Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143958.roa
File: AS143958.roa (raw, json)
Hash identifier: GD4yJFFXpr04c2g27kLiRnfdZpNqv53k6Uzd7OFtbE4=
Subject key identifier: 6B:B8:A3:AF:58:EA:59:CA:D4:33:C4:97:43:F8:84:AF:75:40:AF:3E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2CBCF03E2292D2515BE9E70DCBB5231549A05941
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143958.roa
Signing time: Mon 25 May 2026 02:22:11 +0000
ROA not before: Mon 25 May 2026 02:17:11 +0000
ROA not after: Mon 24 May 2027 02:22:11 +0000
asID: 143958
IP address blocks: 240a:a51c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:bc:f0:3e:22:92:d2:51:5b:e9:e7:0d:cb:b5:23:15:49:a0:59:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:11 2026 GMT
Not After : May 24 02:22:11 2027 GMT
Subject: CN=6BB8A3AF58EA59CAD433C49743F884AF7540AF3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7e:18:e0:93:5a:6e:e0:85:28:86:59:84:0a:
ba:0e:29:8c:26:f6:83:2b:2c:3f:4a:16:49:50:1b:
d3:27:33:c6:54:89:7c:16:9e:87:25:64:4d:1c:32:
43:ef:8f:1e:a4:02:c3:0d:bf:ff:a5:0f:7e:ae:dc:
da:15:e5:e4:78:b6:d2:30:2c:07:0c:02:67:64:72:
c3:10:10:e2:f1:4f:9b:c2:7e:17:32:be:67:b7:94:
5d:4d:82:c7:e2:63:11:dd:da:59:d2:21:5e:64:dc:
c8:e9:90:4c:85:86:2c:8e:65:df:06:b9:31:ed:99:
c3:43:6c:54:ad:38:06:9b:0c:6b:76:9b:62:cc:fb:
df:16:e8:41:b3:f1:00:99:67:d8:f4:79:e1:9e:3b:
ba:5f:95:fd:64:75:f8:54:1b:40:bf:82:75:5f:b8:
21:f0:af:1f:32:f4:12:41:fe:57:72:c2:59:8d:7f:
e2:ba:7d:96:89:e0:a1:55:18:87:15:e8:96:2a:58:
bc:af:6f:14:1e:c6:92:ca:d0:2c:63:32:e8:a0:3b:
a5:86:47:c0:81:f7:5d:ca:ba:de:ac:eb:1c:ab:44:
a2:f9:f9:3a:0f:6e:10:6c:92:74:37:e4:78:4f:79:
3e:e8:d8:f4:86:4c:9b:06:36:26:ae:7b:77:09:e7:
58:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:B8:A3:AF:58:EA:59:CA:D4:33:C4:97:43:F8:84:AF:75:40:AF:3E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143958.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a51c::/32
Signature Algorithm: sha256WithRSAEncryption
62:e2:79:df:b9:a1:83:20:45:81:d1:c2:01:78:89:eb:41:5a:
c1:5e:72:ae:d8:b1:7e:58:12:94:f7:7c:61:0a:e6:48:46:c3:
ce:00:31:fb:e7:81:e7:31:69:49:b0:6f:a3:c5:38:7d:0e:39:
fa:85:56:28:85:0b:58:24:63:86:34:a3:1a:ea:13:6b:fe:6f:
19:39:9b:68:f9:dc:29:73:0d:3e:b3:13:64:40:a8:16:04:9b:
01:3e:21:6d:1f:58:54:2b:de:0c:f4:3c:93:73:36:44:b5:db:
5d:ee:e6:e0:96:5e:5c:93:b7:05:2b:32:7b:c7:39:9e:1f:86:
be:5c:92:5b:ef:65:f3:a6:ab:5b:ac:99:5e:5a:1c:01:f9:a2:
91:a2:88:70:c7:7a:9a:6c:b2:c8:ce:01:b0:85:8c:99:7a:b5:
fa:0a:4c:12:d2:93:ca:d0:e0:c9:6e:80:fd:58:eb:20:47:fd:
94:80:72:2e:7d:58:5c:28:7d:a0:d4:e1:89:70:21:85:7d:7f:
b5:af:a0:6d:f9:fe:ae:79:bf:f5:41:06:4d:be:13:c6:6b:c7:
39:37:3a:af:98:25:8b:1a:9b:1d:c5:38:73:5f:7f:6b:a1:8a:
58:66:13:f2:de:a5:58:e3:ce:f8:c4:d1:32:14:50:c7:f4:b7:
07:01:bf:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:10 2026 by rpki-client