Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143243.roa
File: AS143243.roa (raw, json)
Hash identifier: ECJgHxk9/S1C3B27ct/aYF0uM5zfLC3RrQJf3Wca5sI=
Subject key identifier: 9F:95:B4:5E:32:A4:D8:60:48:55:38:02:8D:8C:EE:AF:E3:C3:9D:37
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 646140F996903DF70B35B9409C1195FCFCAA61A0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143243.roa
Signing time: Mon 25 May 2026 01:38:06 +0000
ROA not before: Mon 25 May 2026 01:33:06 +0000
ROA not after: Mon 24 May 2027 01:38:06 +0000
asID: 143243
IP address blocks: 240a:a251::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:61:40:f9:96:90:3d:f7:0b:35:b9:40:9c:11:95:fc:fc:aa:61:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:06 2026 GMT
Not After : May 24 01:38:06 2027 GMT
Subject: CN=9F95B45E32A4D860485538028D8CEEAFE3C39D37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:91:61:2d:3e:03:4d:65:42:12:ca:71:af:f6:
41:98:cf:73:6e:14:9c:cd:7d:81:e0:cc:eb:50:cf:
60:c9:e0:ee:49:24:b0:6b:35:0b:74:b7:00:42:b5:
d6:17:87:e2:87:94:b8:01:20:40:1f:e1:db:57:af:
1c:12:1b:1d:56:28:8d:34:14:df:cc:2b:d2:e7:d3:
10:2d:59:11:74:b4:69:e9:da:73:3b:72:ce:13:d9:
ba:dc:37:64:93:f1:fe:3a:41:a7:75:12:2a:50:1b:
cb:c7:2b:c0:2f:72:2f:c3:4e:a0:59:f8:a1:86:98:
a2:ce:ad:66:ba:52:fd:fe:50:93:f7:cc:17:9a:ac:
69:94:41:d2:4f:d9:3d:a5:cb:63:d7:ec:7e:1a:d2:
9e:72:12:f2:e5:38:6d:de:75:9b:5b:7f:bd:5c:b3:
49:54:df:67:ff:9a:e0:4e:d4:73:f8:b1:72:09:64:
2e:35:55:b3:c2:ff:60:d2:38:2e:2c:16:3f:84:c6:
8b:72:da:11:63:10:b1:06:8a:a5:b2:66:d0:19:00:
7c:0e:e6:d5:9e:56:de:62:93:b2:a2:73:ab:68:d5:
5e:13:40:73:4b:db:65:01:d2:da:01:11:02:19:b6:
df:0a:f0:7e:7d:ed:83:e4:f6:60:b2:fc:3b:41:bc:
68:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:95:B4:5E:32:A4:D8:60:48:55:38:02:8D:8C:EE:AF:E3:C3:9D:37
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143243.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a251::/32
Signature Algorithm: sha256WithRSAEncryption
b9:f1:90:66:44:68:dc:37:98:7a:0c:2d:02:ba:58:8c:52:2b:
9f:6c:6b:91:3b:a2:21:8b:27:7b:c2:a5:11:80:e9:be:51:21:
bb:d9:00:2b:ad:05:ff:12:49:d4:47:aa:3b:f1:79:f8:e7:5c:
f8:f9:e0:e0:44:00:da:21:d2:3b:e7:fc:35:02:30:49:83:5c:
6f:23:24:72:db:06:3f:3e:05:c7:1f:2a:e9:b1:da:cf:ea:df:
5e:36:32:02:48:32:68:f1:eb:7a:ac:6a:02:68:da:d1:4b:9b:
3f:41:c0:0d:7a:e0:37:34:8d:9a:14:21:ee:12:f5:a6:55:90:
22:73:d8:24:d3:e4:e1:b0:15:85:fb:e2:b0:32:99:16:52:b9:
45:a8:e3:bb:28:73:ae:19:07:6b:28:0f:21:26:77:5b:95:63:
2a:ff:17:7a:f5:3f:41:91:06:db:e2:2b:e5:c7:d8:73:ca:96:
a7:21:54:cb:4a:b3:43:fa:9a:bd:02:a5:e2:9f:02:91:04:25:
1d:06:65:64:43:36:9b:fa:05:b8:90:35:88:5e:f7:45:87:07:
62:56:c3:36:ba:0c:62:00:6a:db:85:29:ec:42:36:6f:28:fb:
e0:d7:56:29:5b:5f:fd:87:78:d8:f4:49:f3:44:43:10:88:9e:
6c:df:7f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:55 2026 by rpki-client