Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143988.roa
File: AS143988.roa (raw, json)
Hash identifier: /blV+gBTsPdk+rIfFtK814IhcJmExyUzfH49ZTMHQoY=
Subject key identifier: 70:66:9A:9B:F8:2C:22:44:DA:FF:F8:CE:DC:E7:90:6D:98:0C:3D:F8
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0178B92C8F624B9FCE8357C2DD0BEB0688837F07
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143988.roa
Signing time: Fri 22 May 2026 02:47:46 +0000
ROA not before: Fri 22 May 2026 02:42:46 +0000
ROA not after: Fri 21 May 2027 02:47:46 +0000
asID: 143988
IP address blocks: 240a:a53a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:78:b9:2c:8f:62:4b:9f:ce:83:57:c2:dd:0b:eb:06:88:83:7f:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:46 2026 GMT
Not After : May 21 02:47:46 2027 GMT
Subject: CN=70669A9BF82C2244DAFFF8CEDCE7906D980C3DF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:69:4a:06:b7:ac:06:d8:f7:3e:d3:b6:6e:8b:
9c:b9:5e:56:9b:20:dc:62:72:3a:a4:11:1f:95:d1:
f9:f3:21:cc:ed:c8:31:95:11:72:65:cc:64:df:05:
b3:b9:60:05:67:55:5b:d8:ad:4b:15:94:39:d2:4f:
1a:6c:55:cf:da:f3:ad:41:7c:80:fd:9d:12:00:4a:
40:f8:3d:f2:68:64:4f:dc:09:26:88:b4:c9:be:2e:
3b:ce:df:e5:71:5d:83:15:7d:23:c9:b8:27:aa:65:
a3:bb:a5:d9:b5:f2:6c:e1:8c:b0:78:0f:93:fb:eb:
92:e2:86:0c:1e:9a:b0:6b:60:9a:3e:6d:fb:a0:58:
9b:42:08:96:dc:54:6f:e3:ad:f4:4d:4a:87:2f:ff:
eb:7f:8e:7f:9a:3d:dc:ea:11:ff:8e:76:58:5a:41:
1c:ec:04:5e:9b:b7:f0:c7:8f:0e:a8:3a:7d:70:14:
a0:a4:25:f5:75:80:20:2a:4e:32:01:ce:1a:fd:f8:
5a:43:f9:d8:21:5d:39:e0:92:e7:85:27:15:f0:fb:
01:27:5d:3d:32:eb:a2:52:7f:73:10:c2:d2:c0:60:
b5:b6:e9:19:d0:dd:28:ba:1f:50:4a:f0:22:61:2e:
78:be:52:4f:a6:58:d4:0e:1a:70:7c:16:e0:39:ac:
2e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:66:9A:9B:F8:2C:22:44:DA:FF:F8:CE:DC:E7:90:6D:98:0C:3D:F8
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143988.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a53a::/32
Signature Algorithm: sha256WithRSAEncryption
b2:7d:fa:fa:81:2a:90:1e:53:8f:ed:c4:f1:93:18:3a:da:ed:
10:67:13:e5:12:11:58:d5:97:f6:34:7f:7d:e8:58:35:01:dd:
48:6b:36:7c:b6:02:dd:d4:f1:1b:a4:40:34:00:cb:76:a5:bf:
29:ab:0f:79:85:1d:8d:3a:b3:a6:8f:fb:4c:de:97:6c:4e:a9:
d5:6c:2e:1c:25:26:fa:ce:e4:50:a5:74:a3:59:f1:d8:20:a6:
c3:a4:1f:c9:80:88:8d:4f:c3:e0:2c:91:62:1f:63:cf:b9:2b:
c6:cc:ff:66:e0:46:8a:48:8d:27:09:21:6b:9f:08:2a:50:fd:
d6:dd:9f:89:b6:17:67:29:b4:90:23:4a:ad:1d:d8:f2:44:94:
99:45:38:be:97:50:d0:7d:58:d3:89:3e:cc:11:00:73:19:58:
db:67:08:f0:e3:a4:f9:5e:8a:66:68:fe:d5:e2:dc:79:b4:ad:
a2:31:05:cb:60:78:b5:13:b6:1c:2d:62:f9:30:79:ca:a0:32:
c7:c0:75:ca:2e:c2:c4:57:d0:8e:f0:a4:c0:74:bb:c1:b4:e4:
13:13:4d:be:2e:7f:3a:39:3a:d5:ca:fb:d6:cc:df:d9:ba:41:
7b:54:28:fb:a4:93:7e:1b:ec:e7:dc:e5:c9:26:95:8c:83:7d:
5f:56:03:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:59 2026 by rpki-client