Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143138.roa
File: AS143138.roa (raw, json)
Hash identifier: gkwp38pLnKRTuZ1rCE1oiEVmKwbVlyQ+PWPa7RLdC6Q=
Subject key identifier: CA:D1:F8:2E:2C:8F:DD:E2:43:74:40:7B:09:99:E5:9B:2C:0B:04:DE
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4CA23BF505C3465805B3F79E7BBB5D406AE70C1B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143138.roa
Signing time: Fri 22 May 2026 02:48:08 +0000
ROA not before: Fri 22 May 2026 02:43:08 +0000
ROA not after: Fri 21 May 2027 02:48:08 +0000
asID: 143138
IP address blocks: 240a:a1e8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:a2:3b:f5:05:c3:46:58:05:b3:f7:9e:7b:bb:5d:40:6a:e7:0c:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:43:08 2026 GMT
Not After : May 21 02:48:08 2027 GMT
Subject: CN=CAD1F82E2C8FDDE24374407B0999E59B2C0B04DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0c:68:1c:3c:38:b1:46:3a:b0:08:14:97:17:
82:e4:42:e6:6c:18:d8:7f:9a:df:46:1c:8e:14:5c:
83:17:61:04:db:ac:2f:d0:b8:c0:19:7e:6e:3e:c0:
1b:e1:62:29:57:d9:74:41:a2:fc:5c:14:fe:74:38:
34:ac:ea:f8:87:0b:8d:0d:ff:8c:a7:0d:b1:f3:b7:
54:1b:2f:f7:04:85:ad:ef:c2:cc:3f:9d:9d:99:8a:
ed:b4:e3:2d:46:65:8c:23:e2:fa:aa:54:a2:e3:20:
f9:08:a6:11:62:bb:68:12:2e:8e:61:7e:67:fe:a3:
61:89:de:89:2d:4c:a8:bd:74:f0:e8:f0:18:7d:e1:
d5:1b:bd:4d:e0:10:6b:51:dd:5e:69:7f:ab:9f:be:
75:9c:c5:78:c9:21:9c:5a:95:57:f5:8b:c8:88:02:
8b:2e:ef:1e:45:68:8c:c5:64:80:4b:a8:a2:a3:d0:
21:1c:26:b4:27:6c:d6:c2:32:43:6e:c9:ba:f2:1f:
fc:9f:b5:bc:fd:44:08:a6:ad:8e:48:50:15:ed:3c:
61:17:aa:ed:f3:db:83:be:07:22:ff:6e:6e:91:f8:
0f:fc:b5:45:d8:31:8d:ab:6c:17:80:29:b5:df:8a:
34:90:ba:93:85:f9:6c:cb:06:3c:36:ee:b0:24:d5:
c7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D1:F8:2E:2C:8F:DD:E2:43:74:40:7B:09:99:E5:9B:2C:0B:04:DE
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a1e8::/32
Signature Algorithm: sha256WithRSAEncryption
34:56:7c:6c:18:9b:25:d8:8b:5c:6a:50:d9:e7:b3:b9:bc:5b:
d0:8e:c2:d4:9d:ad:81:80:41:34:a2:fc:8c:41:c6:ee:09:04:
9d:80:6d:89:a0:94:6b:98:db:9b:3d:c3:59:c9:10:5c:9b:7a:
78:ad:38:e3:c0:c6:42:59:3d:70:f2:1e:df:dd:a1:b3:a7:56:
99:1a:77:86:80:df:25:67:1b:b0:9e:8b:28:a4:c4:b1:90:26:
12:83:71:ef:9a:02:d2:cb:b5:0a:59:80:d6:54:86:11:67:83:
66:1b:f3:f3:84:1f:40:cd:81:db:57:26:8c:d4:d4:18:bf:06:
d7:11:ee:cc:be:17:32:fe:1f:61:1e:99:c3:cc:5e:f0:3f:10:
7e:4e:bc:96:cc:f5:f3:4d:ee:a5:4e:6f:32:f8:27:c5:8c:7a:
18:df:ad:2d:3c:00:8a:ac:30:4d:f0:f5:e6:c6:05:f3:cd:9a:
aa:73:b0:74:18:7c:5a:35:79:6d:40:c4:45:89:93:ec:5c:40:
12:fe:40:fa:39:02:9c:73:eb:2f:b8:f8:e9:eb:61:37:6a:03:
12:f3:58:e5:27:cd:4b:5f:0b:e1:24:e3:3f:88:93:68:26:3b:
2a:8b:bd:8b:84:76:e1:a5:e6:cb:34:57:de:d9:3d:a0:a8:b0:
f4:97:b5:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:27 2026 by rpki-client