Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143026.roa
File: AS143026.roa (raw, json)
Hash identifier: R4FC5JhrFgoLelfhiR30cmwC61uZ6/VoFpyvNKCaIKk=
Subject key identifier: 1C:F7:9D:3C:D7:0C:87:91:67:44:C4:BF:42:B2:6E:E6:1C:6C:B8:9D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 68DB150883421F80A4952721D563C47CFBCCC748
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143026.roa
Signing time: Tue 26 May 2026 02:34:56 +0000
ROA not before: Tue 26 May 2026 02:29:56 +0000
ROA not after: Tue 25 May 2027 02:34:56 +0000
asID: 143026
IP address blocks: 240a:a178::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:db:15:08:83:42:1f:80:a4:95:27:21:d5:63:c4:7c:fb:cc:c7:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:29:56 2026 GMT
Not After : May 25 02:34:56 2027 GMT
Subject: CN=1CF79D3CD70C87916744C4BF42B26EE61C6CB89D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:57:a8:c7:a4:1e:66:6f:0b:c5:ad:6c:98:13:
94:9b:c0:21:08:57:60:bf:ca:2f:55:a4:e5:8d:a4:
c2:ee:be:00:35:22:04:26:6b:10:48:f2:bc:0c:47:
d1:56:e8:f6:ba:24:33:6e:24:0d:c4:4c:30:1a:ac:
ba:7f:d5:51:ce:2c:57:b9:f1:c7:41:19:c4:2b:2f:
b8:98:72:15:81:76:48:df:e3:dc:61:74:55:c7:0b:
97:2e:53:32:c3:d2:e2:dc:7e:88:0f:c8:82:d8:56:
3b:59:c3:dc:c7:7e:0a:4f:31:f6:b1:e7:12:a7:7f:
f7:01:19:c9:99:76:3d:fe:17:fc:c6:56:8f:51:7b:
f4:55:0b:61:4a:73:cd:0e:ef:8f:0b:3f:94:5e:04:
4f:ad:8b:54:d1:00:e1:a5:6a:da:3e:f8:7a:3f:c5:
ba:e2:89:93:01:e3:9e:4d:00:4d:af:be:3a:07:2f:
00:a7:90:71:3d:87:4b:d9:90:ca:d0:e9:0e:bf:12:
62:af:8b:e0:52:18:4c:f0:79:ae:c7:bb:05:f2:69:
e2:67:b3:77:90:b6:1c:14:30:df:5d:bd:fe:14:0f:
d0:80:59:0a:7c:1a:71:7a:fe:62:c2:b7:d3:65:0d:
5a:16:91:7e:b7:73:b1:f1:61:3b:ea:17:7a:1a:ae:
2a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F7:9D:3C:D7:0C:87:91:67:44:C4:BF:42:B2:6E:E6:1C:6C:B8:9D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143026.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a178::/32
Signature Algorithm: sha256WithRSAEncryption
03:0a:2b:93:5d:2e:33:05:32:0f:c6:77:7f:24:a1:92:3e:a4:
7b:87:2a:d6:1d:eb:c8:56:fd:14:90:6f:98:fa:53:c7:d9:f5:
1b:84:fa:17:ed:40:7a:a8:99:32:e4:6b:1d:7a:c9:bc:a6:5f:
dd:cc:33:18:cf:d4:90:81:9b:bc:be:5c:d2:12:31:cb:8b:8c:
91:81:e2:38:e2:09:07:d7:b3:d2:c0:12:e7:1b:72:d6:0f:84:
89:b6:65:ee:1a:ea:2d:e9:7d:10:1f:96:2e:41:99:d9:56:ba:
0e:07:9c:86:8c:9e:8c:bf:74:73:b3:70:c1:e1:26:93:4e:92:
16:d1:4c:45:8a:0b:40:54:bb:6b:6a:f8:58:e2:31:cf:4b:38:
6f:b3:c2:4a:df:84:fb:a8:52:92:3d:9a:fa:1f:bc:6a:37:41:
13:59:38:a7:e1:3b:72:2f:89:fc:64:9a:01:b7:05:7f:fb:4a:
85:3d:b5:5e:31:bd:19:b8:bc:08:a2:73:35:12:0b:7f:ea:d7:
59:72:f7:77:bd:f2:b7:5a:68:c7:ff:de:3c:0c:c2:84:46:2d:
6c:6e:02:7f:41:ba:70:65:a3:9e:85:d9:d7:0d:20:7e:ca:15:
b1:ab:6b:04:98:0d:c3:ba:1e:ad:f9:91:db:d1:27:de:ec:e2:
80:0c:43:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:53 2026 by rpki-client