Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143028.roa
File: AS143028.roa (raw, json)
Hash identifier: DOkcmeF6LHO1+V/GGN5z14XE6fmx93VEn8StSfDtnd4=
Subject key identifier: D4:39:F2:6D:70:76:5F:C6:B7:1B:44:CC:8F:46:67:4E:DD:B8:92:8E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3E048AD75008458B7FB638A81C4BB9C53AE0E098
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143028.roa
Signing time: Tue 26 May 2026 06:30:24 +0000
ROA not before: Tue 26 May 2026 06:25:24 +0000
ROA not after: Tue 25 May 2027 06:30:24 +0000
asID: 143028
IP address blocks: 240a:a17a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:04:8a:d7:50:08:45:8b:7f:b6:38:a8:1c:4b:b9:c5:3a:e0:e0:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:25:24 2026 GMT
Not After : May 25 06:30:24 2027 GMT
Subject: CN=D439F26D70765FC6B71B44CC8F46674EDDB8928E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:01:e5:ed:ff:1c:bc:3e:08:d8:87:77:a4:0d:
8b:29:55:2b:84:36:32:8d:a8:3d:c1:a8:2d:bc:97:
2d:81:b5:d4:ea:ac:07:ae:38:01:69:b1:e2:b3:df:
ff:b7:0a:72:b5:55:31:86:24:b6:3a:76:bd:d8:82:
4d:8d:ed:91:56:8c:ad:a5:dc:6b:e3:d0:24:43:95:
34:82:df:c3:b5:e9:71:e0:e3:83:59:5d:7c:e5:84:
53:9d:c4:c3:df:60:23:2d:20:5d:9b:19:62:ee:ae:
62:0a:3f:75:18:f0:a3:1e:6b:97:fe:a3:6a:2c:a5:
79:7e:00:d8:21:7a:36:b9:4a:34:d4:79:5f:02:20:
d9:51:b2:ae:ef:0c:36:9e:41:d3:ee:48:a2:70:77:
89:4b:b4:d5:0b:9e:e3:a9:91:9f:4b:47:fa:20:ca:
39:9e:35:d6:50:bc:25:ee:6f:4a:15:28:2b:42:c9:
af:93:1b:c6:2b:a8:31:fd:d6:ce:55:9a:45:43:05:
1e:15:f1:c5:47:00:3e:4b:7c:8a:6b:0f:32:60:65:
61:34:34:52:6c:6a:82:cd:48:4b:dd:ed:b8:c1:c0:
2e:16:25:3f:8a:7f:89:04:30:1a:68:39:cf:48:38:
4e:17:35:bc:9f:af:4b:38:3b:4c:c7:3a:28:ee:1a:
ca:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:39:F2:6D:70:76:5F:C6:B7:1B:44:CC:8F:46:67:4E:DD:B8:92:8E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143028.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a17a::/32
Signature Algorithm: sha256WithRSAEncryption
12:b4:b7:00:2d:41:05:96:09:6a:0c:df:5c:64:a4:df:aa:54:
da:e1:2f:c2:e4:81:69:ba:cf:af:ff:c4:99:e4:9a:73:9a:e6:
36:68:59:5f:9a:44:ee:c5:e7:19:a0:5c:b1:76:03:9a:e2:8d:
02:ef:60:4b:d4:6f:be:a8:01:31:20:b1:26:3e:27:59:bb:9a:
6f:af:d6:e2:89:84:9f:ba:5a:52:b6:fa:7e:03:01:63:fd:a7:
12:dc:9a:23:94:02:c6:89:34:72:9b:0b:14:a5:9c:6d:ba:7a:
4f:d9:1c:63:9a:b9:f1:f5:35:89:5e:9d:e7:6f:c3:57:ce:f1:
ac:71:c2:ae:af:fa:8a:f7:ba:60:34:71:a5:cf:6a:39:51:7e:
f9:c9:29:a3:6d:b9:f8:18:14:a7:e6:d8:7b:d1:3c:f0:84:5a:
95:f7:82:b5:80:71:95:a3:1d:71:df:29:c3:2c:1b:fa:dc:38:
1e:10:96:61:06:54:ad:8e:c5:bf:35:1f:86:12:44:76:76:c2:
22:d9:8e:1b:a1:f0:44:d2:7a:75:66:71:92:e3:ee:d9:72:31:
2d:cd:e7:04:63:17:04:4a:26:79:63:82:8b:b6:1e:60:69:63:
74:20:df:69:8b:ca:e2:de:68:d7:5a:1d:3f:8a:22:5d:8a:7b:
1c:e6:45:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:23 2026 by rpki-client