Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143214.roa
File: AS143214.roa (raw, json)
Hash identifier: mYBv6afcrbtdpyJ2vyOTYzeYeJWDlmhmbIiMvdJjB5w=
Subject key identifier: AE:52:B5:4F:85:D8:F5:4D:5C:27:BE:47:1D:96:60:E7:2E:48:FE:E3
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 350C75453573E72DB40DF12BA0AF6B5DE1A57D08
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143214.roa
Signing time: Fri 22 May 2026 07:32:31 +0000
ROA not before: Fri 22 May 2026 07:27:31 +0000
ROA not after: Fri 21 May 2027 07:32:31 +0000
asID: 143214
IP address blocks: 240a:a234::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:0c:75:45:35:73:e7:2d:b4:0d:f1:2b:a0:af:6b:5d:e1:a5:7d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:31 2026 GMT
Not After : May 21 07:32:31 2027 GMT
Subject: CN=AE52B54F85D8F54D5C27BE471D9660E72E48FEE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e7:57:e5:9d:e2:a0:2f:23:1d:56:03:ee:cc:
78:6f:0c:fa:e3:2d:3c:4b:78:8e:f0:a0:44:05:7c:
48:7e:70:20:36:8d:30:7c:24:71:ce:2a:a9:9d:51:
8a:90:4f:13:6e:60:9c:da:96:03:bd:70:a9:d0:37:
d9:2d:84:4c:99:e2:75:a0:2b:34:59:69:c4:63:dd:
03:cd:9d:00:89:8f:20:17:00:fe:79:39:3e:4c:fa:
f8:62:c2:88:3d:ce:ad:96:c9:40:63:33:b0:1f:f7:
51:4d:2f:34:bc:0e:e6:c7:9e:8c:e5:40:b0:ba:a7:
40:1a:f6:55:7b:86:f1:0c:ce:e1:49:9d:71:04:63:
79:0c:cd:38:79:75:6a:29:ac:60:ee:99:39:06:3c:
dd:81:28:36:dd:67:4a:2c:97:1b:40:2c:5d:c7:9d:
7f:c6:e4:63:5b:9c:41:70:3d:ef:c5:b9:87:18:35:
74:76:90:80:8f:d4:e2:3c:21:d5:6a:b9:32:02:4c:
8f:1c:eb:a7:cd:62:05:c3:59:95:b5:0e:83:50:5f:
16:29:26:9f:6d:7e:0b:97:e0:0f:4d:16:73:4a:a5:
0a:90:cb:4d:8c:f7:f3:59:c6:f6:aa:03:81:99:9b:
79:7f:5e:ed:cf:94:a4:db:b0:d6:20:28:59:bd:8e:
9a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:52:B5:4F:85:D8:F5:4D:5C:27:BE:47:1D:96:60:E7:2E:48:FE:E3
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143214.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a234::/32
Signature Algorithm: sha256WithRSAEncryption
a1:57:22:fd:4a:55:c6:68:80:81:61:ea:17:8c:6a:e7:29:44:
d5:37:52:d7:c7:f7:76:3e:ba:c0:5f:1c:e6:b2:cd:b8:79:01:
bd:c0:06:2c:2f:de:d9:16:1d:a0:f2:9c:4c:02:75:2d:72:38:
b6:10:50:8c:4e:66:de:83:2f:d4:a9:e4:af:6c:05:2b:12:3a:
94:64:cb:ac:a5:fa:04:25:ed:dd:96:f1:d2:ae:88:f5:5d:49:
90:60:e0:eb:1f:77:06:51:9c:7b:04:61:59:75:31:d5:ef:36:
2f:03:ce:20:a1:af:d0:b5:77:35:df:b4:65:23:59:25:08:e0:
6e:14:c3:45:c7:11:bf:17:7f:fc:da:1e:e8:b7:7e:3e:04:aa:
1c:1c:5f:f9:3d:59:6b:72:6c:0f:05:8f:b4:04:5d:aa:31:bb:
4c:5b:f3:ba:b0:c7:6b:a9:6c:b6:77:40:ae:ca:19:64:e9:33:
a9:88:66:07:4f:4a:bf:2a:16:ab:79:9a:bc:ba:fe:68:12:63:
b4:84:aa:7f:74:1b:22:41:80:45:52:6d:cb:e9:02:bb:29:bf:
31:2e:23:7b:b2:76:52:c6:26:22:a4:03:a9:c0:b7:d6:14:2b:
4a:cf:9e:e0:80:55:c9:ce:39:1d:d0:c5:35:d1:d4:3e:dd:93:
6c:53:1b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:08 2026 by rpki-client