Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143137.roa
File: AS143137.roa (raw, json)
Hash identifier: ojnPn3z2/jwbnbCZmighJcjS4bI4sKmlqG55u/Rt89Q=
Subject key identifier: B4:B8:C5:23:F0:78:01:EC:4F:1D:9E:DE:FA:70:8C:3A:B2:4A:DE:9F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2D3B2EB8D48AA81030E9F56ECB33C0435F8C8555
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143137.roa
Signing time: Fri 22 May 2026 06:05:35 +0000
ROA not before: Fri 22 May 2026 06:00:35 +0000
ROA not after: Fri 21 May 2027 06:05:35 +0000
asID: 143137
IP address blocks: 240a:a1e7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:3b:2e:b8:d4:8a:a8:10:30:e9:f5:6e:cb:33:c0:43:5f:8c:85:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:35 2026 GMT
Not After : May 21 06:05:35 2027 GMT
Subject: CN=B4B8C523F07801EC4F1D9EDEFA708C3AB24ADE9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7d:14:cc:b1:20:67:84:8d:5f:1b:ee:c7:3e:
51:18:7c:0f:74:8f:f0:68:56:8d:96:6f:d1:34:81:
0d:22:89:03:f9:a0:b1:12:7f:95:bb:51:aa:33:29:
b6:11:b7:97:80:2e:73:76:ab:16:45:1b:47:73:05:
6d:61:ad:5b:8f:a0:d0:53:4d:5d:c1:33:16:7f:a5:
90:85:f3:f5:73:90:23:a5:28:74:16:2c:05:e4:e4:
88:78:90:fe:ff:36:d9:41:a3:e6:53:84:ff:35:ba:
d7:5a:06:e4:25:a5:a3:31:85:1e:b9:86:06:0d:94:
6b:30:66:cd:a0:33:3f:a4:f1:74:f9:83:a0:c2:6d:
9d:dc:00:13:1e:97:9b:ed:bf:68:71:f0:57:1d:42:
78:a7:4d:5c:36:3b:7c:d1:3b:30:46:bb:69:fe:d5:
d1:e9:47:cc:1a:e8:2e:de:3c:29:a9:86:ba:22:72:
13:64:81:9b:9b:0a:30:9d:55:b3:43:a8:f3:f1:f3:
b4:c9:53:1f:a1:8f:4f:91:e4:3a:38:8d:43:10:a2:
0e:03:d9:32:cf:ae:f7:45:81:6e:0f:b0:49:64:50:
2f:a5:14:98:39:03:79:7a:98:b8:09:4e:4d:55:27:
3f:26:1e:b8:c4:26:16:8a:90:70:b2:b7:6b:1a:70:
b5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B8:C5:23:F0:78:01:EC:4F:1D:9E:DE:FA:70:8C:3A:B2:4A:DE:9F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a1e7::/32
Signature Algorithm: sha256WithRSAEncryption
a0:75:d0:9d:5a:fb:43:34:98:b9:a5:12:a8:5e:88:1e:b9:9f:
e4:8b:23:d7:b6:38:b0:30:26:cb:e4:8d:aa:b1:6e:80:ba:ba:
bd:a6:cc:df:6d:61:fe:9a:1e:02:03:64:90:26:72:bf:de:f8:
ab:45:67:d6:f0:61:6d:ce:bb:49:37:cd:07:cb:46:7d:5e:6f:
ba:0f:67:5b:61:d2:27:58:02:98:a3:54:33:0a:f8:2b:1a:3b:
04:1c:68:37:ab:d8:cf:60:38:30:1a:58:c1:c9:20:fb:d1:10:
8c:55:4d:96:c1:04:c1:00:20:6b:66:82:1d:0a:50:fb:09:29:
2c:ec:f7:66:74:d3:82:9c:76:24:6d:f9:a8:ad:5c:bf:36:e8:
c4:f7:6e:f4:0f:c9:1c:bb:81:f6:f6:66:bd:46:f2:c0:98:c2:
7b:e9:51:66:d0:24:13:58:3d:88:7b:0b:e7:fa:41:5d:89:38:
12:b1:4f:73:42:72:3e:58:35:46:8a:d2:92:3f:a0:25:12:35:
97:d0:6e:76:ac:42:2b:de:61:f3:81:b3:11:04:98:32:1c:df:
8f:af:be:eb:8d:42:37:29:70:59:b9:91:e2:4c:15:e4:f3:fe:
03:e4:c5:1f:72:c4:c9:4c:10:8f:d7:46:52:e8:51:d4:ad:56:
b7:c2:f1:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:10 2026 by rpki-client