Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143037.roa
File: AS143037.roa (raw, json)
Hash identifier: prY5iwvJYc+yCsoej/c29ygw9ikj0tDl5NAzMgl7y7g=
Subject key identifier: 30:83:7C:1D:29:53:BE:B9:FA:A8:31:3B:D1:02:0A:C9:FA:28:8E:8C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7AC9EF4A88D448A82ACB55006CC01D65A278CC0C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143037.roa
Signing time: Tue 26 May 2026 03:16:53 +0000
ROA not before: Tue 26 May 2026 03:11:53 +0000
ROA not after: Tue 25 May 2027 03:16:53 +0000
asID: 143037
IP address blocks: 240a:a183::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:c9:ef:4a:88:d4:48:a8:2a:cb:55:00:6c:c0:1d:65:a2:78:cc:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:11:53 2026 GMT
Not After : May 25 03:16:53 2027 GMT
Subject: CN=30837C1D2953BEB9FAA8313BD1020AC9FA288E8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:11:25:32:6a:ee:5b:97:7a:2b:98:29:eb:60:
f3:bd:ff:b3:eb:9b:e4:30:89:d2:a6:ee:75:31:d3:
3a:28:14:2f:e7:00:a4:21:67:50:8a:b6:f5:54:be:
10:9b:c6:6e:39:e8:c5:ef:48:f9:eb:ac:0e:dd:2b:
d6:af:ee:dc:0c:6c:a2:58:72:b4:49:ed:88:c6:3c:
4a:c9:4a:d5:df:e9:39:38:1b:ab:08:3f:da:71:ec:
3b:c3:16:53:35:69:22:8c:c1:87:0a:0b:c4:d9:1c:
e6:11:fd:a9:c4:ad:10:bb:12:40:41:a2:de:8d:b1:
a8:05:9b:06:44:4c:f6:f8:cb:65:98:70:25:a2:e3:
70:0e:27:81:8c:18:48:71:23:7c:fd:65:cc:c8:ba:
da:52:55:6a:b5:4f:4e:6e:28:09:5a:44:0e:5c:da:
4d:a7:0c:0e:45:a0:14:ce:e5:f4:6d:a0:da:e3:ac:
21:59:63:43:97:f3:4b:a2:6a:26:cf:6f:f3:9f:17:
6d:27:c3:8a:d8:26:1e:53:44:93:7f:28:ee:b1:03:
a9:f1:69:b5:ad:bd:34:13:8a:de:08:e5:ff:8a:52:
64:40:81:6d:00:ca:89:bc:13:45:b9:db:02:0d:27:
23:c6:0a:a6:e3:08:40:68:1f:7a:af:26:67:69:6c:
ee:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:83:7C:1D:29:53:BE:B9:FA:A8:31:3B:D1:02:0A:C9:FA:28:8E:8C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a183::/32
Signature Algorithm: sha256WithRSAEncryption
0d:73:e1:25:d4:a3:6d:15:a1:1f:88:45:8b:02:35:b8:9d:9c:
d6:29:ea:53:f9:d4:04:f8:25:92:17:02:e3:6a:9e:98:5f:e9:
4f:a3:ea:0b:6e:9f:af:05:0b:5b:14:42:e2:75:f0:22:bb:eb:
9c:de:32:7e:78:fd:37:1b:27:a8:28:f3:2f:e0:1b:21:ab:8a:
5d:87:bb:be:f0:30:39:7c:54:7e:26:53:57:0b:76:40:88:89:
92:7e:d3:c4:37:81:fe:54:e4:b4:f5:72:d7:bd:da:b8:20:0a:
41:8b:dc:51:eb:1d:20:b6:97:85:6f:27:b9:25:0b:67:af:be:
3d:96:c8:4a:dc:4e:d2:f1:5b:50:ed:99:c2:44:77:b1:48:a4:
65:7d:a7:57:17:41:56:96:02:a1:80:bf:14:f6:43:9a:f5:26:
bf:bf:fc:bc:28:d2:ce:d3:53:08:61:6b:8d:30:d9:90:53:60:
77:9e:f7:f1:a8:5f:ac:28:ce:56:4a:40:1b:41:2d:e2:8a:bd:
e9:ef:22:1e:c7:46:9a:d1:83:35:96:32:ca:8c:c4:e8:cf:5c:
68:d8:d2:8f:89:15:2a:86:1f:0f:71:5b:a3:fa:d6:4a:15:96:
f6:e6:93:28:d6:eb:1f:b5:40:b4:92:00:65:fc:9b:98:3a:ba:
f0:6e:6b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:49 2026 by rpki-client