Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143239.roa
File: AS143239.roa (raw, json)
Hash identifier: FTI0GG8HOgCFBC6NneXO7r7+HT6WxbX/lWbm4C7QFFM=
Subject key identifier: F9:C5:8E:64:35:46:E6:F1:1A:AC:52:A3:5B:28:5B:E5:FB:94:EE:BD
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5BD616FF4609EC25E5051713C96D8AAFDDD4EF59
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143239.roa
Signing time: Fri 22 May 2026 06:58:31 +0000
ROA not before: Fri 22 May 2026 06:53:31 +0000
ROA not after: Fri 21 May 2027 06:58:31 +0000
asID: 143239
IP address blocks: 240a:a24d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:d6:16:ff:46:09:ec:25:e5:05:17:13:c9:6d:8a:af:dd:d4:ef:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:31 2026 GMT
Not After : May 21 06:58:31 2027 GMT
Subject: CN=F9C58E643546E6F11AAC52A35B285BE5FB94EEBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:60:10:20:51:60:1e:74:b3:f5:23:1d:d4:1a:
56:56:0e:20:cb:00:60:d7:a2:90:34:ca:cf:16:e1:
17:f8:4c:d3:52:dc:b8:3f:fd:a4:b4:cb:f4:cc:cf:
e0:1e:0c:87:22:b8:79:31:4f:e8:bd:df:78:b3:8d:
de:7c:ab:94:37:71:7f:b2:3c:ae:60:fa:2f:4c:b4:
35:db:ac:5d:2e:34:94:5c:69:79:ea:81:32:f8:3d:
f0:5c:65:9d:0a:e9:65:26:62:a9:93:9e:74:33:be:
8c:0b:ff:1a:ab:ba:52:b1:e9:89:9e:84:80:bc:ad:
38:e6:22:ee:1a:d2:96:0a:68:f9:05:68:b2:b1:ae:
65:b4:6b:27:4d:0b:51:62:59:21:12:9e:70:be:77:
59:53:81:7a:46:34:80:35:d2:59:9d:04:91:13:d3:
fe:a7:c8:c5:53:0d:2c:df:bb:34:db:e0:c3:55:17:
12:94:b1:74:4f:3f:0a:a5:ef:25:12:40:5c:69:53:
6d:c3:10:da:83:5b:2a:ac:2d:f1:6a:a2:db:d4:f1:
d0:cf:0c:62:0e:4a:25:2b:2d:66:37:4f:aa:b9:c1:
76:a3:4a:f0:46:d2:e5:14:84:17:73:2b:69:7d:02:
df:17:38:8d:72:bd:f5:b0:58:2c:82:99:19:0f:c3:
8e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C5:8E:64:35:46:E6:F1:1A:AC:52:A3:5B:28:5B:E5:FB:94:EE:BD
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a24d::/32
Signature Algorithm: sha256WithRSAEncryption
7f:1a:fb:40:20:36:04:aa:5a:8d:d9:9b:69:12:2f:43:92:28:
df:3d:33:78:83:1f:f0:b4:67:57:11:bb:a6:bd:a3:f4:b0:66:
d1:f3:fc:2f:b3:0c:13:16:7d:e4:55:3f:83:8b:ec:03:f2:e6:
e8:9d:a1:a8:6d:ec:ad:3a:6c:20:30:32:8b:9d:36:ad:37:84:
4d:11:57:0d:ed:7e:49:d0:3f:eb:8d:c2:37:ac:d6:fb:e3:2b:
27:fc:91:0a:59:52:6a:99:f9:ac:4f:36:bb:a4:61:d9:6c:c8:
0f:47:e9:51:f6:0e:aa:14:90:9a:d5:be:80:f9:ab:3b:44:3e:
70:15:c4:35:33:3a:17:20:1a:55:2d:aa:91:4e:2a:a8:79:4f:
18:41:ba:dd:84:5d:00:90:eb:48:3a:83:5c:27:6a:17:67:69:
17:de:fc:6b:5c:41:29:b4:4b:56:ab:32:ad:f6:df:6c:0b:20:
bb:66:ad:24:3c:47:cc:d6:90:8a:0d:98:87:d4:e2:c2:5f:4a:
8f:46:b7:2c:9c:05:02:5d:b7:fa:f7:eb:89:73:07:fa:6f:63:
92:7f:cb:00:02:ea:18:6e:31:b6:a6:1e:4e:b9:98:f8:e5:a2:
ef:5d:f8:c9:35:34:65:33:53:12:6d:89:75:e0:a0:57:1c:fb:
eb:65:b4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:46 2026 by rpki-client