Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143045.roa
File: AS143045.roa (raw, json)
Hash identifier: 84dnSebeJbh9fhz8aQLP6CHG1myrZ+m3hepYjtXKV90=
Subject key identifier: 42:E5:9D:33:C3:4B:17:85:9C:F7:4A:85:FC:D8:0D:F6:96:B5:8C:94
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 51D2A25C7B43BA4AEE7E0100AB4C4FA1A474E7B4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143045.roa
Signing time: Mon 25 May 2026 06:28:49 +0000
ROA not before: Mon 25 May 2026 06:23:49 +0000
ROA not after: Mon 24 May 2027 06:28:49 +0000
asID: 143045
IP address blocks: 240a:a18b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:d2:a2:5c:7b:43:ba:4a:ee:7e:01:00:ab:4c:4f:a1:a4:74:e7:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:49 2026 GMT
Not After : May 24 06:28:49 2027 GMT
Subject: CN=42E59D33C34B17859CF74A85FCD80DF696B58C94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:05:18:8e:f1:76:cb:ba:e9:a1:3c:94:a4:92:
69:4c:df:a6:df:01:9c:78:93:cf:99:41:10:24:35:
82:18:78:3f:da:12:11:1a:b7:be:77:30:fc:87:b2:
99:e5:2a:59:8d:67:20:37:e5:19:4e:d2:39:0c:f6:
93:14:b2:14:8e:f2:da:63:91:98:4b:5f:3c:67:c1:
55:02:22:65:ed:ac:2a:3f:ec:29:cf:8b:b2:6c:39:
45:c6:83:47:ce:cf:07:f2:cf:3d:38:4c:58:2a:76:
bf:8c:b7:a6:82:37:b2:0f:85:4f:13:64:90:0b:fc:
e5:ca:19:c0:cf:88:a5:0a:f8:c1:be:b7:3f:d0:c0:
e7:09:e8:0c:e0:78:8e:47:2c:14:04:f8:07:90:1f:
21:5e:1b:39:13:3f:c8:7c:bb:09:49:e0:cd:6c:8c:
ad:3d:1c:2e:f2:bf:4f:34:ca:78:c0:6c:9f:55:71:
a8:18:6f:a7:ff:91:fb:42:22:5a:1f:ea:4f:3a:51:
c9:b2:e6:f0:91:d3:9c:43:7b:04:f4:f6:0d:8c:20:
62:4b:70:22:43:24:67:70:a3:4d:da:52:41:c0:b8:
50:e1:c5:7f:08:c5:9d:e6:16:98:c3:da:a7:47:45:
28:c3:9b:d4:1e:9d:be:69:2b:67:ed:68:e6:95:6a:
6e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E5:9D:33:C3:4B:17:85:9C:F7:4A:85:FC:D8:0D:F6:96:B5:8C:94
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143045.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a18b::/32
Signature Algorithm: sha256WithRSAEncryption
5f:04:53:67:c3:69:92:6e:e3:c2:fc:24:fb:3d:ca:04:0a:92:
29:73:78:71:d2:e8:df:07:f9:d3:96:e6:31:f9:ca:18:b6:fc:
3c:d4:fe:8a:6c:a7:56:62:f3:33:27:1f:64:54:e5:42:7b:7a:
0e:94:1d:cb:1c:88:af:a9:3b:92:e3:78:db:66:a9:a1:4d:77:
bd:47:38:00:c2:cc:9a:20:0c:de:ff:20:53:2d:dc:de:fb:26:
08:3a:0e:a4:af:2f:7d:17:e3:2e:9c:c9:21:8b:f1:9a:61:e8:
19:02:f3:0d:93:e6:6d:01:c1:03:73:58:a5:0d:3e:31:a2:0e:
ab:48:3b:95:43:1a:88:f5:02:b3:e5:fd:af:12:9f:0e:1b:62:
3c:ef:e4:9f:fe:c1:8a:b3:be:d0:8e:6b:9e:81:8f:aa:12:26:
fc:ab:71:35:c8:f5:53:45:63:52:da:d6:c3:ab:ce:b2:f7:ec:
47:17:79:8c:e4:ed:94:e6:ce:61:6a:a3:b2:ad:9d:4a:34:51:
80:cf:59:70:8a:91:6e:1d:3d:6f:d8:72:e7:8d:23:6a:84:03:
be:47:99:e8:e0:c1:9a:55:f2:e3:e7:0c:18:cd:fe:7e:72:19:
91:a1:55:82:a9:30:89:76:7b:4f:f4:9b:06:b6:f8:55:57:b3:
75:7c:fe:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:58 2026 by rpki-client