Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143269.roa
File: AS143269.roa (raw, json)
Hash identifier: 2SvslYhoRdMFPfdpJiIF4pO33FIFKepvJhKXvo7yuqo=
Subject key identifier: A5:7B:BA:D7:01:C4:72:31:1A:D7:0B:64:FE:57:F1:3B:3B:3B:85:FF
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 65B2F6937607305383AB64798AE2706FA777F7DD
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143269.roa
Signing time: Fri 22 May 2026 07:24:29 +0000
ROA not before: Fri 22 May 2026 07:19:29 +0000
ROA not after: Fri 21 May 2027 07:24:29 +0000
asID: 143269
IP address blocks: 240a:a26b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:b2:f6:93:76:07:30:53:83:ab:64:79:8a:e2:70:6f:a7:77:f7:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:29 2026 GMT
Not After : May 21 07:24:29 2027 GMT
Subject: CN=A57BBAD701C472311AD70B64FE57F13B3B3B85FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e4:58:44:b6:6a:da:52:e3:36:c7:c4:45:b8:
d3:8e:4a:9b:8e:4e:97:19:76:88:84:0c:97:da:0e:
7b:00:03:a5:1a:29:b0:c5:d5:36:82:72:5b:c0:bf:
e9:97:7a:78:93:c0:0e:e1:b8:08:6f:1b:10:a5:e9:
c7:cd:08:ae:a1:b7:e6:9a:fd:a8:24:7f:14:a6:f5:
1e:9d:25:9d:f7:be:d0:10:f9:f5:b4:57:83:83:77:
4d:63:a7:a2:29:0d:da:7f:2d:ae:b0:42:5a:61:06:
2a:41:de:0c:c2:dc:5b:bd:d8:1f:b1:e3:a6:6d:95:
72:72:28:52:02:7c:bf:b9:c8:72:08:3e:d4:c5:d4:
3f:c2:f2:a1:53:e8:55:be:8f:6a:cb:cc:a5:77:b4:
df:1a:14:d1:b7:e8:b4:8e:19:59:f2:f3:b1:06:60:
16:7e:56:ea:19:4c:24:8a:60:aa:2f:1c:3d:66:99:
15:a0:23:41:2e:22:b6:3a:b8:79:02:69:a8:b0:be:
3c:19:b7:ba:a3:30:23:95:a5:25:ff:e8:f7:85:fe:
cd:a8:4d:e6:8a:bb:bc:d7:b1:44:81:22:89:96:23:
14:e5:e9:00:e9:79:dd:25:b2:01:63:8a:72:2e:0f:
db:bf:08:27:d4:cb:72:7c:e6:d9:bb:c0:93:ed:84:
b5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:7B:BA:D7:01:C4:72:31:1A:D7:0B:64:FE:57:F1:3B:3B:3B:85:FF
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143269.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a26b::/32
Signature Algorithm: sha256WithRSAEncryption
9c:55:31:2d:21:c7:d3:95:f4:eb:04:6a:82:a6:a1:fa:d8:8b:
07:14:e0:4b:86:e2:5e:df:08:1b:83:e7:e9:d2:a1:86:10:da:
15:18:5c:7f:f0:7d:46:f8:f3:a5:b5:65:a5:c4:22:2b:20:0c:
e9:04:38:ad:71:e0:b8:c7:8b:35:06:ed:f7:47:a1:58:1b:ac:
95:9f:73:1f:de:52:e6:7b:47:00:21:3d:d9:5d:b0:92:4c:85:
10:93:7a:8f:fb:03:50:e0:8a:c9:91:c4:80:99:2a:5b:bf:5d:
02:43:14:5d:f8:8d:2b:b1:c8:42:e6:98:49:05:94:50:7c:02:
97:90:dc:a2:3f:29:54:32:07:b4:73:3b:02:b1:22:b3:8f:e4:
dc:8f:c6:15:9b:ec:fa:28:aa:35:e7:f7:7b:b9:d3:b4:4a:f9:
89:34:bf:23:c6:96:f6:6f:7b:b0:59:d6:8c:a7:65:d7:61:e8:
a7:31:c2:11:35:5d:18:70:f3:37:5d:ab:45:d2:97:64:33:9d:
29:20:9f:3b:ef:02:1b:ba:af:22:0e:b4:64:dc:a7:a2:a2:06:
ec:00:c8:be:be:96:12:80:af:96:f9:01:eb:b2:88:45:40:03:
7e:34:4f:29:2e:90:7b:0e:88:92:49:a6:17:e2:f3:e6:8f:45:
c4:47:0b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:19 2026 by rpki-client