Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143117.roa
File: AS143117.roa (raw, json)
Hash identifier: wNE2mc63EwDL6eofDlZyxXwX9Pc1NhJ9HSvmWin/F2A=
Subject key identifier: 93:BF:EE:A4:FB:38:19:3C:1A:4E:B5:F1:BB:A8:99:EB:2F:EA:5B:FF
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6B1D5D04D39AD0C9E3136CA9E4C9F397E2EEE62B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143117.roa
Signing time: Fri 22 May 2026 07:09:00 +0000
ROA not before: Fri 22 May 2026 07:04:00 +0000
ROA not after: Fri 21 May 2027 07:09:00 +0000
asID: 143117
IP address blocks: 240a:a1d3::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:1d:5d:04:d3:9a:d0:c9:e3:13:6c:a9:e4:c9:f3:97:e2:ee:e6:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:04:00 2026 GMT
Not After : May 21 07:09:00 2027 GMT
Subject: CN=93BFEEA4FB38193C1A4EB5F1BBA899EB2FEA5BFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2b:db:e1:a0:24:36:b4:d0:f1:6c:87:64:b2:
63:41:3c:df:f7:d5:bb:1d:74:80:7f:81:cb:e3:80:
1f:14:25:3d:24:43:f0:9b:48:e4:d6:d7:5c:cb:86:
22:ad:c0:ed:89:73:e7:7f:a7:78:ae:b7:16:17:9d:
1a:ca:2a:13:4a:7a:50:70:7c:3d:87:3f:6b:9e:78:
d2:d8:11:7f:98:e8:0d:d3:d9:e3:b1:80:63:a9:ea:
3c:47:d9:1e:71:ee:8f:ab:4d:b3:c0:25:e6:1d:ed:
9c:99:41:97:1a:f2:2c:01:af:69:a4:40:ab:ca:fa:
4e:e4:9b:cd:f8:b3:10:2e:8c:0e:3d:2b:cf:0a:b0:
f3:50:ea:a3:76:a6:81:1e:e3:fd:ca:2e:f4:b0:1d:
79:3e:3b:0f:a8:da:e9:b7:c6:cd:48:1a:5f:47:dc:
85:1e:4d:93:b7:43:43:17:7e:34:54:44:05:f7:fa:
13:cb:ac:14:01:35:98:6f:ee:4c:1e:0a:ff:35:70:
9f:03:de:de:11:bf:78:e5:02:d4:35:81:0d:ee:91:
28:44:82:ee:5c:98:ca:45:aa:52:57:82:b3:16:40:
07:3e:6d:65:2b:e4:ed:ab:e4:b0:a8:4f:dc:bd:b6:
ac:62:f1:ae:d8:e7:fa:fb:d9:33:bc:1f:6c:c3:17:
cf:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:BF:EE:A4:FB:38:19:3C:1A:4E:B5:F1:BB:A8:99:EB:2F:EA:5B:FF
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143117.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a1d3::/32
Signature Algorithm: sha256WithRSAEncryption
3c:fc:99:25:75:f2:b2:74:29:6a:fb:e0:fa:66:41:2d:f9:23:
9b:34:0a:fb:3b:97:f1:28:7a:93:07:6b:05:79:09:06:1c:e7:
03:3d:c0:85:dc:6e:72:1c:f3:c5:8e:06:e3:42:bc:1f:d5:8a:
5a:27:be:f1:8d:96:3c:85:2d:f3:6a:b4:b6:57:be:55:1a:9e:
38:4a:ef:5b:18:d6:58:8a:94:ec:38:fa:22:8e:23:2d:cb:64:
1f:c1:36:bf:03:27:d5:83:91:78:9a:95:b4:e3:2e:c6:0c:82:
9b:61:65:db:3f:2a:8d:57:17:2c:ce:c6:13:5a:f0:6e:10:1a:
f4:ec:68:d6:d2:e0:78:8a:dc:c8:dd:f8:53:ff:66:74:16:52:
a8:bd:5a:04:2b:64:52:d2:d7:60:a1:8f:dd:d8:40:a5:51:e6:
88:31:22:b5:bd:da:a0:e6:f0:35:b1:dc:2d:8f:c7:68:05:f8:
20:ae:be:8b:a2:76:e3:63:7d:3f:f3:5c:42:96:94:c0:17:ae:
89:70:b9:cc:56:8a:8f:87:93:df:e7:9c:8d:fb:3d:cb:92:fc:
88:c3:97:7e:cc:74:97:0b:ff:86:50:7e:c7:75:4a:5d:92:84:
ec:7d:c6:db:bf:5f:78:50:27:fe:14:ce:79:9f:9a:c7:3c:e6:
d1:11:a7:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:32 2026 by rpki-client