Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143029.roa
File: AS143029.roa (raw, json)
Hash identifier: eprhocXNejf9e8zO3qWk9yLLcI3r53MZ3SaZ/NPcJec=
Subject key identifier: 3F:52:6C:12:2D:88:01:7F:4B:41:E0:F4:9F:40:F7:20:BD:36:75:E7
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 47E8AC68BF6C6E106846380899799BC24DC2DFB1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143029.roa
Signing time: Fri 22 May 2026 04:08:01 +0000
ROA not before: Fri 22 May 2026 04:03:01 +0000
ROA not after: Fri 21 May 2027 04:08:01 +0000
asID: 143029
IP address blocks: 240a:a17b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:e8:ac:68:bf:6c:6e:10:68:46:38:08:99:79:9b:c2:4d:c2:df:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:01 2026 GMT
Not After : May 21 04:08:01 2027 GMT
Subject: CN=3F526C122D88017F4B41E0F49F40F720BD3675E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6f:c5:d0:11:9c:7d:e2:5b:ec:0a:87:7a:0d:
36:e6:f6:ff:76:1a:aa:0c:e6:b9:05:96:0b:e6:7c:
3d:0d:2b:d6:c2:52:1d:6e:31:8d:f3:51:35:27:af:
82:d3:b3:84:67:78:8a:f4:a2:05:ee:75:ee:12:df:
f2:b4:95:a0:9c:12:0c:2f:d8:76:24:94:b4:f3:46:
93:9a:05:e4:d4:dd:d9:0c:01:04:bb:88:77:c2:ef:
a4:26:39:c0:8a:54:96:b0:96:94:5b:f6:bb:19:23:
89:0b:3c:d9:2a:ac:03:ce:57:0b:ed:a5:7a:9e:2c:
65:9f:ad:85:19:db:e8:a4:e9:10:27:1a:4a:da:ac:
31:39:72:99:89:2a:5c:c3:e1:45:11:cf:07:e4:78:
ab:2a:c4:32:7e:d1:8a:98:89:da:38:2d:50:df:a9:
e3:70:3e:35:48:11:12:69:ae:48:08:93:44:ac:64:
80:2d:a6:bd:a8:a4:7d:fb:37:6f:e4:e9:b6:8b:51:
3a:11:c0:73:3e:3f:ba:c8:3d:61:1b:dd:3a:4d:2e:
f8:36:96:c4:79:ce:27:72:2c:39:98:3f:4d:bb:5c:
e3:f7:48:5f:12:02:43:94:2c:44:bf:3a:a7:59:cb:
eb:f5:69:18:98:1c:3c:32:fe:7f:85:de:fd:07:a1:
53:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:52:6C:12:2D:88:01:7F:4B:41:E0:F4:9F:40:F7:20:BD:36:75:E7
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143029.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a17b::/32
Signature Algorithm: sha256WithRSAEncryption
1f:f5:2d:d2:02:be:47:25:d1:02:d9:a4:72:a1:46:c0:10:c0:
02:92:ea:ae:37:2d:96:92:39:a9:a8:35:49:db:b5:2b:25:0b:
2c:a6:36:97:f6:ae:bc:c0:40:ba:8a:01:4f:2f:8d:ce:da:ca:
76:d3:ad:f1:1c:c4:19:d9:e1:ee:8d:2a:eb:7c:b6:84:6f:dd:
67:53:b1:98:2e:3f:26:05:2c:69:46:20:4e:a2:e7:39:c7:a3:
f8:a1:de:99:8a:dd:c0:e8:d2:8e:03:82:d8:64:4d:62:29:16:
24:28:22:8d:45:79:7b:af:21:42:dd:01:6c:53:30:2c:3c:12:
d6:7c:94:6b:c5:51:30:df:ad:0a:e6:65:e3:c1:81:a8:67:81:
07:55:03:8f:12:da:7b:06:a6:43:da:09:fb:fa:b3:60:af:4a:
7b:47:61:2f:72:ad:06:4d:3e:43:7a:4c:52:bd:88:43:fc:ab:
a3:ef:00:54:65:f1:97:f4:dc:43:8b:40:93:21:d6:b2:6e:4c:
07:37:0b:1b:3e:eb:a9:90:15:34:6a:83:38:01:27:c4:23:b9:
c1:72:98:28:07:79:59:b2:cd:ac:45:bd:b3:3a:ad:b2:8a:c3:
89:f9:09:0f:c1:a5:dc:74:b6:59:58:7b:47:40:21:38:a2:14:
7a:ed:3b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:20 2026 by rpki-client