Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143980.roa
File: AS143980.roa (raw, json)
Hash identifier: xv0T0AzsujXK9imjSoUDWnTlJTriQXiVdo2d30JQ/KA=
Subject key identifier: EB:8C:AB:AC:92:02:E0:45:81:5B:3E:A8:82:A5:FE:78:BF:4E:81:7D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6CEC1E18F61CDDCFB8F46538903B072601CD2E8D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143980.roa
Signing time: Fri 22 May 2026 06:05:40 +0000
ROA not before: Fri 22 May 2026 06:00:40 +0000
ROA not after: Fri 21 May 2027 06:05:40 +0000
asID: 143980
IP address blocks: 240a:a532::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:ec:1e:18:f6:1c:dd:cf:b8:f4:65:38:90:3b:07:26:01:cd:2e:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:40 2026 GMT
Not After : May 21 06:05:40 2027 GMT
Subject: CN=EB8CABAC9202E045815B3EA882A5FE78BF4E817D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:55:aa:d3:09:d0:c9:e8:82:09:3a:8c:54:44:
92:12:cb:a6:18:4a:25:aa:4a:08:d4:1a:0c:54:fe:
35:ea:6c:63:da:e1:31:be:44:7c:25:95:4c:a7:57:
17:a4:80:ad:0c:21:de:4a:45:b2:56:b5:6b:59:04:
4f:85:fb:7e:de:2a:2d:76:69:38:fd:4e:bd:d2:86:
b3:e9:8f:b4:9c:a3:bb:53:0b:7b:58:12:20:e6:28:
fe:d6:cc:99:06:0e:3d:c4:d0:b9:28:23:bc:49:a0:
28:25:bf:32:82:8a:ed:35:e9:02:aa:9b:27:4d:5e:
8b:59:7a:96:39:8e:2d:60:19:73:41:59:00:d9:59:
3f:8c:a0:75:39:db:c8:0b:a4:2e:84:74:05:97:76:
96:aa:bb:29:05:9a:94:f9:d5:a2:a0:d5:88:19:91:
d1:7d:a1:be:9c:8c:f7:6e:d0:6e:c1:27:84:61:b0:
f6:7d:c6:c8:6a:03:bb:67:47:6a:db:dd:16:da:ad:
8b:38:20:73:a2:96:63:da:5b:e9:51:68:e5:a7:8c:
76:99:46:cd:5d:45:1d:71:cc:b6:b8:ef:b5:40:d6:
28:db:49:53:b5:69:67:6c:b1:7d:7d:27:82:9f:c0:
fa:f1:9c:dc:cf:51:3d:fc:c8:88:2d:c2:dd:b9:a1:
0c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:8C:AB:AC:92:02:E0:45:81:5B:3E:A8:82:A5:FE:78:BF:4E:81:7D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143980.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a532::/32
Signature Algorithm: sha256WithRSAEncryption
1e:0b:5b:4d:93:c3:1a:5e:59:30:52:1e:b0:db:b1:b0:45:91:
5f:58:74:43:ff:62:66:a4:b4:8c:ca:03:12:4b:34:85:1f:4d:
25:a7:0e:13:c2:7a:d2:91:6d:37:b5:81:18:f8:64:7d:4f:48:
d5:6e:39:a8:13:d9:50:cf:e1:8b:b8:0b:d2:37:bf:61:26:a2:
4c:d5:e2:47:51:24:ad:11:69:ba:06:e0:84:01:e4:b0:5d:2a:
5b:7f:65:03:47:bb:8a:07:43:05:88:85:9a:55:d4:7d:53:0b:
72:72:d6:d7:56:a0:a1:0c:99:a4:71:2b:00:f7:48:3b:54:52:
4c:7e:da:fd:1b:23:0c:ad:07:43:8e:2d:65:b0:83:1b:2b:ff:
a2:ba:70:47:9d:97:71:e4:72:76:b9:a5:80:ce:32:9f:0f:46:
00:00:7b:55:cc:23:cb:5a:91:70:23:17:6a:04:b7:f9:dd:71:
fd:dc:46:e8:3d:0d:00:b0:0d:e1:78:d1:53:55:62:45:40:07:
72:8b:6b:86:65:d7:93:0f:04:3c:ba:ff:d4:70:b5:11:ce:73:
bc:44:69:99:46:b5:21:1f:bb:a9:36:88:2b:82:07:f6:16:25:
c0:b0:79:a1:74:bb:34:52:d9:96:a3:15:df:06:5a:c3:8d:e5:
c8:69:e6:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:47 2026 by rpki-client