Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143218.roa
File: AS143218.roa (raw, json)
Hash identifier: k8enlZo59UeKFQbEaqTDSwgLv71QwODmbAtHiuDnaHI=
Subject key identifier: F8:AD:A7:49:CD:8B:10:EC:FA:77:DE:E8:08:55:37:BC:6E:A4:EF:CE
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 17F0851AA9BF134086E1B4D094702573CED5BE05
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143218.roa
Signing time: Mon 25 May 2026 01:38:06 +0000
ROA not before: Mon 25 May 2026 01:33:06 +0000
ROA not after: Mon 24 May 2027 01:38:06 +0000
asID: 143218
IP address blocks: 240a:a238::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:f0:85:1a:a9:bf:13:40:86:e1:b4:d0:94:70:25:73:ce:d5:be:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:06 2026 GMT
Not After : May 24 01:38:06 2027 GMT
Subject: CN=F8ADA749CD8B10ECFA77DEE8085537BC6EA4EFCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5e:94:8c:b0:ab:ae:d2:07:df:29:b8:3d:e3:
c1:a1:ad:ee:46:f1:85:bf:e6:a5:f8:20:35:13:40:
1e:38:30:a9:9d:58:99:23:fc:f5:e4:73:3f:9c:75:
8f:fb:3b:e4:12:66:92:09:b2:ca:dd:37:7e:7d:1c:
e5:23:d3:3f:5f:97:c7:ce:20:7a:b3:7c:e6:79:45:
1f:85:77:16:ec:48:bd:8c:35:63:fb:93:0c:f0:ff:
63:f6:05:bb:aa:7f:76:9c:e6:35:cf:0a:fe:7f:f5:
d7:a6:4f:32:0f:af:ed:e7:dc:e3:4a:9a:53:56:0c:
72:5d:b0:07:75:d7:aa:74:a1:99:8c:40:f5:d5:ea:
63:3b:92:bc:dd:8e:5f:a4:8b:70:3c:74:b6:df:4c:
80:e7:09:c5:31:8f:f3:bc:e6:64:f3:29:25:e8:66:
b3:75:1f:03:aa:69:e8:9c:a1:54:6a:ab:75:74:31:
96:ff:14:3d:4e:8e:e1:39:35:f4:fe:c3:c9:c6:c3:
ec:9f:88:d6:19:37:d9:97:b8:be:76:cf:8d:ca:3e:
44:75:ff:fc:93:0e:2f:bb:a4:5a:e2:81:52:f0:d2:
b7:dd:ea:71:1d:2d:8a:b3:af:46:e4:8a:08:fe:87:
47:a9:ab:25:e1:a5:78:13:57:c7:5b:13:59:35:8c:
3c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:AD:A7:49:CD:8B:10:EC:FA:77:DE:E8:08:55:37:BC:6E:A4:EF:CE
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143218.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a238::/32
Signature Algorithm: sha256WithRSAEncryption
99:5b:f9:e5:2e:f4:c5:04:5e:b5:0c:02:a5:1e:71:f9:02:4b:
f2:0a:fa:20:45:82:86:2c:a7:5a:ff:38:70:e2:f5:05:3b:99:
91:79:7a:89:2a:b0:18:d5:9b:22:21:da:53:67:56:e7:8b:6c:
04:74:3b:ef:4a:8d:1c:df:7b:be:68:bf:cb:da:81:8b:ef:f7:
eb:44:a9:9c:a2:d3:03:7c:97:44:8f:ed:ad:24:a3:ef:be:6b:
ec:c1:fe:f0:c2:62:e6:2f:12:91:df:3f:c4:75:79:4d:6c:45:
5b:3f:f6:4c:ec:3a:35:e8:10:65:a2:59:22:14:f2:56:b2:7c:
fd:68:bc:10:65:0e:e6:bc:f6:a9:fe:92:46:70:12:bc:a5:83:
74:f7:f4:d8:c7:f4:1f:e2:8d:81:77:4d:98:19:24:db:bf:aa:
ec:25:ec:4a:05:71:8a:8c:5f:2f:91:02:fb:d9:9d:2b:0e:bf:
cc:9c:cb:14:f2:f8:23:3c:c0:75:f5:2c:03:2a:07:36:63:16:
c2:c7:1b:2b:e6:c6:20:1a:f0:b0:b6:8a:9c:bd:3f:27:51:96:
d0:e4:0b:b9:3d:ec:ec:f7:f9:74:be:c1:1f:aa:0b:ec:18:7a:
ed:62:ea:fb:0e:b4:91:43:4f:e3:b9:67:78:b6:47:30:fd:c5:
64:e1:15:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:26 2026 by rpki-client