Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143096.roa
File: AS143096.roa (raw, json)
Hash identifier: GWiBypYH4UrusgdxMoKYHClWq8oJfgr5Z+Zz2hqpBAs=
Subject key identifier: B7:05:BE:79:D6:DD:F8:3E:79:B0:E2:2D:F5:CD:73:79:34:95:D5:57
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 299ACECCEEA1BFE1CE21D3B5367A26AE531FADB3
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143096.roa
Signing time: Fri 22 May 2026 07:24:34 +0000
ROA not before: Fri 22 May 2026 07:19:34 +0000
ROA not after: Fri 21 May 2027 07:24:34 +0000
asID: 143096
IP address blocks: 240a:a1be::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:9a:ce:cc:ee:a1:bf:e1:ce:21:d3:b5:36:7a:26:ae:53:1f:ad:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:34 2026 GMT
Not After : May 21 07:24:34 2027 GMT
Subject: CN=B705BE79D6DDF83E79B0E22DF5CD73793495D557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:89:d3:0d:c0:90:c3:04:13:06:59:f0:8d:25:
ac:51:6c:9c:30:ce:78:e1:52:ee:94:a0:9e:78:c8:
ed:82:97:d1:98:90:c3:53:98:1d:2f:97:e0:4c:cb:
35:9e:d1:50:de:56:4f:a3:c6:70:fd:c2:3f:1a:26:
dd:21:aa:13:df:be:f0:b5:f7:b8:33:d6:8f:1d:5d:
7a:43:ff:8f:f1:b8:76:2b:48:f9:ac:16:03:d5:62:
72:7f:b0:f8:e5:85:50:1e:84:45:02:d1:a8:f4:25:
49:79:c2:8b:69:04:d2:5e:1a:a8:3a:ce:1d:8e:10:
a5:6a:c1:aa:f4:71:9d:8f:bc:40:81:93:a0:7f:86:
1e:d6:a4:1c:6f:7d:8f:4e:da:b7:e1:f4:ff:94:10:
fc:a8:37:d1:bb:e5:e9:74:c2:68:ee:80:ed:74:bf:
66:0a:e0:c3:bd:7c:08:0e:b6:9d:bc:dd:9d:53:f8:
e6:02:3f:bc:9a:1f:b8:9d:d5:db:56:94:b9:bf:aa:
58:12:30:c4:c3:1b:80:a9:69:ef:cb:51:c9:29:fc:
21:fd:f0:83:6f:f1:62:e6:b3:28:27:bd:c6:ca:55:
70:18:76:1a:07:00:69:19:1d:90:62:9f:88:5b:39:
30:3e:17:88:33:ad:96:ba:04:5f:62:ab:14:91:42:
96:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:05:BE:79:D6:DD:F8:3E:79:B0:E2:2D:F5:CD:73:79:34:95:D5:57
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143096.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a1be::/32
Signature Algorithm: sha256WithRSAEncryption
57:1e:46:0c:0f:59:73:76:72:f0:2f:45:09:b7:53:59:cd:6a:
14:89:83:b1:08:62:fa:34:e0:82:92:46:d1:23:8b:e2:99:d2:
05:59:83:1f:c2:4c:c7:f7:b5:4b:d6:12:c4:ce:79:e2:e5:f4:
c7:0a:bb:19:3e:86:41:00:7e:84:84:c2:2f:9c:69:31:e0:92:
bc:cf:d3:5c:18:99:94:0b:b2:74:93:04:c6:cc:70:fb:ac:e7:
e5:2b:d8:8f:3f:4d:ad:0e:7f:c1:84:a5:66:8f:69:05:da:c8:
ee:89:89:e4:03:f9:54:2e:c9:b0:3d:40:23:bd:ab:90:bd:cd:
a0:af:18:a8:5d:e9:88:70:c4:ae:e0:ac:ae:f9:77:10:1b:bb:
ed:1b:24:04:e5:88:1d:2e:c3:5d:46:0e:f8:54:ca:24:04:3a:
7b:5a:23:d9:f3:b5:f5:5c:0a:1a:f2:c6:7b:3b:c2:2a:03:86:
c4:31:c4:a3:da:0d:5e:cf:fe:c1:f1:aa:86:59:02:6e:45:f3:
b6:b2:2c:35:f6:97:3e:bf:db:11:e9:bf:a9:7d:72:8a:11:b8:
90:44:a9:45:66:55:7b:ff:de:7f:54:11:39:a3:b3:1c:69:e2:
71:19:39:fb:c1:1d:49:d7:76:7d:c8:4e:43:b0:0a:7d:bb:1f:
e9:b8:37:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:18 2026 by rpki-client