Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143229.roa
File: AS143229.roa (raw, json)
Hash identifier: ryrLPJAisJdv8+wi4ML2WQquJwY2dcVkWSbl5OFHOOU=
Subject key identifier: D7:65:AD:33:94:94:23:EA:43:56:0D:91:E0:4D:25:A9:67:30:7C:1B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 331E6322B9C81D05AA80F5BA07D9CC9FA6FC7F5A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143229.roa
Signing time: Fri 22 May 2026 07:09:00 +0000
ROA not before: Fri 22 May 2026 07:04:00 +0000
ROA not after: Fri 21 May 2027 07:09:00 +0000
asID: 143229
IP address blocks: 240a:a243::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:1e:63:22:b9:c8:1d:05:aa:80:f5:ba:07:d9:cc:9f:a6:fc:7f:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:04:00 2026 GMT
Not After : May 21 07:09:00 2027 GMT
Subject: CN=D765AD33949423EA43560D91E04D25A967307C1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f0:8b:04:9c:3b:d5:c7:0b:b5:57:e2:ff:5f:
67:5d:66:17:d7:a6:5e:f2:aa:ae:dd:49:3e:c5:27:
47:4c:20:45:9f:28:5b:96:43:b5:19:5e:0a:6f:08:
b3:32:42:ed:23:4e:06:67:d5:35:6b:96:3a:37:0d:
f6:40:2e:0d:cc:35:54:ca:81:04:13:d4:1b:f8:b8:
7e:70:36:35:6e:9d:a1:e8:c1:a4:e1:95:7f:c8:82:
a3:fd:eb:4f:98:ef:70:32:ac:99:76:9c:7d:24:f1:
64:2b:53:98:61:f7:c8:cf:37:90:d2:88:df:39:1a:
d7:46:58:30:dc:9a:20:ff:94:90:37:ef:31:94:99:
4e:cb:16:a0:c3:db:4b:96:47:a5:6d:93:fb:33:38:
bc:9c:b4:d6:8d:31:a5:9d:94:99:e5:65:67:56:53:
9a:e0:5a:b0:ad:e1:b5:e5:56:db:94:18:b8:0a:db:
d9:15:df:67:60:45:3c:80:5c:6c:27:37:84:67:74:
51:30:ac:d1:16:9a:3e:c0:c1:18:eb:89:e4:39:9d:
ca:73:9c:ed:b4:a1:cd:ce:d2:24:50:61:97:6f:34:
e0:5c:d5:1b:8b:b4:4b:fa:59:a8:78:9d:b3:da:e6:
1d:85:a1:40:cb:33:cc:fe:d7:2b:11:6b:21:4b:56:
5e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:65:AD:33:94:94:23:EA:43:56:0D:91:E0:4D:25:A9:67:30:7C:1B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143229.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a243::/32
Signature Algorithm: sha256WithRSAEncryption
93:d5:97:c1:61:b2:48:59:89:df:ec:8e:17:7e:30:9d:30:23:
6a:68:70:b5:54:5b:d1:92:61:ee:12:5d:c1:8f:92:a6:0a:53:
69:7c:6b:78:11:bf:01:2b:81:d7:89:83:85:eb:78:f6:f3:92:
2d:20:7b:19:c9:b8:61:64:b4:79:aa:7e:29:d2:83:99:b8:7b:
63:76:b0:40:4b:a7:21:78:b5:43:04:1b:cf:df:38:e5:fb:b2:
4a:cf:5b:00:c0:90:81:37:de:3b:2b:04:e9:92:4e:1f:c1:ff:
25:96:4a:84:2f:e2:31:ac:ac:55:04:ca:9d:27:3d:ab:9e:ac:
3a:28:84:c5:7c:31:7b:64:63:44:1a:47:7d:63:89:d2:da:a8:
84:00:89:19:cb:ce:ae:1b:4f:7e:d3:da:d0:da:d2:f6:1a:a7:
6d:18:50:48:60:c6:7c:9f:4a:af:1e:39:02:a1:c7:75:68:ae:
a3:1f:6e:31:64:fe:52:cb:2b:cd:de:ff:9e:e2:2f:c1:b7:2a:
c4:e7:3b:40:90:ed:3b:d9:d5:1c:a3:86:de:98:d8:28:f6:fa:
a2:e1:24:86:8e:6e:1f:33:1a:9a:2a:bc:3b:9f:94:9d:47:52:
b0:92:6a:65:1f:95:d1:65:d9:44:54:06:11:10:82:69:1d:71:
e2:e4:4d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:19 2026 by rpki-client