Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143252.roa
File: AS143252.roa (raw, json)
Hash identifier: es/xD92Y1vMuAzHA/jcmdTEUFYMDMVu2EbP98VolBso=
Subject key identifier: 0C:A8:C9:83:7D:B4:27:9A:46:51:BF:2D:79:F1:91:26:14:2F:FE:6A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1C7A9007CBB4D408A7FAA95678E7F836F743D4FB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143252.roa
Signing time: Mon 25 May 2026 01:38:11 +0000
ROA not before: Mon 25 May 2026 01:33:11 +0000
ROA not after: Mon 24 May 2027 01:38:11 +0000
asID: 143252
IP address blocks: 240a:a25a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:7a:90:07:cb:b4:d4:08:a7:fa:a9:56:78:e7:f8:36:f7:43:d4:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:11 2026 GMT
Not After : May 24 01:38:11 2027 GMT
Subject: CN=0CA8C9837DB4279A4651BF2D79F19126142FFE6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:97:1b:dd:9e:ad:31:b1:5d:ac:d5:52:5b:15:
e3:31:1e:cc:a4:c8:e9:10:88:0d:5a:ff:b8:bf:0d:
b2:bf:9f:41:15:89:7f:86:6c:c5:54:99:62:0c:7f:
67:4d:59:61:b8:4b:21:fe:f0:97:0f:cb:d0:9e:4d:
68:f5:03:1e:0e:1d:7c:65:35:40:eb:aa:65:78:c9:
1a:59:62:ce:a1:59:12:08:20:29:b8:01:3d:54:ef:
ac:3b:cf:fc:d0:c4:3e:8e:82:7d:03:23:69:33:22:
c8:82:ff:17:9e:58:6a:05:27:bb:d0:69:75:ab:2f:
89:9f:49:49:9b:b2:7f:fd:50:65:0a:73:e2:42:6c:
55:0e:83:56:99:18:1e:92:e5:7a:e4:e9:90:78:42:
cf:ec:69:93:af:6d:4a:6c:47:d8:b2:84:56:5b:b5:
ca:ad:9f:e5:02:29:b0:56:7b:d1:8b:ef:65:fe:82:
b3:a1:97:5a:6d:9c:43:45:66:4f:61:9c:10:c4:16:
58:e4:07:a6:e1:91:99:87:fe:ea:b2:e9:28:b2:4c:
e0:50:a9:d0:10:94:64:aa:69:ed:7d:86:80:76:80:
2b:69:fa:20:e8:00:fa:a7:77:0e:ff:cc:79:50:46:
a2:73:18:f9:ec:44:74:1f:15:a3:fb:76:40:60:12:
2a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A8:C9:83:7D:B4:27:9A:46:51:BF:2D:79:F1:91:26:14:2F:FE:6A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143252.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a25a::/32
Signature Algorithm: sha256WithRSAEncryption
04:ed:e8:0b:4c:9f:49:90:14:ec:ff:ab:14:75:b3:9d:b0:ee:
41:b6:02:25:30:52:11:44:ee:3e:93:e2:1e:91:88:a6:2b:38:
d4:10:39:47:da:39:79:c6:a1:67:a4:74:6f:fd:bf:5f:ad:61:
49:00:bf:8c:1e:b8:96:1b:a9:c5:17:b4:5f:25:85:55:a0:fe:
dd:cf:c5:a8:57:c3:3f:37:b5:6c:fd:38:cf:9b:e9:6e:6f:89:
38:9f:af:c9:83:49:f0:65:46:50:75:22:e7:db:9d:33:d8:83:
df:17:18:3d:fa:0b:68:66:7a:75:52:02:b8:5c:56:4f:00:56:
0e:65:3f:a4:b6:87:55:55:2f:96:a3:ec:86:93:4e:d8:1a:ef:
82:1f:bb:e4:95:eb:48:b5:4d:34:03:17:c7:97:ba:df:f5:55:
6d:70:96:e8:d5:88:07:9e:7f:bf:f4:f4:7d:73:de:39:f9:9b:
4b:4d:36:da:73:3b:5f:eb:06:dd:e6:31:06:6b:a4:48:f9:00:
9d:91:d8:d7:9c:4b:fa:85:c5:ac:21:8b:c9:49:34:89:e4:54:
26:4f:53:b3:93:db:af:34:1c:8b:37:bc:98:51:21:bb:fb:3a:
c4:f3:fd:fe:35:f2:6d:52:23:1f:60:01:8f:cb:b4:63:fb:05:
87:b6:a7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:02 2026 by rpki-client