Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143237.roa
File: AS143237.roa (raw, json)
Hash identifier: UazVd4i0QiCpx7/r/rwWmrJR8lNq7XmkVYLDHVbXE/M=
Subject key identifier: D9:9F:8F:74:45:5A:F6:1C:93:17:CB:A7:B4:7D:9B:2C:FD:07:45:1C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 73125B79606E128AF765C81B1C24E53661EF13B9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143237.roa
Signing time: Mon 25 May 2026 01:51:16 +0000
ROA not before: Mon 25 May 2026 01:46:16 +0000
ROA not after: Mon 24 May 2027 01:51:16 +0000
asID: 143237
IP address blocks: 240a:a24b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:12:5b:79:60:6e:12:8a:f7:65:c8:1b:1c:24:e5:36:61:ef:13:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:16 2026 GMT
Not After : May 24 01:51:16 2027 GMT
Subject: CN=D99F8F74455AF61C9317CBA7B47D9B2CFD07451C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0e:62:b5:1e:b0:b2:c1:fd:b9:57:8c:b3:da:
8b:ec:f2:0e:45:65:f3:e7:8b:af:7e:e2:78:db:82:
85:56:5b:ee:b8:9f:37:30:88:09:cf:a7:04:93:22:
68:8a:d7:0b:e8:bc:f0:53:d9:eb:f3:cc:0e:61:6e:
d5:71:f3:32:ea:12:a1:ff:67:39:bc:76:d6:ad:a6:
52:7d:cf:eb:4a:c0:e2:10:e6:20:a9:6b:93:1c:52:
4a:39:68:f0:d2:be:2e:bd:69:28:f3:ea:b0:ba:27:
89:f3:a6:a6:21:12:af:23:60:28:26:d5:84:3e:33:
a7:e2:b8:f2:1c:1a:ad:73:50:74:3f:30:bb:7e:45:
b4:92:ae:88:82:65:51:1d:e5:0a:32:5f:c9:19:cc:
d9:9f:c0:1e:ff:4d:9a:a3:6c:0d:a3:fe:c9:e1:23:
8a:91:70:43:ab:47:f8:e4:ec:ed:43:d2:2a:2d:e6:
f1:74:ed:b1:03:b7:de:d0:92:42:4d:77:3b:b3:0f:
02:ad:8f:e0:2d:5c:c8:f9:c2:6c:8d:d4:af:d8:78:
da:27:7e:eb:b6:fe:7f:2a:33:e9:9c:68:8d:4a:6d:
e0:08:e7:67:08:20:9e:fc:6d:ec:81:50:95:47:59:
5d:07:79:06:a6:d2:2a:de:a6:00:7d:e4:c4:be:bb:
39:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:9F:8F:74:45:5A:F6:1C:93:17:CB:A7:B4:7D:9B:2C:FD:07:45:1C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a24b::/32
Signature Algorithm: sha256WithRSAEncryption
19:b8:a3:84:11:c5:69:99:cf:00:9c:16:5a:7a:8a:e6:19:9b:
b8:73:70:0e:d9:8e:8c:53:96:3c:7f:83:6f:aa:e6:cc:62:a0:
fa:46:7e:82:34:f4:a4:63:96:ab:d6:c0:75:86:24:d0:20:0f:
aa:b6:31:0b:60:06:b0:87:b9:a9:a7:a5:a0:46:7f:85:81:6c:
1a:72:28:27:5b:c8:d2:eb:eb:46:d4:cb:27:68:62:4e:16:d1:
49:b9:0f:9e:db:52:58:6c:28:31:67:ac:23:ae:1a:ab:ea:7c:
67:2a:e9:99:10:f8:de:cc:fc:3b:71:71:58:02:88:4d:c8:87:
fb:a9:50:5f:40:46:5f:90:0f:70:f1:6f:42:0c:80:d5:e3:bc:
01:ff:af:11:97:c7:74:bd:c6:23:77:f9:ba:02:2c:52:88:df:
96:90:87:7c:c7:fc:5a:7c:c0:63:34:a2:f1:02:30:b9:1f:9b:
e8:8e:01:54:6b:95:db:e8:82:37:45:5c:50:84:ae:92:d3:f7:
f6:86:80:46:af:2c:18:aa:b5:cd:dc:69:70:8a:46:1b:68:75:
3b:10:d1:92:1c:fd:a5:e7:3b:a0:11:e6:49:f0:b5:39:26:c3:
1d:d8:63:77:c5:54:dd:97:29:ce:5c:b1:1a:12:44:00:37:5e:
ca:3f:24:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:27 2026 by rpki-client