Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143205.roa
File: AS143205.roa (raw, json)
Hash identifier: /ZUErhqFR9ZDch0AGhO4L6Nq54WGW8CpQacK/6dV7no=
Subject key identifier: BA:9E:C5:55:AE:C8:41:88:44:74:D6:59:5D:FA:86:29:B7:29:27:D5
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0AC0F3F4E2939C08A3D009CF21E58D4D0E42F4FE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143205.roa
Signing time: Fri 22 May 2026 07:25:02 +0000
ROA not before: Fri 22 May 2026 07:20:02 +0000
ROA not after: Fri 21 May 2027 07:25:02 +0000
asID: 143205
IP address blocks: 240a:a22b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:c0:f3:f4:e2:93:9c:08:a3:d0:09:cf:21:e5:8d:4d:0e:42:f4:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:20:02 2026 GMT
Not After : May 21 07:25:02 2027 GMT
Subject: CN=BA9EC555AEC841884474D6595DFA8629B72927D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b3:66:e1:63:c0:5b:10:93:88:88:fa:13:5f:
98:73:e9:7c:0c:6d:45:7a:07:73:e6:7b:7f:ba:6f:
1b:18:6f:73:37:02:53:69:2f:1c:1e:b8:6a:53:c8:
80:df:e9:60:36:17:af:8c:30:c0:8a:7f:2d:70:e2:
fa:2a:1b:1c:bc:9b:7b:2f:6f:15:14:2f:f7:be:e4:
8f:07:41:a6:36:b7:7d:db:5f:39:69:c6:81:ed:7a:
9d:94:3f:31:59:aa:24:f7:16:f5:d9:28:2b:1a:08:
c9:f3:be:e3:10:3d:65:db:ee:33:01:7a:b8:ec:aa:
6c:3f:af:49:94:57:4d:01:6f:8b:ad:4b:3a:50:81:
d4:ac:dc:59:a6:bf:da:84:c6:ff:24:58:04:da:f2:
45:76:4f:3c:79:0b:61:98:ae:70:d4:92:18:c8:a8:
19:93:73:ad:81:f2:09:86:52:73:bb:c7:4d:26:68:
a5:8c:e5:37:7d:b8:07:07:38:0f:6a:37:8d:6b:4e:
e1:b4:af:4b:54:b7:d8:48:02:8b:46:50:1c:2a:56:
2a:3d:c4:27:3f:56:b1:62:e5:55:3e:13:94:ee:22:
f1:22:cb:f4:08:cc:63:8e:1a:6c:09:6b:65:84:2e:
a4:31:51:8b:b7:63:a6:8b:64:3e:2f:01:f5:ad:38:
27:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:9E:C5:55:AE:C8:41:88:44:74:D6:59:5D:FA:86:29:B7:29:27:D5
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143205.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a22b::/32
Signature Algorithm: sha256WithRSAEncryption
49:72:75:f6:8a:e5:6f:ae:c1:6e:07:dc:27:9e:ee:69:1f:7e:
fd:1f:97:c2:02:7a:76:23:19:b1:b6:a1:47:11:5e:af:2d:d8:
2a:6d:e6:42:92:6f:14:7a:7d:e6:17:a3:90:87:c9:fa:34:15:
76:f5:e9:4a:76:1a:4b:15:45:36:ba:87:0a:24:b4:e9:13:e2:
12:6d:44:b2:cf:d8:17:fb:a3:ef:76:37:03:2f:02:e2:3f:74:
04:c9:03:f6:ec:ef:e9:6b:0c:b5:1e:b7:16:d6:9b:72:83:85:
bb:c5:e8:6f:67:52:c6:c5:a8:f9:9d:b1:31:f2:ab:a6:a8:52:
67:80:eb:40:c7:46:55:f2:e5:c2:0b:98:84:2d:8f:c4:02:70:
b9:8d:07:b9:69:12:89:0b:ce:7a:9a:76:7a:29:07:cd:fa:6c:
fe:0e:cd:87:e9:b3:43:4f:d1:5d:93:0b:b6:d2:a8:28:ee:e4:
7d:79:0b:bb:a1:25:69:2d:cf:c7:fa:6a:81:e1:fa:47:f4:a7:
22:b8:1f:49:fe:3c:dd:45:7d:63:84:1e:df:60:8f:24:5b:96:
60:67:22:16:99:67:80:bb:75:84:13:49:63:d6:1d:b8:81:a6:
33:f6:52:2e:02:cb:c6:f2:23:22:cd:2b:07:e8:3a:03:31:af:
3e:70:41:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:28 2026 by rpki-client