Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143052.roa
File: AS143052.roa (raw, json)
Hash identifier: 9drPSvCwr7eInwA8V4baeW49HoAIe5DwJpSfzdS6/SE=
Subject key identifier: 12:6A:B5:78:8F:1C:7E:4F:4B:E9:54:82:C2:15:E5:90:3D:76:7D:B4
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 03EC33FEA155B5ED268097BC344E1843CF754D91
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143052.roa
Signing time: Tue 26 May 2026 03:17:10 +0000
ROA not before: Tue 26 May 2026 03:12:10 +0000
ROA not after: Tue 25 May 2027 03:17:10 +0000
asID: 143052
IP address blocks: 240a:a192::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:ec:33:fe:a1:55:b5:ed:26:80:97:bc:34:4e:18:43:cf:75:4d:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:12:10 2026 GMT
Not After : May 25 03:17:10 2027 GMT
Subject: CN=126AB5788F1C7E4F4BE95482C215E5903D767DB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f2:eb:91:cb:d8:6b:3b:92:43:1c:6f:a6:8e:
5a:cd:3a:66:81:c6:fa:e0:11:7d:8b:cc:15:5b:bd:
cd:94:35:0e:45:9a:d2:3a:b4:13:7b:bd:11:eb:ce:
2e:e6:93:a5:4f:c0:47:0d:b6:ec:de:5a:d8:7b:39:
2b:cb:6e:a0:26:b6:d6:c0:b1:4b:ed:48:50:20:99:
3d:0e:5a:30:92:50:06:80:27:a4:31:4e:7c:ed:d8:
f3:8b:a2:66:d2:f3:36:01:8d:ea:8f:64:14:ff:8a:
32:fa:dd:29:74:dc:4c:0c:e6:43:51:52:fc:5c:12:
02:bd:b9:82:21:0b:06:44:de:b0:cb:dc:06:26:fc:
6d:96:8f:ed:11:98:95:00:50:35:ac:2e:a4:d0:27:
17:2c:ba:76:54:61:cb:f8:a7:19:55:23:80:08:44:
68:98:3e:fe:ce:9b:11:26:5f:a0:e0:b4:ea:21:4c:
e8:5b:70:7a:47:e5:53:ed:8a:25:21:98:a9:cd:9a:
5c:ba:f3:c5:12:eb:01:b0:ed:a4:c2:a2:7a:2b:4e:
cb:22:a5:18:f0:96:23:a2:17:0c:63:59:63:ec:7d:
56:67:65:d3:3f:32:3f:83:2f:09:95:bb:ad:ac:59:
89:fc:2b:2b:12:e8:a3:68:af:cb:60:45:ab:be:60:
e4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:6A:B5:78:8F:1C:7E:4F:4B:E9:54:82:C2:15:E5:90:3D:76:7D:B4
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143052.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a192::/32
Signature Algorithm: sha256WithRSAEncryption
4a:ef:9d:4a:32:e3:db:97:5c:03:86:de:72:33:66:82:a7:cc:
78:a6:28:ad:54:39:13:0a:19:0b:32:dc:90:e7:c9:6e:a9:c2:
cd:e9:33:da:ef:d2:86:12:de:44:86:c0:a0:6d:6b:00:53:28:
59:45:d8:93:0e:ca:bf:68:70:47:2c:c3:97:ab:66:8a:46:0e:
7f:03:d3:bc:ab:e1:12:aa:0f:e5:8d:a6:1b:8e:b7:64:5d:30:
02:22:fb:15:2f:3d:d7:d8:52:c0:a0:fb:3c:c8:e3:d1:6d:d6:
f2:9a:a2:83:87:6d:b6:19:6b:a1:ba:8b:af:33:b8:f4:37:13:
db:ce:83:0a:81:55:eb:2a:f9:83:71:4e:de:76:63:ba:4f:cb:
26:91:9e:72:42:2a:d5:3b:df:37:a0:fe:d9:70:3e:4b:ae:e4:
69:ac:7f:51:f1:b1:bd:5e:61:e5:93:91:00:06:4b:e8:19:4b:
90:b2:fb:da:12:20:a1:7b:16:6e:92:ab:0c:b8:57:a1:7b:e2:
11:4f:a2:6b:a9:b0:9f:b8:55:5a:c1:69:32:f2:92:46:dc:4d:
35:ff:82:69:8d:61:f4:58:a4:88:1f:1c:c6:a5:3d:f1:8b:b1:
33:6c:5d:dd:23:82:0a:23:06:d5:23:c7:d6:a0:75:08:6c:4c:
51:8a:2c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:04 2026 by rpki-client