Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143057.roa
File: AS143057.roa (raw, json)
Hash identifier: /E9UvWQb5mOTAZDGzkR/oYxxk9G+V+KNlUjT0atMVaU=
Subject key identifier: 9A:CA:65:92:A9:B0:C7:4F:D6:0C:84:A0:53:8E:09:A2:22:AC:A2:3A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 098AC32A9666B768BBB084E70B0B84D3B8207EF7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143057.roa
Signing time: Tue 26 May 2026 06:12:37 +0000
ROA not before: Tue 26 May 2026 06:07:37 +0000
ROA not after: Tue 25 May 2027 06:12:37 +0000
asID: 143057
IP address blocks: 240a:a197::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:8a:c3:2a:96:66:b7:68:bb:b0:84:e7:0b:0b:84:d3:b8:20:7e:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:07:37 2026 GMT
Not After : May 25 06:12:37 2027 GMT
Subject: CN=9ACA6592A9B0C74FD60C84A0538E09A222ACA23A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d7:28:1d:10:ee:c5:17:41:8c:c4:c1:ac:76:
5d:6d:de:49:31:45:ea:2e:b1:fa:ce:fb:50:58:6a:
60:85:87:16:92:5d:14:98:24:f6:7a:0d:be:47:1b:
91:7e:9b:62:1c:ef:f1:bd:c8:24:46:06:ab:04:42:
83:42:2a:22:ce:8c:53:c3:ca:c0:fa:a2:ee:4a:a3:
af:4b:5a:1c:f2:71:a0:a2:68:82:7c:b0:9e:73:1b:
01:b2:03:bc:62:ae:5c:f6:8d:57:78:a2:9b:58:b7:
89:40:01:6b:10:71:81:0e:d3:c7:8d:91:cd:d3:fd:
4d:c0:f2:7d:36:12:aa:d8:90:e6:89:05:16:d0:b5:
0d:1c:55:70:f0:85:b7:bb:65:f5:8e:da:47:25:69:
90:3d:c6:43:d6:df:31:30:3a:ac:f5:33:cb:48:4c:
e0:cb:2a:e1:4f:b0:c0:a2:df:8e:10:19:78:4b:74:
02:18:0d:df:53:45:f6:4f:4b:c0:61:5e:15:7b:33:
14:e3:b6:fc:68:e4:f6:2c:01:1a:88:8d:f7:b8:8b:
cb:c3:cb:c3:90:db:f4:51:73:51:d5:ae:72:68:49:
fd:2a:78:d2:d7:9e:09:07:e8:70:92:94:66:4d:20:
e9:b0:1a:b1:24:95:11:9d:4f:54:ec:29:1d:0f:09:
ff:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:CA:65:92:A9:B0:C7:4F:D6:0C:84:A0:53:8E:09:A2:22:AC:A2:3A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143057.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a197::/32
Signature Algorithm: sha256WithRSAEncryption
93:df:cb:f7:c9:6b:c7:05:33:24:9a:9b:38:3b:40:e3:e7:a2:
f8:a6:ef:50:ec:b1:67:9e:7d:3d:c9:30:93:41:ae:3b:e6:e3:
2f:57:78:33:89:b0:b8:89:fb:68:2d:54:bb:47:9d:02:3c:6d:
ff:4c:f0:8c:a0:71:83:76:2f:41:21:85:1b:e4:29:08:e3:a6:
e6:98:d9:78:1f:59:3c:41:bc:aa:88:af:90:b1:40:15:3e:66:
8b:07:10:47:b7:54:81:b5:8e:03:6b:66:47:97:78:12:7c:fc:
94:0e:38:4f:74:96:87:e7:32:fc:ba:98:85:38:1c:d8:73:2f:
b5:fd:84:7a:68:81:24:83:80:14:51:7b:9a:73:27:b1:f5:fd:
c9:6c:79:a8:58:ab:c7:a4:73:f0:99:b4:79:23:d0:f8:3d:5d:
55:1c:e8:45:59:f6:7f:a0:9b:d7:71:71:02:ea:dd:52:bb:f8:
3c:ab:53:4a:ca:fc:63:5c:05:f2:9e:74:cd:05:8d:15:ae:08:
31:4e:8f:45:8f:97:d9:b1:e2:71:4f:29:6a:aa:df:62:d7:b3:
ef:7c:ce:00:0b:d1:81:5e:ae:16:bf:9d:95:13:4b:b0:f1:f8:
70:04:fc:f4:1a:23:da:24:73:de:24:29:4c:cd:60:d8:c5:09:
b9:d7:07:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:30 2026 by rpki-client