Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143092.roa
File: AS143092.roa (raw, json)
Hash identifier: 02FhvOqU5rq1yyypRj5uiX5fARSpqNHIAMX3Lom5ndk=
Subject key identifier: 3A:06:03:B4:01:D1:7B:FC:F5:A8:3F:4D:DB:4C:BF:8C:9E:11:37:62
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 25AA63A06513BB4451B60423EBF740FF7B3B289C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143092.roa
Signing time: Fri 22 May 2026 06:27:44 +0000
ROA not before: Fri 22 May 2026 06:22:44 +0000
ROA not after: Fri 21 May 2027 06:27:44 +0000
asID: 143092
IP address blocks: 240a:a1ba::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:aa:63:a0:65:13:bb:44:51:b6:04:23:eb:f7:40:ff:7b:3b:28:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:22:44 2026 GMT
Not After : May 21 06:27:44 2027 GMT
Subject: CN=3A0603B401D17BFCF5A83F4DDB4CBF8C9E113762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:61:34:e0:3f:14:5d:1a:a4:b6:2a:27:dc:26:
43:1c:e1:c1:7c:dd:3c:a1:e9:de:73:28:ec:09:d4:
e1:cf:d1:d9:92:22:21:73:d4:07:32:87:62:97:3f:
d2:d5:23:3d:73:e4:fb:4f:5a:dc:23:e3:82:0d:ed:
f2:d6:11:02:df:dd:92:b3:2c:84:00:c5:62:30:8c:
70:17:46:e9:23:b6:0c:f5:86:3b:a3:27:8f:e5:13:
11:b8:98:0e:ee:f7:8b:6d:81:a3:cc:bd:15:26:e2:
2a:cb:d2:5b:06:8d:89:c9:ba:d6:e0:fb:63:d3:31:
8f:3f:f2:17:64:1d:a4:37:ff:c6:23:4b:7f:cf:20:
01:c6:70:3e:d0:a4:00:80:ab:02:49:56:8a:1d:56:
f8:86:5f:49:23:69:e2:c0:ba:e4:86:86:69:aa:c7:
18:5d:18:e6:3e:30:1f:c0:a0:79:8e:7d:6c:23:19:
de:13:35:1f:65:d6:4f:a4:36:2d:33:59:48:13:e3:
0d:73:81:13:1c:0b:2a:80:20:07:1a:72:02:96:4c:
0d:38:38:98:87:a8:1e:dc:41:f2:81:ec:0a:de:e7:
64:85:6c:87:8e:7d:4d:97:7b:03:7e:af:8a:e0:59:
77:f1:0a:6b:e6:10:b5:aa:35:cc:58:b0:46:9b:c9:
c0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:06:03:B4:01:D1:7B:FC:F5:A8:3F:4D:DB:4C:BF:8C:9E:11:37:62
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143092.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a1ba::/32
Signature Algorithm: sha256WithRSAEncryption
49:07:38:e3:5a:3c:12:d9:76:d0:4a:5d:fa:43:d7:2c:c3:8e:
87:4f:b6:d5:1b:f4:35:85:f7:a7:e9:46:33:9d:37:e1:8c:d3:
33:3a:3a:f3:10:5e:ed:16:e2:2c:e5:62:fc:a1:f4:9f:84:d4:
ac:2e:e2:d8:df:bd:e1:1a:d6:de:9f:cb:82:0a:80:65:2a:b9:
c4:51:9e:82:54:c1:89:b4:4c:f9:97:6a:b9:a9:69:dc:37:4b:
77:cc:ed:3f:9d:0e:2e:37:46:eb:35:78:6d:5b:ef:69:04:84:
43:53:8b:31:e4:e3:a9:0b:9e:b4:93:39:f6:3e:6a:3e:f2:68:
29:07:54:4f:de:ab:3e:43:a5:fd:42:67:93:3d:90:f2:60:0c:
fa:e6:02:b5:22:cc:78:dd:27:ca:56:89:a4:18:bb:13:68:91:
fe:71:47:cb:78:cd:32:df:96:e3:75:a9:3c:84:f5:66:b1:62:
86:6d:2e:fb:04:50:2a:a0:e7:20:a4:a6:28:94:94:84:99:d5:
78:ad:8f:37:b7:79:b2:6f:fa:c1:0c:ff:77:8d:55:8e:00:9a:
d5:f5:62:ff:26:24:55:14:e7:7b:fb:04:ea:b8:44:c4:ce:5a:
86:58:94:12:6a:0e:81:92:6a:1f:c4:6f:f9:88:64:5d:c0:95:
d6:4f:a3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:37 2026 by rpki-client