Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143012.roa
File: AS143012.roa (raw, json)
Hash identifier: 4ndfmewgjMg0XcZcM2LqQOBHEJbC28CMYxh7L6snzhk=
Subject key identifier: 95:9E:34:6A:45:2A:C8:90:E6:92:02:29:5E:97:6D:75:F8:A5:E9:8C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5FFD160D8886701614772F34D583CA75D0E3E415
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143012.roa
Signing time: Tue 26 May 2026 08:52:52 +0000
ROA not before: Tue 26 May 2026 08:47:52 +0000
ROA not after: Tue 25 May 2027 08:52:52 +0000
asID: 143012
IP address blocks: 240a:a16a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:fd:16:0d:88:86:70:16:14:77:2f:34:d5:83:ca:75:d0:e3:e4:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 08:47:52 2026 GMT
Not After : May 25 08:52:52 2027 GMT
Subject: CN=959E346A452AC890E69202295E976D75F8A5E98C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6a:53:a0:61:f7:73:3e:2d:35:35:9c:62:4f:
34:74:47:ed:72:00:8f:42:53:c4:b9:e2:3b:2c:82:
cc:ff:29:d6:da:39:28:67:bd:dd:9a:d0:72:96:34:
18:83:00:b4:ea:d2:cb:8e:d6:b9:32:a4:8a:6f:24:
b0:43:c4:3a:9c:ed:3a:cb:06:99:b7:07:a9:c8:a1:
a1:2c:fa:7f:da:a1:f8:a4:6c:49:df:9c:fb:b7:95:
52:d1:d5:d8:5b:41:ac:7c:31:07:13:76:b5:3b:4d:
6c:22:d4:83:e0:8f:0d:8c:21:99:ae:30:dc:f3:51:
7c:fe:f5:74:6d:fa:a5:68:05:67:b9:23:23:f7:3e:
81:3c:12:c6:79:02:e4:28:88:b5:93:3c:2b:1b:5a:
92:8b:16:f4:6f:71:7f:5a:b4:2d:ef:45:47:34:a0:
65:74:a9:76:56:0a:37:59:25:29:ac:11:b0:ac:86:
20:4b:4a:69:68:7e:fc:26:72:62:e4:c9:47:0c:4a:
e3:c8:5f:33:10:e9:0d:2f:c6:24:ca:cb:e0:4b:d8:
0b:83:dc:79:ec:cd:8c:23:53:20:4d:b8:d8:a8:2c:
bc:64:b4:5e:7d:3a:3b:98:cb:45:82:5f:a0:e6:5f:
c2:e0:f4:0a:55:5a:f6:f1:86:a8:31:ee:e6:04:b9:
af:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:9E:34:6A:45:2A:C8:90:E6:92:02:29:5E:97:6D:75:F8:A5:E9:8C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143012.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a16a::/32
Signature Algorithm: sha256WithRSAEncryption
a3:2d:74:c6:9c:3d:dd:8a:22:42:b9:a0:22:d0:b9:9c:7b:c1:
cf:88:90:13:dd:8b:28:f6:fc:19:c9:68:7f:05:b2:bb:27:a8:
34:1f:a6:e7:1d:55:82:b1:85:0e:a8:43:ed:7d:9e:87:9e:d7:
87:84:17:54:2c:de:e6:e5:50:43:99:e9:c0:3b:75:4b:88:19:
5e:67:5e:c8:f2:8b:db:41:e6:ed:fd:de:60:0d:4b:41:f2:ab:
f9:48:b6:b1:42:20:2e:e7:c6:a6:2f:41:3a:9f:0f:41:15:5c:
56:b5:ad:82:86:8a:2a:e9:f8:0f:8a:d5:4f:5e:96:a3:9f:ce:
8a:f6:f6:6e:70:4d:dc:c2:b2:9f:27:de:c6:45:62:94:9b:3f:
ef:fb:0b:64:f6:3a:2c:94:12:4a:83:44:a8:a4:97:f6:3a:ec:
6d:ed:c7:f5:37:34:4c:cf:d5:d5:aa:37:77:ae:3b:cd:70:4f:
f4:b7:b7:aa:93:22:96:29:cb:37:f4:b2:43:da:c5:f8:9e:5d:
cd:a5:87:57:60:53:93:55:23:89:03:1a:9a:c1:f7:03:db:fa:
c5:2d:66:f6:9d:00:f7:ce:3b:f7:a4:b6:93:f6:91:f8:35:a2:
ba:8c:47:ad:31:b8:85:19:af:cb:bb:83:5f:3a:62:bd:e0:70:
13:59:13:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:52 2026 by rpki-client