Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143969.roa
File: AS143969.roa (raw, json)
Hash identifier: m9N3snxal4g4zHXqRBW/o+dj8nH1HbFUJCaQwOwbb5g=
Subject key identifier: DB:D5:E0:BD:B7:3A:A0:56:26:77:48:C2:14:34:4E:76:C8:B8:F9:AD
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6A8134717CC7E54F076408A6CEEB34FB4C9687B6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143969.roa
Signing time: Fri 22 May 2026 04:27:12 +0000
ROA not before: Fri 22 May 2026 04:22:12 +0000
ROA not after: Fri 21 May 2027 04:27:12 +0000
asID: 143969
IP address blocks: 240a:a527::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:81:34:71:7c:c7:e5:4f:07:64:08:a6:ce:eb:34:fb:4c:96:87:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:22:12 2026 GMT
Not After : May 21 04:27:12 2027 GMT
Subject: CN=DBD5E0BDB73AA056267748C214344E76C8B8F9AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:44:27:32:87:4b:66:f1:bf:7d:3b:cc:ad:44:
17:31:22:0b:04:b1:83:98:8a:c8:75:84:4a:00:0e:
54:3d:81:1b:9f:8c:47:32:73:2e:8e:52:e0:66:73:
c6:de:cf:4a:18:9a:20:74:53:cd:6f:ed:ea:f4:70:
24:76:28:f9:ce:e9:c8:1e:53:57:9f:e7:dc:b9:3c:
09:9e:1e:c8:6a:aa:22:f4:f4:5b:c3:c3:f2:bf:a7:
33:10:4c:e0:e9:a3:3c:cf:55:d3:92:6c:3d:13:c5:
49:8c:ef:18:f9:68:1a:13:e0:ac:cc:72:4a:51:79:
71:ef:d0:ff:35:94:1f:a3:61:2e:ed:b1:52:57:53:
e9:7d:1b:c3:58:f9:9d:0b:9c:7a:bf:ba:2f:dc:89:
29:97:57:5f:c4:ef:1f:01:37:cc:6f:88:93:5b:6d:
14:fd:ab:60:ee:5e:ee:42:b8:ab:22:35:ad:fb:82:
5a:de:07:85:c4:f1:12:ac:28:52:e4:31:16:97:2f:
70:b5:07:eb:56:34:70:0f:76:d9:e4:da:35:1b:39:
b5:ed:f6:4d:e9:02:c6:9d:13:7d:ec:20:01:48:81:
5c:63:35:9b:6d:6f:53:91:a6:b3:ad:e5:d1:6f:d5:
a6:3e:96:47:7a:78:a3:80:10:7c:ca:4b:55:64:e3:
cb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D5:E0:BD:B7:3A:A0:56:26:77:48:C2:14:34:4E:76:C8:B8:F9:AD
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143969.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a527::/32
Signature Algorithm: sha256WithRSAEncryption
a8:6c:07:ee:bd:d9:4b:f7:cd:af:6d:73:ac:d0:66:05:c1:53:
07:2e:7f:4d:8f:72:23:15:23:9d:5e:ea:70:db:dd:6f:63:71:
65:cd:fc:5c:13:c6:61:18:01:bf:48:8d:32:93:e8:ef:c3:4b:
55:bb:e0:7a:8c:00:65:4a:3f:a7:08:de:e7:6e:a0:b6:ee:45:
6d:fc:05:64:59:fa:39:2b:de:c1:e0:f6:ac:15:70:98:e1:ef:
34:d4:5f:f2:00:f4:1f:d2:5a:3e:8c:94:3f:6a:21:17:c9:f2:
eb:3e:8c:ed:86:8b:53:00:9f:e9:6a:07:36:9d:6e:a9:1d:97:
83:ec:4c:2d:7e:7d:3a:50:33:88:b3:63:62:f9:09:3b:9f:e2:
47:44:9c:ec:c3:a5:1a:c6:70:28:e5:66:39:08:c9:a8:c9:39:
1c:4e:45:fc:48:f3:98:29:10:25:3b:ab:41:28:a6:79:43:4c:
9d:47:8d:27:22:85:2e:d2:a0:0c:59:ef:ca:92:ce:0a:0a:95:
2a:5d:d8:4e:06:d4:4d:c7:6f:64:da:f7:26:4c:ce:21:a5:79:
70:af:46:c4:68:f0:a3:56:65:c9:3c:c4:dc:32:4a:da:b4:3c:
08:0c:91:02:17:52:66:10:6f:49:d2:37:4a:c5:36:4d:0d:a7:
58:47:f7:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:34 2026 by rpki-client