Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143042.roa
File: AS143042.roa (raw, json)
Hash identifier: amHo5QZshr6Ok97TVJ8jppaLMxLLPfVBkXrvYb9hVvM=
Subject key identifier: BE:3B:DC:92:A1:1A:9D:BB:5F:50:DA:CF:CA:EB:E9:0D:07:D1:04:48
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 725A9C0CA43184C67DF74A0A65EF76CEDFE939C1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143042.roa
Signing time: Mon 25 May 2026 06:28:26 +0000
ROA not before: Mon 25 May 2026 06:23:26 +0000
ROA not after: Mon 24 May 2027 06:28:26 +0000
asID: 143042
IP address blocks: 240a:a188::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:5a:9c:0c:a4:31:84:c6:7d:f7:4a:0a:65:ef:76:ce:df:e9:39:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:26 2026 GMT
Not After : May 24 06:28:26 2027 GMT
Subject: CN=BE3BDC92A11A9DBB5F50DACFCAEBE90D07D10448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3d:a8:99:a5:9a:25:c0:26:9e:66:47:70:ee:
36:3e:9d:0e:70:f8:d4:44:eb:0a:cf:39:d7:6f:81:
94:9a:b9:04:8a:22:6f:2c:da:1a:4d:41:28:52:58:
19:e3:87:3b:54:05:0c:8e:5f:bf:ae:b5:be:ce:2a:
6d:00:4d:79:1a:cc:4e:ce:33:41:e9:76:0a:7f:41:
b2:5e:ea:f4:d1:7d:6b:6d:11:d5:04:93:98:dc:70:
ad:d2:7f:86:b1:1d:f4:3a:32:05:78:e5:4a:b5:cd:
7d:d2:c3:fb:f8:e9:d5:f7:8b:dd:22:f0:e6:c8:1b:
b5:0c:97:7e:03:6a:c9:1f:3c:49:0c:2d:f4:a6:ef:
74:0b:f0:5d:b8:94:94:cb:31:74:36:c0:25:30:cf:
15:b3:0d:de:d8:d4:7c:e2:42:49:cd:5b:8e:d3:70:
1e:ad:31:6c:cc:07:2c:44:9c:d6:1f:20:b2:b7:4c:
3f:c2:24:00:92:a2:44:41:6b:d1:e7:ab:6c:c0:41:
c7:e3:72:5b:ca:23:1a:8f:02:98:ed:90:44:36:be:
fe:d5:00:32:9f:a0:d8:5d:c3:f8:53:55:ac:14:36:
44:00:3b:cc:8b:6a:d3:df:81:ef:9c:69:75:4d:de:
16:2a:20:4e:1d:48:3f:4a:44:df:35:c8:a9:f4:43:
0b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:3B:DC:92:A1:1A:9D:BB:5F:50:DA:CF:CA:EB:E9:0D:07:D1:04:48
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143042.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a188::/32
Signature Algorithm: sha256WithRSAEncryption
b9:fb:13:4c:fe:e3:07:33:bd:b5:56:8b:f9:75:78:6a:7f:49:
99:80:2e:10:48:56:dd:3c:eb:6a:19:4c:e1:94:54:8c:ff:85:
3f:42:2f:dc:ee:b3:fd:1b:86:b7:94:7f:a7:7d:80:0a:6a:85:
d5:f1:c8:98:84:1d:a2:04:6f:cc:14:f8:c2:ab:5f:92:93:98:
21:21:16:39:a7:e0:67:12:50:a0:71:94:0f:c0:49:bd:bb:d8:
23:11:ec:be:35:5e:2a:64:f8:ce:e0:b0:dd:43:75:9d:b2:12:
84:b8:83:0f:43:8b:73:8a:8b:b0:e7:e8:7e:b3:0b:88:36:6a:
23:4e:a8:f3:d7:16:42:6d:c8:0c:18:b2:57:bf:df:00:ee:51:
ee:d6:0a:c8:a4:dc:7d:ab:97:26:76:4b:62:b2:37:7d:aa:42:
33:62:ef:10:6f:56:0d:61:eb:62:25:3e:68:a4:c1:f4:99:d4:
07:2d:47:47:1a:d8:82:c5:57:84:ed:e2:f4:ca:98:06:7a:2d:
35:fe:23:9a:83:6a:a2:c0:cc:69:61:f1:b8:64:c3:b8:30:b1:
50:ab:55:ec:7b:3e:02:cc:a5:33:bc:92:cd:4d:de:3d:d6:0f:
80:23:5d:0c:58:3e:cd:d4:e5:18:4c:3c:44:35:3f:78:cb:64:
e9:7c:f6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:21 2026 by rpki-client