Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143152.roa
File: AS143152.roa (raw, json)
Hash identifier: Qw7Nmg46Xqzwx/DbRuYQe1rgLRxrHv4Og4EasTuqBLo=
Subject key identifier: D0:50:DD:F9:A8:23:2E:D8:87:5A:F2:EE:48:77:13:39:BF:54:FA:AF
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 141AAD20A63BC0E37016EFE4C88C29828120D955
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143152.roa
Signing time: Fri 22 May 2026 02:47:52 +0000
ROA not before: Fri 22 May 2026 02:42:52 +0000
ROA not after: Fri 21 May 2027 02:47:52 +0000
asID: 143152
IP address blocks: 240a:a1f6::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:1a:ad:20:a6:3b:c0:e3:70:16:ef:e4:c8:8c:29:82:81:20:d9:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:52 2026 GMT
Not After : May 21 02:47:52 2027 GMT
Subject: CN=D050DDF9A8232ED8875AF2EE48771339BF54FAAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:61:a4:fd:56:4d:79:a8:be:48:a9:4a:3c:77:
5f:e7:ad:b0:d7:ff:75:21:ec:49:fa:e2:b3:6d:a7:
23:9a:9c:1b:93:a2:d8:13:1b:e1:0d:88:db:10:54:
69:38:e5:c5:3b:ac:45:e1:7c:6f:c0:74:be:30:3d:
ed:9f:9a:b0:0f:70:0d:89:df:cc:69:e1:f2:cc:64:
79:32:6f:a1:8c:46:8a:23:19:19:76:08:5f:b2:51:
09:6e:13:01:04:ba:ff:e8:44:fd:45:4b:4f:5a:01:
dd:a9:51:43:6c:62:ab:21:ed:9b:8d:1a:c5:79:df:
d8:8a:1e:b8:3a:19:12:54:4e:6c:de:22:3d:eb:56:
2f:a0:b7:8a:89:ce:5f:84:59:fc:43:b8:2e:36:e2:
08:b6:f9:be:c0:d5:8d:4a:c3:12:3f:19:7e:20:d1:
dd:c6:90:c1:fa:a3:7e:5e:d4:21:f1:89:be:ec:c8:
93:00:3e:51:5b:91:d2:20:8e:37:a5:04:52:e4:87:
a2:91:98:2f:a0:e7:79:19:f3:fc:76:a9:c0:50:b9:
de:1e:60:01:0a:22:90:e5:14:23:15:2a:31:e1:c3:
2e:36:06:0c:22:7c:0a:a7:a0:f6:f5:c4:cd:92:22:
85:5b:23:10:fd:2c:cb:8a:7d:63:90:53:b3:1a:55:
84:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:50:DD:F9:A8:23:2E:D8:87:5A:F2:EE:48:77:13:39:BF:54:FA:AF
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143152.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a1f6::/32
Signature Algorithm: sha256WithRSAEncryption
89:52:29:66:d1:a6:54:9c:e7:f9:78:af:3b:f5:e6:7e:3c:5f:
87:d7:4f:8a:ff:27:8f:51:30:da:ea:13:59:04:b5:7c:12:b5:
46:76:67:e5:fa:c8:4c:e6:81:38:ea:01:07:ec:4a:32:43:ae:
38:96:d6:0f:00:df:47:3a:8a:5c:19:95:e8:49:3e:47:a6:21:
7b:5f:a0:45:42:14:30:c2:91:17:db:62:f1:c6:00:1c:77:bc:
11:d1:a4:af:19:8a:82:61:ea:b3:a5:a3:64:e2:a7:28:50:10:
5a:a5:2a:6b:78:e9:93:1c:94:fb:07:20:0f:86:15:53:1b:4f:
35:1b:6b:52:7b:e2:62:4f:16:68:f2:e9:1f:ca:67:c0:62:c2:
24:94:1c:1e:97:56:ea:6b:d2:b5:b8:50:50:db:d6:5e:5a:74:
67:aa:e4:54:d9:db:00:a6:43:6c:65:1b:a0:f9:f8:31:3f:a5:
6a:21:a6:f4:55:39:8b:f1:3c:c1:7f:d9:c1:18:a9:ed:04:d7:
a3:d2:96:7d:64:ec:e7:21:84:c4:a4:b1:9f:4e:52:69:eb:a6:
aa:a7:12:54:2e:bc:fd:97:fb:59:10:e3:a6:42:0a:18:bf:04:
19:a8:31:85:f7:7f:31:c8:af:af:2f:24:8a:34:21:4b:08:fd:
f2:ca:e4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:35 2026 by rpki-client