Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143982.roa
File: AS143982.roa (raw, json)
Hash identifier: nIcwzGltexZmNp8oAYfulBmjzNqeMDAQOxaW6/eO1+E=
Subject key identifier: 0F:21:F9:89:0D:28:50:7F:1C:06:1B:45:AF:02:1D:9E:0C:8D:13:1F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 36FD9583B9ECA529CF4CB27F58AEC38608FC0A41
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143982.roa
Signing time: Fri 22 May 2026 07:40:53 +0000
ROA not before: Fri 22 May 2026 07:35:53 +0000
ROA not after: Fri 21 May 2027 07:40:53 +0000
asID: 143982
IP address blocks: 240a:a534::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:fd:95:83:b9:ec:a5:29:cf:4c:b2:7f:58:ae:c3:86:08:fc:0a:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:35:53 2026 GMT
Not After : May 21 07:40:53 2027 GMT
Subject: CN=0F21F9890D28507F1C061B45AF021D9E0C8D131F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:04:19:80:3e:14:17:38:ed:6a:23:93:fa:d8:
b7:d3:2b:68:ae:46:22:36:d0:73:eb:5f:9b:c3:62:
87:08:08:d0:45:0a:d1:7c:5a:00:eb:92:e9:c1:aa:
c2:68:a3:23:b5:cd:6e:dd:5a:11:f4:3a:c0:b9:e5:
89:fe:da:9e:81:d0:cb:8a:a0:0a:f9:74:80:38:21:
3f:e1:1d:42:26:d8:96:88:9f:dc:70:48:61:f6:88:
06:88:a9:bb:7f:4c:b2:e6:a0:4b:7f:45:7a:8f:f3:
47:92:44:39:1a:8b:83:59:32:5e:1c:a2:2e:74:67:
66:97:02:12:28:8a:0d:3e:a7:fc:3a:13:91:29:64:
da:db:36:8f:b0:46:f7:7a:c6:93:0b:2e:6b:57:0c:
be:ae:32:af:a5:9f:66:9b:d6:71:f0:c7:56:15:b3:
b7:2e:36:fc:da:d6:03:9b:ac:bf:97:15:2d:2c:35:
bc:b7:a5:f5:e7:d5:79:18:bb:26:2c:d3:00:69:e0:
a8:0f:07:71:6e:1c:56:be:ae:51:58:df:ac:53:df:
fd:91:cf:66:57:9a:02:ed:aa:d6:13:0b:65:d7:04:
3d:b3:ef:34:4e:75:c2:98:44:78:e5:28:5f:ab:25:
6b:52:db:6f:6a:7b:05:7a:30:b0:5f:7c:17:72:ab:
3c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:21:F9:89:0D:28:50:7F:1C:06:1B:45:AF:02:1D:9E:0C:8D:13:1F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143982.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a534::/32
Signature Algorithm: sha256WithRSAEncryption
9e:19:3e:af:36:92:cd:84:2b:af:cd:3a:bf:31:36:f6:da:39:
2f:6c:d2:f6:aa:b9:6c:a6:06:a1:7a:6d:8a:0c:f2:29:d1:31:
75:73:4b:15:48:7a:d6:08:17:d1:a9:1f:64:4a:91:d6:49:05:
21:37:3b:a7:98:8e:d0:23:5f:73:83:30:cc:30:89:cc:e1:58:
2b:a5:98:ee:48:d0:42:18:37:85:a1:33:63:9b:5b:3b:a1:e8:
4b:30:a9:ad:fe:29:94:c0:c5:2f:ad:c9:83:e0:8c:3c:56:f4:
2b:12:8d:a7:cc:e1:cc:4e:17:42:60:68:a6:69:a1:ef:dd:a7:
b2:c1:d0:df:dc:14:e8:52:2b:1f:83:cc:4b:c1:e6:f3:c3:e2:
36:90:19:13:76:da:a3:06:35:4d:77:50:a0:5d:42:07:e3:c3:
7f:ae:01:ae:bf:49:a0:67:83:e6:f3:19:bb:c5:fc:c0:7f:7e:
ea:7f:19:a5:d8:2a:e2:de:f5:b1:96:62:95:1b:9f:a5:0f:84:
67:d2:be:34:81:c3:2a:a8:54:55:15:0e:d5:c8:4d:9e:4e:38:
f8:39:0c:42:c3:33:88:b0:fc:3c:90:b0:57:01:1a:33:9b:0c:
d2:e2:8b:db:19:fc:f3:2b:c8:1c:96:66:d6:2f:1e:11:86:b5:
ec:be:5a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:25 2026 by rpki-client