Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143171.roa
File: AS143171.roa (raw, json)
Hash identifier: cUMmv9CtvmD9F15j2RbC+tp++5EVVSHpUAglrggbezE=
Subject key identifier: 61:E5:81:C7:0C:E6:9A:B7:14:DF:C5:CE:7E:49:2A:32:5F:99:9D:2F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 32C8D63B16F2E9DCA49C08E35164890F15D66EA9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143171.roa
Signing time: Tue 26 May 2026 02:35:22 +0000
ROA not before: Tue 26 May 2026 02:30:22 +0000
ROA not after: Tue 25 May 2027 02:35:22 +0000
asID: 143171
IP address blocks: 240a:a209::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:c8:d6:3b:16:f2:e9:dc:a4:9c:08:e3:51:64:89:0f:15:d6:6e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:22 2026 GMT
Not After : May 25 02:35:22 2027 GMT
Subject: CN=61E581C70CE69AB714DFC5CE7E492A325F999D2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:80:61:80:ae:02:a1:8d:a1:48:f2:a8:01:38:
04:b7:44:1b:b9:6c:00:ba:84:cd:59:85:98:77:a0:
36:63:48:19:a2:f8:60:7d:e9:dd:ad:be:df:56:c9:
77:34:28:65:d7:eb:b0:cc:9b:13:e8:52:27:d9:71:
f9:ad:e4:ea:e6:b1:64:3a:87:dd:85:39:e8:de:25:
48:31:2a:48:00:f7:e9:f9:45:98:1e:9c:46:08:48:
1f:3f:11:e1:aa:ca:d1:9a:23:fa:90:d9:7f:75:db:
08:ef:8f:fe:41:46:55:f6:cc:e7:62:68:9b:37:04:
97:64:e7:b9:4a:18:3e:2c:86:57:9a:29:31:60:06:
0f:b0:39:ba:9e:6a:c2:5a:56:93:fd:e5:db:34:3f:
0a:4d:cd:df:42:b4:82:a7:61:52:f7:cf:3b:d1:ba:
e5:a8:58:5b:e5:6e:87:f2:f9:59:da:09:c7:fb:c5:
43:a5:f8:2c:58:5a:39:2f:bf:1f:43:40:0f:19:98:
0e:1d:84:65:30:4b:b5:49:88:23:8a:77:7d:fd:a2:
65:9c:ee:29:cf:85:31:e0:a7:9b:1b:a8:94:b3:95:
ac:9c:92:f6:74:26:80:d6:e8:90:49:e0:e3:a5:06:
e6:07:d7:ab:6d:f6:58:d5:7e:b4:5f:3b:89:ab:2a:
cc:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E5:81:C7:0C:E6:9A:B7:14:DF:C5:CE:7E:49:2A:32:5F:99:9D:2F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143171.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a209::/32
Signature Algorithm: sha256WithRSAEncryption
08:af:7c:a7:43:e7:17:85:4a:a6:da:e2:ed:bf:a0:49:a8:da:
7d:fb:dc:4a:b2:c1:04:d9:a0:3e:9b:24:91:84:2b:8c:10:85:
7e:5f:60:9b:84:2f:df:8a:8c:07:51:7d:e9:25:c6:2d:5e:fd:
26:0c:b6:9e:d2:1a:3c:2c:e6:7e:72:b8:a7:b6:27:2d:b7:15:
1f:54:cf:a4:e9:29:b1:53:4e:d4:f0:bb:40:5a:28:b1:cd:3b:
38:8c:54:e9:cb:f6:69:ac:31:ec:3b:44:b2:bf:53:6f:cc:8e:
5c:00:91:73:ec:16:07:50:b6:9c:c8:a4:5b:3c:07:96:ba:e5:
c1:9d:bb:a1:88:cf:8b:fb:95:60:42:7d:de:37:ea:69:ed:67:
f7:ef:dc:09:fc:39:b9:87:8f:01:3f:1b:63:a3:c8:b3:75:11:
61:a9:fe:6f:d3:d8:25:21:a1:cc:e3:d9:ae:75:e9:94:53:41:
b3:09:aa:2b:18:35:e7:55:4f:cc:3f:3c:c2:7b:ba:cc:61:be:
f7:a9:c2:2a:11:41:9b:17:76:8c:38:d8:e9:38:6b:56:f5:bc:
47:c4:25:80:f2:5d:67:96:a3:d3:ac:b0:7c:48:62:52:94:45:
a7:da:50:59:40:5b:e4:3d:ac:11:03:49:19:15:73:89:10:cd:
35:25:7a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:16 2026 by rpki-client