Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143129.roa
File: AS143129.roa (raw, json)
Hash identifier: 4pU0aUCqOOsy6QwxcH2waPB2GjTzaF8yq0Kw3MnNDyQ=
Subject key identifier: 05:ED:C1:EA:B3:0C:73:3A:5F:38:37:FC:79:3D:A0:AA:80:25:A6:A9
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4E6187CA776A4020F7AB97C0E6BD4108CBE6C9A0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143129.roa
Signing time: Tue 26 May 2026 08:52:51 +0000
ROA not before: Tue 26 May 2026 08:47:51 +0000
ROA not after: Tue 25 May 2027 08:52:51 +0000
asID: 143129
IP address blocks: 240a:a1df::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:61:87:ca:77:6a:40:20:f7:ab:97:c0:e6:bd:41:08:cb:e6:c9:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 08:47:51 2026 GMT
Not After : May 25 08:52:51 2027 GMT
Subject: CN=05EDC1EAB30C733A5F3837FC793DA0AA8025A6A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9b:15:36:f5:59:89:0b:b5:a0:00:1d:22:1c:
6b:ab:07:9e:2f:5b:f2:b2:77:2b:a9:75:ad:e9:9b:
f8:a2:c5:13:ef:17:c0:8d:9c:db:3a:5a:a9:25:36:
37:e8:1b:50:f2:4e:84:43:6d:7a:1e:6d:87:94:a9:
27:b9:ed:36:8c:63:48:43:c8:8d:f7:8b:6e:07:76:
80:e2:95:44:b7:a1:bd:1b:d1:ab:46:16:fa:43:ee:
a9:4e:da:c0:a6:84:b2:97:b8:93:0d:82:e4:06:da:
71:03:d4:52:4e:20:bc:5a:ca:73:26:8f:bd:1f:16:
c9:4b:11:4f:58:c6:8a:ce:0d:ea:26:50:e6:05:ea:
a1:11:b3:53:46:ec:e9:6b:c5:2d:2e:0e:46:64:33:
c3:82:e7:37:a6:5e:ef:8a:9c:3b:e7:be:69:1b:01:
0f:5d:bc:f5:10:fa:09:cc:71:b3:13:d7:96:82:1e:
4c:e9:4f:50:a0:91:de:13:21:b2:57:19:c7:6c:32:
8f:c0:1b:ba:b3:9b:99:82:18:57:d2:cc:e7:87:dd:
cf:da:6e:71:86:b2:0f:e1:9e:b1:e2:8a:dc:ae:97:
7f:e5:1f:91:20:7a:71:85:1c:74:e3:85:29:de:87:
08:0f:04:b3:8d:5c:fa:d6:86:d9:bb:c4:64:e1:a7:
b3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:ED:C1:EA:B3:0C:73:3A:5F:38:37:FC:79:3D:A0:AA:80:25:A6:A9
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143129.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a1df::/32
Signature Algorithm: sha256WithRSAEncryption
25:a9:8c:4e:1c:74:b8:de:92:48:ba:25:f8:e7:a1:47:68:ef:
1f:17:d2:d3:74:34:47:05:0f:2c:c6:82:e1:d0:5c:0f:f3:2f:
a8:e8:bb:50:3b:fd:1d:7f:b1:05:32:bb:a5:94:43:3a:0f:57:
be:10:e8:3a:3d:cb:dc:1a:74:0f:d4:b6:f6:f6:8f:ad:d5:0e:
72:73:7a:fe:24:92:15:cd:e1:11:6a:a2:03:8f:b9:ae:29:64:
06:e6:3b:42:af:71:fd:21:58:ac:6a:f4:25:4e:ca:38:39:77:
8f:22:fe:0d:da:f9:e0:c6:aa:a6:b2:09:f3:91:2b:77:8b:42:
c9:98:8c:51:b7:36:bd:71:eb:45:8a:72:d3:c2:35:da:4f:bb:
d8:35:d6:32:8a:54:3b:86:76:66:ef:bd:8b:f0:37:37:1f:a4:
dd:92:e9:e3:fa:d4:38:7c:94:0a:54:58:38:88:d4:4e:f4:72:
3a:82:91:e2:58:21:94:df:4b:30:88:76:3d:81:ac:37:6e:b3:
54:92:88:a0:aa:f0:ee:fc:c3:c0:e5:f7:96:cd:5e:04:27:6c:
6e:e0:21:a3:7b:0b:ba:bf:86:c3:48:4b:37:4d:48:da:1b:e7:
2d:f3:21:b5:f1:c9:d9:43:e1:8b:32:e6:3b:c6:21:e1:f7:87:
f1:7d:e9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:18 2026 by rpki-client