Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143953.roa
File: AS143953.roa (raw, json)
Hash identifier: QgCL6/lU/kNA7sTThc4AW1EMfp+CxHf4VTEy8JcJsNw=
Subject key identifier: 3E:27:7B:DC:D2:11:C4:69:32:9E:B7:6E:B9:CB:67:67:F4:59:8F:23
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3211F0781531FF5DB1CB245300678E35862912AF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143953.roa
Signing time: Tue 26 May 2026 01:12:54 +0000
ROA not before: Tue 26 May 2026 01:07:54 +0000
ROA not after: Tue 25 May 2027 01:12:54 +0000
asID: 143953
IP address blocks: 240a:a517::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:11:f0:78:15:31:ff:5d:b1:cb:24:53:00:67:8e:35:86:29:12:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:07:54 2026 GMT
Not After : May 25 01:12:54 2027 GMT
Subject: CN=3E277BDCD211C469329EB76EB9CB6767F4598F23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5b:d3:91:44:fa:db:17:09:ff:d6:d5:13:1b:
f5:d4:5f:a7:df:a1:c4:40:88:9b:8d:40:50:fb:0b:
08:14:44:40:a6:1e:e4:46:df:db:01:bc:c0:97:5a:
88:78:0d:05:d8:2d:00:e9:cc:a5:21:cd:ca:fd:85:
cd:c9:76:43:a1:6b:78:d3:51:f0:fb:4f:f0:ed:2c:
45:80:2a:d2:99:ef:3c:5b:9c:82:76:be:ce:45:df:
7d:73:57:af:4d:f6:ab:d7:2c:0f:00:18:f4:53:7e:
3f:bc:a2:65:58:9f:79:ec:41:66:b0:1e:81:1f:a7:
74:e0:f0:4d:0e:2e:c4:03:78:17:39:3c:76:8f:74:
ec:59:bc:c7:0e:fb:c9:91:fc:ba:f3:ed:f1:2e:84:
f7:e3:68:53:a7:f7:1e:3b:c9:6c:29:15:67:41:7c:
56:16:8b:2a:66:7a:fa:36:83:40:2f:66:03:10:f2:
d9:d6:dd:af:87:6a:10:a1:78:53:8e:17:30:94:34:
23:06:f9:a7:ac:d8:48:4c:c8:63:44:5a:b7:8d:ba:
b2:41:06:cb:8a:f7:41:da:aa:f3:f5:4b:79:88:77:
f6:81:c5:9e:ec:0e:f2:40:57:ed:83:31:d4:c3:30:
93:a4:b4:1e:7b:92:9d:95:8b:cd:25:f6:95:a2:f6:
71:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:27:7B:DC:D2:11:C4:69:32:9E:B7:6E:B9:CB:67:67:F4:59:8F:23
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143953.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a517::/32
Signature Algorithm: sha256WithRSAEncryption
7a:46:38:34:e1:c1:7a:0f:2c:c5:da:d7:60:b4:bb:c0:a0:74:
0e:06:18:f1:ea:59:fb:3e:c3:da:26:ef:c5:8f:38:29:a9:92:
cb:30:67:e2:0c:6e:da:c9:db:75:72:d0:c2:db:d9:f1:9c:ed:
33:d1:01:9a:7a:2c:c9:ce:fa:59:52:91:5f:cf:b1:61:25:09:
be:e2:17:a8:1d:d4:95:f8:d8:33:6a:d4:77:6b:da:d9:aa:34:
f2:14:c6:77:18:98:49:f7:b5:7d:03:27:55:91:5f:71:02:b3:
a3:8d:ff:97:8a:a5:69:8a:a2:43:8d:8c:ec:86:a4:5d:04:ea:
8e:88:09:03:7b:3f:fb:b3:a8:31:93:17:98:4f:b4:54:99:d4:
94:54:da:d3:78:c9:21:3d:5d:a4:18:b4:69:3d:20:3f:f2:35:
06:81:8f:ba:51:8c:b5:ba:df:02:4d:f9:c4:86:bf:e2:86:53:
24:b8:b6:46:5d:58:c3:21:86:d8:a7:30:a8:b4:57:fe:79:e3:
78:78:05:b2:3f:da:93:b9:92:14:b9:ab:91:f2:1a:cb:c6:54:
c3:46:c2:8f:d2:6d:8b:16:6c:e5:a7:8d:dd:c8:b0:96:5c:16:
c3:27:bc:f0:9c:91:d9:f4:ac:57:32:54:06:0c:26:0f:a8:df:
16:09:b9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:40 2026 by rpki-client