Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143260.roa
File: AS143260.roa (raw, json)
Hash identifier: 8s4Pr7HM/Bm2mtNroPMBfWHDOAXG8uBpByS32MIAVYw=
Subject key identifier: 27:4F:42:AD:58:E0:3B:21:BC:7F:77:F9:B0:8D:E0:A3:B9:E9:93:98
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: CADC00C9AEEE8A920932250BFABBDE670C42A6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143260.roa
Signing time: Fri 22 May 2026 07:24:30 +0000
ROA not before: Fri 22 May 2026 07:19:30 +0000
ROA not after: Fri 21 May 2027 07:24:30 +0000
asID: 143260
IP address blocks: 240a:a262::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
ca:dc:00:c9:ae:ee:8a:92:09:32:25:0b:fa:bb:de:67:0c:42:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:30 2026 GMT
Not After : May 21 07:24:30 2027 GMT
Subject: CN=274F42AD58E03B21BC7F77F9B08DE0A3B9E99398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1e:a8:93:a3:d6:3f:11:a0:50:0a:11:80:46:
c5:77:91:31:79:8c:d5:3f:b7:41:b4:b7:0f:f3:c2:
75:ad:df:0b:48:af:8c:25:a9:ce:23:6c:0f:90:92:
fc:65:c6:c2:a8:24:b4:27:6d:f7:db:b4:83:82:96:
69:cb:ea:aa:94:d1:24:bb:ef:82:41:be:81:d8:90:
d2:c9:91:c4:e1:1e:24:1c:ed:8d:28:6c:30:aa:d7:
a3:17:58:7f:09:2b:f2:4c:30:eb:e9:7d:18:8d:86:
a1:95:65:69:6f:16:dc:5b:dd:25:dc:7e:fb:8f:02:
ef:6f:a6:96:c6:37:41:2c:96:dc:65:f9:6a:91:ae:
2f:1e:3f:88:f8:78:55:50:ac:db:f7:b3:47:94:b8:
bf:88:42:d1:ae:88:f6:f8:6f:97:7a:e4:e8:e7:67:
b5:72:58:42:a8:34:28:f3:b8:a5:c4:eb:bd:a0:75:
23:35:fd:b6:03:01:1d:e7:16:4d:af:29:0a:c5:0d:
35:9a:cf:55:82:30:8f:5e:92:f7:c6:5a:1a:49:21:
fc:4c:9d:22:8e:1d:1c:06:68:db:f2:68:33:17:d2:
e5:03:54:3e:05:2e:39:99:29:cc:e9:35:8a:51:50:
bb:95:80:df:b7:5d:b0:e6:66:d8:ce:3d:e2:0d:2c:
6a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:4F:42:AD:58:E0:3B:21:BC:7F:77:F9:B0:8D:E0:A3:B9:E9:93:98
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143260.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a262::/32
Signature Algorithm: sha256WithRSAEncryption
26:68:14:04:1c:4c:f2:8c:a3:57:53:e9:53:ba:e7:ed:4c:e8:
6b:dc:4e:68:a1:51:cf:ad:66:12:62:e5:1a:a1:13:53:37:f1:
0f:25:bd:c4:27:e9:32:d9:f5:4b:8a:08:a9:87:2e:aa:2f:aa:
ed:e7:68:83:9c:2b:76:dd:ed:d2:7d:b7:8d:50:f8:fe:e2:22:
4c:58:f9:f0:d1:db:ee:a2:70:7c:16:13:5d:71:80:76:ef:c6:
52:a9:fc:e1:a3:8c:0e:25:bd:e7:b5:52:85:ad:ef:6e:b2:6d:
bb:c3:59:f7:96:69:6f:b5:9b:e9:60:aa:70:3c:eb:94:98:95:
a3:1d:57:55:82:3b:7b:0b:11:c2:5c:37:76:a9:6a:87:a5:5d:
a1:e5:75:74:21:02:00:e8:0b:77:41:e0:12:a2:c6:5a:31:b9:
98:9c:ac:26:22:b3:cd:65:c6:ef:a8:f2:3c:9a:57:b6:82:5b:
47:64:7c:c9:a9:5a:61:ad:6f:34:3f:98:84:15:46:c3:ab:9c:
88:5e:ae:d6:1c:2a:1c:ae:72:66:82:6a:8a:30:22:40:86:8e:
99:25:14:a0:3d:5a:e8:8a:cd:62:f1:18:29:f9:d8:25:27:15:
17:07:e9:65:41:c0:7b:e6:d0:d7:f9:78:25:6b:2a:e8:3a:37:
3c:02:78:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:19 2026 by rpki-client