Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143235.roa
File: AS143235.roa (raw, json)
Hash identifier: nzhyvMLziCV3SXgrpfBQOVpCkDL5R12mxweXDL58koo=
Subject key identifier: 3B:28:6C:48:73:75:80:BF:45:99:47:63:17:2F:1E:E8:4E:96:A7:FE
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7C715C2A1C9779BB1E841CEEDE341E0D98B7162B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143235.roa
Signing time: Mon 25 May 2026 03:19:30 +0000
ROA not before: Mon 25 May 2026 03:14:30 +0000
ROA not after: Mon 24 May 2027 03:19:30 +0000
asID: 143235
IP address blocks: 240a:a249::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:71:5c:2a:1c:97:79:bb:1e:84:1c:ee:de:34:1e:0d:98:b7:16:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:30 2026 GMT
Not After : May 24 03:19:30 2027 GMT
Subject: CN=3B286C48737580BF45994763172F1EE84E96A7FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3d:53:26:6c:b3:77:10:c1:e9:a2:6a:34:d7:
89:87:24:ab:49:80:eb:d1:15:8b:93:a1:4c:14:9b:
8a:84:d6:f5:c1:6a:55:f4:e6:da:78:6b:ea:e5:de:
56:27:f2:8e:59:c4:9a:0a:1f:89:39:08:2a:cf:74:
74:59:4b:74:2f:b4:d3:fe:6b:ae:2a:7e:e0:e8:f0:
f7:3c:84:e8:f2:5a:ad:73:05:d1:3a:ce:c8:58:31:
31:7d:ba:54:c2:fd:79:eb:d4:d0:0e:e9:a3:5c:ba:
d7:09:a8:52:f6:f2:f6:75:99:ea:00:f5:c4:1b:b3:
ec:45:30:a0:dc:a5:77:ba:9b:a7:0a:5e:61:55:da:
06:69:09:7c:ec:e5:ce:da:48:84:da:28:62:b7:fc:
fb:4f:13:d0:29:e8:be:93:55:8e:62:ee:2b:10:24:
d3:be:16:b9:19:41:26:af:29:9a:df:a8:69:1e:5f:
3a:57:77:bf:c8:c5:0b:90:ea:99:3d:cb:d5:03:9e:
8d:17:b2:09:8c:00:e8:7c:18:1f:8b:0d:e9:52:3b:
87:c2:96:88:1b:a8:e2:6f:8b:62:05:10:8f:af:53:
68:c1:52:96:fa:d7:06:17:c3:eb:3d:6f:e5:c0:1f:
f0:69:7d:e4:20:47:0d:46:17:78:81:22:32:fd:5c:
a0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:28:6C:48:73:75:80:BF:45:99:47:63:17:2F:1E:E8:4E:96:A7:FE
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a249::/32
Signature Algorithm: sha256WithRSAEncryption
90:e4:22:ee:30:bd:14:75:3d:1c:76:3b:1b:af:0e:0a:3c:a6:
5b:3f:72:5f:05:8a:65:ce:2f:2d:d5:cb:87:1b:80:2f:b9:c8:
84:7b:6e:b4:87:42:bf:5a:f5:ec:0c:54:c4:23:2f:fd:3e:97:
4c:5c:12:a0:89:53:9c:06:2d:5b:1d:54:b2:16:12:ee:10:1e:
1d:64:68:3f:05:b1:82:bf:f8:93:b0:77:5f:62:29:90:f2:d7:
d4:7b:21:19:52:38:1d:37:d5:35:1f:33:94:35:eb:60:ae:7a:
ed:e2:cb:dd:ee:2b:96:47:13:af:7a:b7:11:cf:a5:13:31:00:
19:24:1e:cf:42:7c:0a:7a:ec:21:fe:a6:0d:fb:5b:f1:ba:c0:
90:d6:02:26:7f:57:2c:9d:f9:d8:07:67:77:44:0f:12:42:60:
81:86:fa:da:73:28:42:2c:87:f6:a0:6a:0d:07:f9:f3:57:60:
a4:92:14:87:9a:5b:14:05:a7:c5:08:d5:ff:ae:03:20:a7:75:
fe:c8:2a:6f:16:36:69:30:e7:7d:68:26:c1:1c:af:07:97:9e:
2a:c0:8b:2d:36:a3:cf:44:8c:71:53:54:7b:43:50:dc:35:7e:
78:f4:6b:2c:f4:4f:9d:13:09:1b:78:52:7c:37:7d:96:cf:87:
6e:43:e5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:54 2026 by rpki-client