Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143151.roa
File: AS143151.roa (raw, json)
Hash identifier: YGEcmSer6hOZ+t3XN2FYoaDhfNyZH1MQRxZRyR97PsQ=
Subject key identifier: 22:94:03:27:FB:73:74:23:18:FE:90:D7:5F:D7:D4:75:C6:D7:31:EF
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2E0649DD1E059FAD7E04C6DBD9DA7FCEA324C8E2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143151.roa
Signing time: Fri 22 May 2026 06:27:57 +0000
ROA not before: Fri 22 May 2026 06:22:57 +0000
ROA not after: Fri 21 May 2027 06:27:57 +0000
asID: 143151
IP address blocks: 240a:a1f5::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:06:49:dd:1e:05:9f:ad:7e:04:c6:db:d9:da:7f:ce:a3:24:c8:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:22:57 2026 GMT
Not After : May 21 06:27:57 2027 GMT
Subject: CN=22940327FB73742318FE90D75FD7D475C6D731EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:13:87:70:1b:4e:1e:96:ab:f3:b5:b3:6b:f4:
41:86:c2:b6:59:65:bb:00:36:6c:f8:c0:e4:a4:7b:
0f:07:ba:63:4a:b7:0b:3c:4d:01:79:21:cf:b5:b4:
79:32:2c:54:d2:77:37:d5:de:96:cc:34:f9:05:c5:
c9:d9:9e:2d:8f:8d:8e:9a:19:98:a8:07:8d:60:4a:
e1:f9:31:64:25:7d:67:d0:e0:0e:3f:9d:04:7e:5c:
b4:16:4e:03:a0:63:0c:6f:68:43:79:a8:74:9a:02:
58:42:9f:ee:29:64:d2:5e:17:0f:45:86:dd:cb:f7:
75:16:4b:6d:ee:00:b4:7c:57:19:d3:2e:68:f9:da:
13:6e:49:1e:19:86:36:2f:07:5b:fd:a5:75:fd:ff:
2d:e3:d9:4d:04:38:45:64:51:c9:24:96:f4:46:27:
91:4c:23:2a:33:3a:6b:c7:ae:e8:01:76:af:de:cf:
ea:e9:ab:20:77:e1:7d:b4:34:78:5f:48:40:fe:15:
c1:ce:37:ae:7a:90:82:74:fb:e8:fa:a4:e3:3f:78:
27:fa:8a:f9:e5:ca:7d:f5:a8:29:34:7d:cc:d1:de:
15:d2:a7:c0:c8:c5:e8:dc:82:84:53:21:4c:ea:3a:
2f:31:83:4a:d7:74:c6:e7:ee:e8:ce:68:6a:b7:82:
76:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:94:03:27:FB:73:74:23:18:FE:90:D7:5F:D7:D4:75:C6:D7:31:EF
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143151.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a1f5::/32
Signature Algorithm: sha256WithRSAEncryption
bb:78:dc:31:a0:c7:7e:16:bb:6a:30:7b:ca:01:da:9e:aa:c2:
57:f4:e4:a5:d7:11:90:96:83:99:fd:36:8d:28:aa:dd:17:68:
c2:69:1f:1d:f8:36:41:78:cd:c7:69:2b:fe:d8:fe:74:ae:9d:
93:70:17:6f:f8:2a:61:02:be:dd:aa:91:27:47:08:b0:88:26:
22:48:85:d9:79:4a:63:03:5a:eb:52:2b:d6:1d:a0:63:d1:d6:
bf:1f:d3:2e:9f:37:45:28:ee:26:ae:9e:bc:40:8c:6b:2a:bc:
6f:41:28:64:d6:09:00:19:9b:25:38:25:cd:69:d4:b3:2b:0b:
04:b2:39:66:6b:89:78:a6:87:ba:09:eb:67:44:d7:f2:ca:ec:
2d:3a:62:81:6b:09:db:2a:6b:70:f4:db:d2:fd:dc:b6:95:a2:
87:b3:04:af:98:4f:e1:12:b0:5f:da:dc:f2:66:ad:f1:2d:79:
4d:7d:02:56:2c:d0:38:32:00:d8:8b:8d:25:23:97:49:5b:fa:
17:fb:5f:e9:05:42:65:d5:6d:f4:cc:c8:1f:16:63:37:87:4b:
11:82:98:36:5c:dc:ce:a4:86:77:f9:6a:0f:85:a2:43:1d:dd:
9b:72:f0:c2:aa:a0:df:ce:a8:02:f4:ee:f3:76:e1:d1:54:d2:
eb:f4:99:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:31 2026 by rpki-client