Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143126.roa
File: AS143126.roa (raw, json)
Hash identifier: saskTrjyyYhcI94TRMqOonPg7nFTCF983fEucNSFnw4=
Subject key identifier: DF:98:72:CD:80:9A:CA:8E:1F:86:BB:1B:8D:57:92:3D:9A:72:81:87
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5E9CDE04AFFE8EFDCC46CA8A98653F492C183CC9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143126.roa
Signing time: Fri 22 May 2026 06:58:23 +0000
ROA not before: Fri 22 May 2026 06:53:23 +0000
ROA not after: Fri 21 May 2027 06:58:23 +0000
asID: 143126
IP address blocks: 240a:a1dc::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:9c:de:04:af:fe:8e:fd:cc:46:ca:8a:98:65:3f:49:2c:18:3c:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:23 2026 GMT
Not After : May 21 06:58:23 2027 GMT
Subject: CN=DF9872CD809ACA8E1F86BB1B8D57923D9A728187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a2:d5:4d:c1:bc:42:46:97:2a:3e:f8:5a:8d:
6e:36:ad:2c:d9:07:5a:42:4b:76:17:e8:6c:ba:c8:
69:87:ef:fd:d3:28:69:a3:ea:72:28:77:8e:5a:03:
40:8a:e7:ee:da:9e:c0:41:a3:a8:8c:2c:d5:5a:7b:
37:6c:f2:dd:9b:d0:50:a7:42:65:73:34:98:fc:0b:
71:4e:8d:cf:ca:4f:0f:f4:4c:29:f9:63:5b:e1:9f:
82:68:1c:23:22:e9:a9:d9:80:23:4e:e3:3a:9e:53:
c1:04:80:55:98:24:37:68:51:5b:09:d5:08:c3:39:
cd:eb:5d:f5:d1:8c:0c:8f:90:ba:6d:c7:5d:a5:af:
79:0d:95:df:7c:49:1b:a9:5d:0a:a0:f3:fd:12:4f:
11:c6:08:2e:f5:40:44:7f:19:2c:ef:a9:5e:c6:6b:
09:92:5c:f0:7c:2f:23:e0:16:f4:4e:61:81:ad:3c:
77:09:8d:02:66:89:47:1d:30:cd:e2:25:c2:9f:0f:
31:1a:74:77:ab:58:e6:f4:8a:ec:9b:7c:0f:2d:89:
e2:1f:41:6d:46:6d:25:c1:15:51:a6:59:4b:98:2e:
cc:70:b5:b0:f8:7f:51:1e:d5:12:23:8d:5d:8b:e5:
6f:6c:7f:95:d5:73:38:b6:40:2c:15:7a:a7:88:0d:
e3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:98:72:CD:80:9A:CA:8E:1F:86:BB:1B:8D:57:92:3D:9A:72:81:87
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143126.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a1dc::/32
Signature Algorithm: sha256WithRSAEncryption
6b:ab:1f:fd:69:a2:9f:dc:13:46:52:84:b3:a7:52:0f:09:d6:
b0:8a:d4:df:08:ff:9a:31:7e:4e:b2:e9:ff:ed:1a:c0:01:44:
11:f5:6a:2d:37:54:7a:85:12:66:ef:e7:16:b0:fd:16:cc:aa:
26:b8:0c:ea:f8:48:0e:45:a1:77:72:aa:0d:89:58:d3:3b:b2:
c3:9c:3d:4d:52:a1:ec:44:9e:9b:12:a5:f9:53:98:b0:65:ff:
f2:a3:9e:b9:ef:99:b5:a9:83:75:f6:c0:5a:07:29:8a:08:d5:
15:c9:79:81:27:f1:2d:ec:9e:da:d0:3d:5e:4b:e4:87:18:f4:
a2:3f:b0:18:89:4c:96:1b:64:04:74:38:60:0c:a4:9e:07:d0:
62:76:2d:a5:bd:59:a3:1f:7f:85:b6:01:22:2f:3e:ca:58:b3:
21:a3:a1:41:2f:d6:7f:61:cd:4a:6e:b0:38:18:a2:b6:80:1a:
27:d8:8f:17:57:89:02:b7:06:78:79:6d:81:c8:2d:c6:e2:9c:
80:87:af:fb:bc:36:c8:e1:e0:0e:bd:bf:fc:70:be:67:a8:1d:
db:3c:f5:ff:48:ee:48:8f:60:69:52:9a:33:2b:5c:25:28:25:
9b:3e:10:90:75:32:49:86:a3:91:d6:d3:2c:ce:71:97:f2:27:
22:a5:0b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:44 2026 by rpki-client