ab:3f:35:8b:0c:60:10:20:60:
c1:44:f6:34:68:2d:29:9c:7c:e5:d5:44:b2:40:52:
f2:20:c1:c1:fc:da:fd:d9:b2:4c:cd:9a:36:3f:3c:
63:34:84:54:4d:e7:83:4b:a3:9e:60:19:5b:16:a7:
5b:77:1b:c1:8f:ba:a8:63:4f:f8:37:d8:a0:9a:02:
9a:8e:66:df:92:a7:55:f7:37:c1:a1:2d:6f:28:bb:
6a:e0:f5:20:cd:c2:f1:eb:bb:33:d2:64:4b:cd:6d:
e0:0f:fc:37:b3:9f:64:85:6b:b1:0b:69:41:a1:b6:
aa:16:b1:30:50:98:b5:7c:67:84:53:76:50:80:8f:
20:c0:05:19:f8:56:69:82:0b:e9:10:ff:b6:52:34:
f7:2d:71:ad:6c:3f:b5:5d:6b:92:2c:74:93:dc:92:
c6:0e:8b:18:d9:aa:d4:dc:1d:46:5e:8c:98:ca:ac:
6b:ba:d1:b8:47:e0:15:ac:eb:86:3a:19:ea:9a:40:
8d:7b:1c:95:a2:df:99:21:d5:b3:09:3c:6d:41:0b:
df:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E5:DD:F0:77:53:D9:2A:6A:80:A2:64:02:F6:C7:EC:A7:70:19:2A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143946.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a510::/32
Signature Algorithm: sha256WithRSAEncryption
57:f6:bb:c7:d8:22:02:90:33:78:97:0b:08:7d:46:0a:78:76:
37:0a:0c:23:dc:a2:7b:97:28:27:bf:6e:f2:f5:50:27:6f:b7:
07:cd:13:99:2d:5a:d1:5f:1e:12:dd:2d:d4:08:7b:c6:4b:77:
50:eb:ad:28:00:d5:0e:c6:4d:01:0a:ee:23:fe:11:4d:b8:cd:
85:5c:19:70:62:23:6b:5e:a4:ac:5b:9a:ab:2d:8d:94:a5:a2:
05:ac:50:59:22:96:6f:8d:c3:3f:80:26:97:9c:b6:08:14:2d:
22:19:a0:9f:a6:84:bc:7d:a1:a0:cd:dd:88:dc:be:93:c2:08:
4d:d1:5d:e3:62:4b:5f:7b:99:61:05:30:52:df:a0:e3:10:f2:
93:a1:00:c0:d1:28:33:fb:96:ff:7c:e5:11:22:b2:46:29:e6:
60:bb:14:eb:cb:e6:a3:46:bc:d9:dc:a1:7a:cd:f1:e0:dd:59:
d6:36:a7:d8:00:6b:64:60:fc:01:79:ba:0d:7d:e6:a5:bf:86:
8f:22:6b:87:33:31:5c:e1:a8:38:05:a1:d4:78:8f:5e:44:d2:
76:28:a6:11:72:e0:1b:a0:09:c2:bc:39:91:23:7e:f6:68:73:
e2:b5:aa:14:66:18:6f:83:8c:26:81:29:ec:65:d7:2a:ab:b2:
94:61:39:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:43 2026 by rpki-client