Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143033.roa
File: AS143033.roa (raw, json)
Hash identifier: xU2Ul9C2Kweo72Z3cwsNH20YjcBxuDemT2YrzHsvojs=
Subject key identifier: 85:76:7A:B2:DB:44:ED:2D:8B:A9:5C:99:5A:FA:18:D5:28:7D:84:0E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 38C12007A524E29F7C64B406C96D189971FB0CB9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143033.roa
Signing time: Fri 22 May 2026 01:50:34 +0000
ROA not before: Fri 22 May 2026 01:45:34 +0000
ROA not after: Fri 21 May 2027 01:50:34 +0000
asID: 143033
IP address blocks: 240a:a17f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:c1:20:07:a5:24:e2:9f:7c:64:b4:06:c9:6d:18:99:71:fb:0c:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:34 2026 GMT
Not After : May 21 01:50:34 2027 GMT
Subject: CN=85767AB2DB44ED2D8BA95C995AFA18D5287D840E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cf:d6:e8:05:78:11:8b:fa:fd:e5:29:d0:d5:
b4:52:10:54:19:52:d3:c1:25:d2:7e:47:4a:c4:ad:
6b:b9:eb:ef:14:7a:3f:cf:4e:bc:84:4d:a0:4b:d7:
58:a4:59:4a:14:b7:ca:b2:14:c6:9d:cb:ac:e7:80:
a6:a1:47:7a:14:0b:2c:67:c1:fd:ef:1a:91:ee:d4:
8c:ab:95:1f:8d:a3:7f:db:f0:54:3b:9e:e0:42:61:
d5:ae:e8:5a:bc:83:d9:13:45:1f:39:9c:36:e9:36:
39:de:c5:27:5d:35:d7:66:8b:37:ff:05:b1:91:df:
dc:86:f0:5c:67:1a:f6:ad:f7:07:01:0f:8b:9e:f8:
82:8b:85:d1:67:02:d4:e3:e7:1d:7f:8e:48:3f:19:
ab:f0:f6:95:d2:3d:10:f0:90:1a:27:3a:4e:94:cc:
e8:96:60:e0:6d:2c:5c:88:13:29:fb:84:20:2b:a2:
57:2d:f1:20:92:2b:a0:4c:59:ff:6d:0b:74:93:e1:
0f:06:0e:c7:f5:07:7a:c4:cb:d2:bf:3d:89:51:94:
74:01:23:4b:08:67:93:42:96:78:fa:ea:a8:fc:d7:
a1:5d:ae:d4:43:73:6b:67:01:9e:92:27:79:ea:35:
f9:d6:14:76:41:0f:74:6b:bc:94:be:6a:d2:2c:68:
4d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:76:7A:B2:DB:44:ED:2D:8B:A9:5C:99:5A:FA:18:D5:28:7D:84:0E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a17f::/32
Signature Algorithm: sha256WithRSAEncryption
07:11:dc:39:02:bb:b3:38:dd:48:c1:3f:d6:6d:b0:32:91:62:
9c:22:b6:f4:e0:cb:7c:42:26:ce:30:e6:4c:d9:84:bc:55:f0:
49:d6:f6:47:d4:d2:f1:ec:45:28:10:ec:85:8b:e0:84:6d:a0:
11:99:55:16:c2:c6:19:8a:e2:e8:e7:6f:a6:e5:e0:35:5e:be:
31:88:06:37:48:2c:a2:af:6a:f1:98:0b:10:58:bd:f0:ce:b3:
ef:26:8d:d6:d5:aa:16:0b:3e:52:fc:21:b2:50:34:78:77:aa:
fc:71:9d:77:2c:03:55:aa:68:0b:d3:90:90:85:f9:5b:d9:4c:
55:cd:99:58:53:29:06:4e:2a:1c:67:d1:79:3a:9e:3e:02:05:
b0:43:b9:cb:96:6c:e9:c9:b5:9a:84:91:80:bb:8c:33:ec:71:
63:dc:39:c3:5d:3c:0b:ec:20:95:03:cd:e4:1b:6a:04:0a:97:
d6:1b:06:77:06:e4:8d:44:af:ae:5c:f7:ff:7e:2d:e4:df:e2:
3d:ab:15:19:34:f5:39:2f:ec:8e:49:41:25:79:5c:f7:a1:33:
4f:9e:84:8a:98:0b:a7:b7:ab:1e:50:fc:18:be:62:45:ee:91:
1b:76:56:12:a4:9e:50:06:86:1c:67:53:27:f4:1f:c0:66:ca:
a6:e5:1c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:46 2026 by rpki-client