Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143154.roa
File: AS143154.roa (raw, json)
Hash identifier: wW5uXDPVRGTNmNPS8PI5yIyZa4QEIjaJmsgcBwa4vII=
Subject key identifier: 0A:80:1B:D1:EE:A7:E9:B3:C3:04:C6:D2:EA:DC:AA:CC:A2:E1:EE:C5
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 49374A0B4BD7F4232083F076710F9FFDF42898A9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143154.roa
Signing time: Fri 22 May 2026 01:50:18 +0000
ROA not before: Fri 22 May 2026 01:45:18 +0000
ROA not after: Fri 21 May 2027 01:50:18 +0000
asID: 143154
IP address blocks: 240a:a1f8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:37:4a:0b:4b:d7:f4:23:20:83:f0:76:71:0f:9f:fd:f4:28:98:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:18 2026 GMT
Not After : May 21 01:50:18 2027 GMT
Subject: CN=0A801BD1EEA7E9B3C304C6D2EADCAACCA2E1EEC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:59:ca:cb:1d:a9:bf:8c:e0:eb:dc:a4:a2:c2:
a0:bd:fd:be:ad:98:15:bf:d0:06:5c:2d:26:d4:9e:
b7:64:89:e4:de:cc:64:82:8b:88:28:28:25:29:07:
c1:ff:f0:cd:32:94:b3:c6:1f:a2:20:ea:0c:cd:01:
58:d8:79:44:76:d0:de:89:79:df:83:c4:bc:2c:f0:
b1:5e:0a:8c:1e:3c:4c:fc:1a:b8:c3:c0:ed:eb:94:
01:31:08:51:e2:29:2e:e1:cc:17:10:f5:00:38:b9:
0e:cd:e9:94:6a:12:e5:d5:bb:a4:2f:1b:17:57:7e:
9b:b6:d0:cc:f4:6d:69:89:6e:76:1a:fb:c5:19:2b:
cc:6d:d8:e8:ee:07:98:7e:35:b7:bd:93:23:5c:a0:
21:ad:27:51:39:a8:e5:e6:f7:89:47:87:ae:74:b0:
7e:d3:7f:7d:1e:aa:8b:28:8e:8c:ae:b4:c5:a2:c0:
61:e0:54:a9:ee:4e:4c:ac:60:76:0f:2a:45:a1:8d:
a8:94:eb:fd:a4:c0:40:93:c7:c0:f1:8e:8f:f1:0f:
28:9f:27:c4:78:20:ed:d7:3f:d2:a1:2c:b5:e6:c8:
b6:e2:23:ad:d6:03:57:78:e1:22:69:6b:4c:d4:21:
8d:fe:75:9b:72:e6:e2:6b:aa:e5:30:b8:7b:d9:1b:
38:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:80:1B:D1:EE:A7:E9:B3:C3:04:C6:D2:EA:DC:AA:CC:A2:E1:EE:C5
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143154.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a1f8::/32
Signature Algorithm: sha256WithRSAEncryption
11:34:2f:6e:b6:44:0e:a3:59:5d:ec:99:54:fa:1f:c8:71:3c:
62:d0:c0:b7:c2:49:2a:5f:3e:0f:c5:a2:42:8e:e4:d3:46:ac:
cb:3d:1a:d0:70:a6:1d:02:e5:0b:13:23:69:07:97:0f:64:8c:
de:72:b9:95:21:94:71:cc:1c:9c:c0:0e:3f:3c:61:05:71:9d:
8d:51:cd:05:19:f5:5e:68:88:99:4a:be:7c:c1:c2:3a:fc:43:
3b:41:54:e4:66:53:4e:59:3c:d7:ef:81:1f:2b:40:69:2a:b9:
14:d1:c0:4f:50:79:f8:f2:79:0f:0a:2e:be:29:59:98:c0:a1:
9b:76:a5:53:1c:8b:5f:46:67:c3:1d:b8:d8:59:23:66:79:7d:
68:4f:0d:07:67:c3:94:50:9f:78:4f:b4:ce:cd:d5:3e:7a:57:
68:42:b7:9e:e3:80:e9:bb:a7:21:d2:f0:26:d5:41:1a:2f:8b:
57:8a:52:b2:33:a4:f3:e7:ae:f1:33:4f:88:40:41:e6:66:bc:
09:aa:8f:ce:e8:7b:69:b5:93:39:de:72:1e:0e:48:36:cd:b6:
03:2f:38:68:f1:69:00:17:f4:8c:aa:90:75:b2:2a:2c:fb:a8:
4c:dc:ba:da:46:9c:e1:e6:7e:96:52:4b:ec:66:8a:11:08:ca:
3c:26:55:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:40 2026 by rpki-client