Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143035.roa
File: AS143035.roa (raw, json)
Hash identifier: +sniBWS3Sy2yrnu8B8E+OVLzc5Wjits368Ctuq/N9Co=
Subject key identifier: 28:41:A6:4B:CF:0A:67:99:2A:F1:FA:9E:DC:FC:9F:E9:13:C5:9D:57
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5B853E0A7E3A2AA5113401EFAD609EB6551E5D90
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143035.roa
Signing time: Fri 22 May 2026 07:41:18 +0000
ROA not before: Fri 22 May 2026 07:36:18 +0000
ROA not after: Fri 21 May 2027 07:41:18 +0000
asID: 143035
IP address blocks: 240a:a181::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:85:3e:0a:7e:3a:2a:a5:11:34:01:ef:ad:60:9e:b6:55:1e:5d:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:36:18 2026 GMT
Not After : May 21 07:41:18 2027 GMT
Subject: CN=2841A64BCF0A67992AF1FA9EDCFC9FE913C59D57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:ec:70:5d:7e:e6:8b:76:54:02:be:93:38:5c:
32:ff:43:12:8e:0c:e5:c6:e2:23:06:c8:78:11:4e:
22:1b:70:bb:e8:80:e6:e4:4a:43:6d:6d:33:aa:22:
fa:51:92:0c:a7:a1:4b:f9:26:e0:be:13:5b:ce:b1:
47:fd:4f:c3:cf:c4:91:c7:4f:97:15:03:a1:44:ff:
39:22:23:32:24:13:d0:0a:e2:2d:17:34:51:e6:c3:
48:1e:96:ff:5f:81:b5:9b:13:c7:86:62:e9:69:cb:
cc:d7:38:23:dd:1c:3d:80:c9:f4:75:e8:bf:e5:78:
fc:71:41:cd:3e:3d:7d:e1:60:15:c1:6c:9d:4b:62:
b8:91:7d:e8:7b:f2:d4:cc:0e:e0:f1:d9:e9:9a:16:
0a:b5:4b:b8:13:cb:83:48:05:2c:30:0c:6d:17:1d:
23:78:20:41:82:7e:e8:f1:aa:e0:c9:62:05:d6:80:
77:25:2d:6e:3d:79:62:64:35:27:83:b9:52:39:ac:
06:c6:5e:5f:2b:9d:e3:6a:3b:b5:3f:63:9c:76:ea:
f7:58:a8:53:28:02:05:be:02:25:7c:7f:6f:41:c7:
c3:e8:84:95:20:05:db:60:87:33:c6:13:06:50:20:
9a:2e:fc:cd:ec:b1:ac:ea:2b:18:dc:c8:89:6c:7c:
f7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:41:A6:4B:CF:0A:67:99:2A:F1:FA:9E:DC:FC:9F:E9:13:C5:9D:57
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a181::/32
Signature Algorithm: sha256WithRSAEncryption
43:0f:56:fa:d9:c1:60:9a:60:51:bd:98:d2:02:5c:d6:83:3c:
d4:07:a9:93:7f:5f:63:9c:a3:a4:eb:4c:a4:4f:e0:36:75:5f:
f1:f6:b6:56:99:4b:68:98:2c:e7:b3:98:7d:98:f2:75:cf:32:
7d:52:eb:a4:4d:54:51:0d:84:35:85:12:fa:56:e0:81:b5:76:
a2:ed:05:44:96:ff:81:0f:90:0b:7b:7e:5c:bf:ae:49:c7:5e:
f4:77:9c:11:11:2c:f7:3a:1e:d1:ea:d7:53:87:aa:d1:a9:4f:
09:71:08:92:44:dd:d7:38:41:8a:f4:cf:6e:68:72:64:5d:2b:
2e:df:3e:13:79:1c:19:56:cb:9b:87:f2:9e:4e:d1:42:21:59:
8e:fc:39:d3:81:93:5b:94:43:53:19:0e:6c:d6:d2:60:c9:7a:
b0:83:27:50:33:42:58:48:a3:95:d5:cf:39:7f:96:62:73:f9:
5b:82:33:61:8a:29:a5:5d:58:49:16:65:b2:ee:2b:ee:b0:fa:
33:02:01:f9:d4:ea:0f:2c:26:f6:fa:07:da:6f:bf:fc:4b:d5:
9d:9b:7b:50:bf:7c:e9:f8:34:92:10:c3:bb:d0:4e:80:a1:5d:
fd:ec:84:d4:8d:99:a3:28:1a:17:dd:ad:0a:07:55:1d:bc:a2:
53:f0:e8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:48 2026 by rpki-client