Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143212.roa
File: AS143212.roa (raw, json)
Hash identifier: tEULflXjfXG64ECaQwK0DrM0SpevP+7CbfDIbhg7IvQ=
Subject key identifier: 19:D4:3A:61:CD:37:94:01:ED:06:38:51:31:A2:75:5E:96:FB:2F:86
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 58B923425D72E3E57F64D8245E6DF4F4381FD488
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143212.roa
Signing time: Fri 22 May 2026 02:47:56 +0000
ROA not before: Fri 22 May 2026 02:42:56 +0000
ROA not after: Fri 21 May 2027 02:47:56 +0000
asID: 143212
IP address blocks: 240a:a232::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:b9:23:42:5d:72:e3:e5:7f:64:d8:24:5e:6d:f4:f4:38:1f:d4:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:56 2026 GMT
Not After : May 21 02:47:56 2027 GMT
Subject: CN=19D43A61CD379401ED06385131A2755E96FB2F86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f4:0d:b3:cd:49:34:65:8f:4f:20:99:3e:54:
64:c9:00:1b:9d:4b:94:8c:3e:c8:3f:14:81:04:e2:
ad:e0:d5:4d:92:32:74:28:55:7d:ba:28:d6:5a:32:
41:70:b3:a8:7a:9e:5a:98:f6:f2:ef:f0:de:62:4b:
6f:d4:b4:31:de:a7:01:b9:69:a1:fa:70:1d:a0:63:
fd:1f:b5:2f:b2:66:bf:85:59:65:0a:37:78:fb:6e:
65:3b:1a:41:f8:59:45:60:1a:be:dc:03:e3:69:42:
ee:a6:fd:10:f2:24:5b:9c:94:ae:ec:d2:e5:c2:6b:
de:63:c5:b4:4d:c2:0f:00:5c:1f:ec:92:24:0e:3f:
e5:a4:4b:08:27:09:f9:13:51:e2:37:22:a1:2e:8b:
e3:ad:45:a9:10:62:72:1f:fd:9d:06:1c:b7:52:92:
33:32:c7:db:61:a2:1c:71:08:59:10:80:a4:90:8f:
04:ac:d2:8d:d9:42:b5:38:bb:26:24:58:ed:95:d2:
d2:4e:a7:82:07:5a:5f:3b:19:b4:cf:af:c0:cf:45:
63:e0:d6:7c:2a:e3:b5:22:d7:0d:f4:82:8e:48:4e:
4d:84:ec:09:f4:10:35:93:d1:3f:01:29:c1:bd:d8:
e6:92:28:b6:24:29:69:bc:1f:bb:6d:e5:10:c4:a8:
83:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D4:3A:61:CD:37:94:01:ED:06:38:51:31:A2:75:5E:96:FB:2F:86
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143212.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a232::/32
Signature Algorithm: sha256WithRSAEncryption
8e:62:c6:51:36:06:04:fd:dd:bd:2b:a9:28:ec:d9:e3:61:10:
06:e4:88:c4:19:fa:12:5b:9d:26:d2:2a:2c:bc:a9:18:09:38:
64:82:e8:44:08:70:b5:3c:44:42:06:ec:56:59:7e:d7:6f:61:
35:c6:dc:37:89:a5:f7:b0:2c:40:5a:6c:f0:d5:af:8b:2f:00:
a5:26:b9:76:28:75:c7:bb:32:d8:ac:6d:f8:c3:b6:45:76:02:
aa:e7:46:c6:61:35:5d:70:7d:d0:22:01:2a:37:60:7f:b7:58:
42:b7:c0:85:80:12:6e:97:14:90:3f:19:9d:b5:e6:da:7b:1a:
6e:c8:fd:9e:04:73:30:63:19:d4:9c:b7:70:a1:61:36:57:9e:
34:3b:94:df:7f:02:1f:d3:04:d2:1b:af:c2:eb:f9:c0:be:ca:
3c:5f:fa:48:b7:cd:20:c3:ef:9c:84:df:63:62:91:ba:45:e4:
3a:5a:35:88:3b:a0:4e:46:31:9c:b4:d0:2c:37:74:9e:9d:78:
43:f1:45:71:05:ac:5a:0e:54:e7:62:70:c6:3d:aa:37:a5:89:
68:1c:43:68:54:07:0e:0e:39:f4:c6:14:b7:1e:53:45:30:d3:
55:15:70:6f:12:e2:3a:30:97:c4:8f:27:c8:4b:02:16:36:31:
ca:e5:9b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:59 2026 by rpki-client