Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143989.roa
File: AS143989.roa (raw, json)
Hash identifier: Rshf5Mtscjefr7fWTswo4ZVSymDSt/MPGvbxnKUYf5w=
Subject key identifier: D7:CA:29:BD:A1:8A:85:8F:3E:27:B4:D6:70:D6:D3:4E:FA:4C:F5:96
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 15AD5DB8FC0412A8DC0FB7DEC5D81B633D3B6CE2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143989.roa
Signing time: Mon 25 May 2026 01:38:14 +0000
ROA not before: Mon 25 May 2026 01:33:14 +0000
ROA not after: Mon 24 May 2027 01:38:14 +0000
asID: 143989
IP address blocks: 240a:a53b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:ad:5d:b8:fc:04:12:a8:dc:0f:b7:de:c5:d8:1b:63:3d:3b:6c:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:14 2026 GMT
Not After : May 24 01:38:14 2027 GMT
Subject: CN=D7CA29BDA18A858F3E27B4D670D6D34EFA4CF596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a3:f4:70:a1:3f:d1:fa:e5:80:c5:b0:ef:da:
fe:e4:ec:63:ae:fd:4d:0a:1e:84:77:71:11:2a:c0:
a7:ae:86:06:49:6c:50:56:0f:db:c7:ad:28:f3:1e:
db:7e:1b:bd:19:32:aa:15:d5:fe:a0:92:6a:82:31:
b6:38:72:6a:c7:d6:b9:3d:92:59:cd:ae:82:97:2a:
3f:75:02:cd:e1:f4:2b:49:e5:e6:1d:d2:57:c9:bb:
c8:3a:73:9f:1d:bd:19:5d:9d:a5:52:31:5a:71:28:
7a:2c:81:6e:a1:27:a1:46:41:2e:eb:bb:c7:2c:d3:
3f:4a:61:77:36:c4:7b:ac:54:6a:07:63:da:98:30:
71:a3:a5:f2:a0:8f:59:07:1e:d2:24:b6:6c:02:30:
b1:64:5f:86:ee:1a:de:94:fd:97:aa:f1:90:49:9b:
b3:f2:0d:37:6c:42:3d:b8:09:f1:fe:48:e1:0a:cc:
73:30:b4:e7:43:77:01:27:7a:f1:91:dd:e3:53:62:
a2:de:c5:87:1e:52:bd:ef:b9:16:7d:01:d3:34:4d:
3c:9a:c8:e9:64:50:31:3f:ee:30:ae:30:70:41:5d:
1d:a5:17:84:35:8a:9b:80:f1:79:2e:8f:7a:4a:64:
9e:8b:5b:6c:7a:46:d5:ad:5e:91:3b:d9:8e:94:33:
a9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:CA:29:BD:A1:8A:85:8F:3E:27:B4:D6:70:D6:D3:4E:FA:4C:F5:96
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143989.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a53b::/32
Signature Algorithm: sha256WithRSAEncryption
02:14:8a:ba:e4:e2:4a:ec:5d:90:56:4c:e9:4b:21:c5:60:71:
51:de:8a:c2:ad:bb:17:03:01:f2:28:d5:2a:1c:9f:cc:e8:8b:
b9:ff:21:c9:d1:42:93:aa:50:3a:c1:7e:fd:e2:da:e8:b5:a6:
ba:17:86:33:cb:01:08:da:95:6b:d4:b9:24:39:8d:f7:af:6b:
c9:be:fd:84:45:6e:80:a0:5a:19:81:02:cb:99:22:6a:dc:15:
f5:4f:b3:ee:03:34:3e:1f:c4:4c:e7:b4:fb:32:48:98:a4:12:
42:27:6e:d6:74:25:4f:4e:d9:4c:16:d5:92:ff:ba:bd:08:6c:
e1:5c:8e:13:9d:a7:2e:08:27:3c:1d:e8:e8:82:8c:bc:1b:fe:
5b:44:e6:b4:59:be:44:30:c7:49:05:fc:18:46:2c:0f:72:18:
5b:cc:e7:92:5e:84:5a:31:4a:b9:72:86:68:0e:f1:c9:61:22:
db:ff:f1:b5:c5:17:3e:01:73:14:74:f6:91:cd:d9:bb:4e:d5:
b0:b6:05:64:d8:0d:1c:c4:d3:8b:82:0e:38:b3:81:f6:f2:43:
97:65:da:8f:47:1b:8f:3d:e9:c1:7c:12:81:dd:e5:4e:10:44:
e4:ac:ac:52:51:4b:57:62:cf:53:18:d7:71:2a:70:34:be:be:
07:1a:c3:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:06 2026 by rpki-client