Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143257.roa
File: AS143257.roa (raw, json)
Hash identifier: D/hMkng9mL6DlWI5lVWmLTfC7sVA7W8bV1MbUqfQdzE=
Subject key identifier: CB:89:70:95:48:E1:86:B0:0A:B2:84:3C:16:2A:18:E7:65:43:67:74
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3CF6D6D35FAC8558143055A6AFC49E595A56A9F5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143257.roa
Signing time: Tue 26 May 2026 02:35:02 +0000
ROA not before: Tue 26 May 2026 02:30:02 +0000
ROA not after: Tue 25 May 2027 02:35:02 +0000
asID: 143257
IP address blocks: 240a:a25f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:f6:d6:d3:5f:ac:85:58:14:30:55:a6:af:c4:9e:59:5a:56:a9:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:02 2026 GMT
Not After : May 25 02:35:02 2027 GMT
Subject: CN=CB89709548E186B00AB2843C162A18E765436774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b5:75:9e:c0:a5:16:af:b2:b6:2e:32:8a:b5:
37:f1:fb:20:9c:d0:86:da:35:fa:ca:c0:51:5e:6f:
1a:f8:90:9c:63:87:b9:28:4b:bf:3b:bb:8b:33:0a:
62:17:16:b4:52:2d:6e:17:14:2b:5c:20:62:3d:52:
ff:c3:4c:d3:92:d4:60:a5:00:9d:29:fe:c4:89:bd:
61:42:20:e6:03:5e:26:97:92:6b:e8:ba:9b:d5:4b:
57:26:51:3d:96:5d:7f:55:7f:76:e6:98:54:b8:85:
b2:15:31:7f:ab:c9:04:ac:96:3c:07:49:71:74:2c:
45:f1:35:61:e3:d6:84:74:3f:d5:c2:6b:07:82:d0:
4e:ab:f4:8f:d6:2d:da:dd:4e:12:f5:66:17:c1:a8:
70:d3:84:fa:94:bb:aa:5f:cc:48:4f:63:ff:42:20:
40:b6:71:09:d0:33:4d:a3:6b:d2:2e:90:33:d2:b2:
12:10:e2:ae:e5:7f:74:08:9d:2d:39:b8:db:31:07:
ba:50:82:8f:47:6f:4e:28:b7:f3:66:b0:5a:a9:ec:
e9:53:03:83:63:70:9a:4d:38:34:0a:d1:09:e4:13:
38:48:bc:70:f5:30:74:74:b0:c9:9c:30:0a:2b:eb:
9d:85:80:e5:06:15:40:cc:5c:9c:99:f5:62:d8:8e:
38:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:89:70:95:48:E1:86:B0:0A:B2:84:3C:16:2A:18:E7:65:43:67:74
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143257.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a25f::/32
Signature Algorithm: sha256WithRSAEncryption
29:37:04:90:0a:7f:78:3b:18:46:9d:fc:00:5b:51:38:a9:90:
ab:0f:c3:1e:f3:d5:b2:5e:7e:fe:ab:23:49:ef:93:46:31:aa:
1c:b2:9b:7d:71:a4:23:1a:da:41:ec:2d:f0:60:34:bd:f4:ae:
3b:86:dc:ea:fc:14:c1:67:de:84:bf:9f:79:e8:bb:d2:ac:cd:
32:c1:7a:c9:35:c5:e2:e9:e3:1e:95:8d:04:0d:6f:7f:75:db:
60:d0:8c:09:17:26:97:95:b5:6d:fa:2e:c7:62:b7:f0:18:4a:
ec:ff:eb:21:63:d5:aa:06:dd:88:4c:46:94:9d:df:a7:bb:c7:
2f:11:a3:c5:ba:02:dd:85:09:eb:96:2b:d0:26:e2:23:67:7b:
17:92:65:dc:c7:06:ba:d0:59:d9:17:c7:31:43:5f:e0:3b:bd:
c5:e3:5a:24:cd:4c:0e:fc:88:5d:4f:c0:8c:05:d5:92:78:bf:
ac:2d:14:a3:b7:a5:e9:bc:20:44:0c:6d:2f:e4:7a:ab:f8:42:
1d:58:fc:f5:32:2f:32:83:5f:2d:88:ff:44:71:9f:41:3c:b2:
7f:3c:36:22:81:33:0b:e6:94:c0:fa:c9:8a:74:0d:2a:01:74:
62:89:4a:9a:67:ac:fe:5e:96:a6:ce:5d:b0:47:5c:4e:0f:95:
ee:8b:6d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:01 2026 by rpki-client