Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143293.roa
File: AS143293.roa (raw, json)
Hash identifier: S6P69cPERn4BPSzZ8+icAiEeGv/Ujrr7QPGdlHc9hgY=
Subject key identifier: 91:5B:9D:64:81:B4:5C:59:D0:8F:8C:AC:BC:4A:09:30:4D:CC:7A:A6
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 61AA17BD60118F18B17180125E34AD868DE90433
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143293.roa
Signing time: Tue 26 May 2026 08:52:51 +0000
ROA not before: Tue 26 May 2026 08:47:51 +0000
ROA not after: Tue 25 May 2027 08:52:51 +0000
asID: 143293
IP address blocks: 240a:a283::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:aa:17:bd:60:11:8f:18:b1:71:80:12:5e:34:ad:86:8d:e9:04:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 08:47:51 2026 GMT
Not After : May 25 08:52:51 2027 GMT
Subject: CN=915B9D6481B45C59D08F8CACBC4A09304DCC7AA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:38:69:95:b9:af:ca:91:36:d2:91:14:74:3e:
d0:7a:cd:57:ac:b8:d7:63:7d:f9:be:b9:34:da:ba:
8b:06:5b:16:32:b3:75:b8:c3:d6:85:11:b4:f2:61:
fc:b4:68:ae:29:a1:00:4e:37:da:19:78:02:a7:b8:
56:91:4b:73:68:d1:fc:88:17:d0:35:7d:be:86:48:
35:b1:8d:44:aa:c2:9b:98:90:f9:55:dc:64:0c:a4:
54:e2:95:40:02:e2:df:03:51:a9:36:fc:5c:58:0d:
05:7a:ad:9a:c1:39:f9:6f:b2:06:48:8c:d8:0e:ce:
1d:5d:df:36:13:c1:f6:a2:61:24:d7:0e:2a:77:ac:
77:18:4b:50:21:aa:32:21:1b:5e:53:09:83:4d:21:
0f:15:36:36:ed:2a:c5:de:a3:cd:e9:e7:92:d1:55:
38:76:21:46:87:c6:d2:d2:9f:b7:76:77:8f:90:b2:
2a:7b:bb:3b:e0:18:f7:03:78:1e:44:24:11:cb:84:
36:d7:c4:10:2b:70:e7:cd:0a:fa:c8:a1:5e:22:0b:
f6:d9:5b:83:45:ea:8c:ea:1a:cc:6e:7d:60:08:99:
a4:0d:92:98:ab:2a:a2:07:8d:74:d3:2c:98:9c:a4:
fb:be:23:ca:0e:b3:00:c6:25:b1:0f:8b:03:d2:d0:
08:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:5B:9D:64:81:B4:5C:59:D0:8F:8C:AC:BC:4A:09:30:4D:CC:7A:A6
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143293.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a283::/32
Signature Algorithm: sha256WithRSAEncryption
71:46:17:a7:c7:15:bf:7c:ed:34:79:d5:37:92:84:b1:b6:3a:
0c:95:27:62:be:ba:b0:b7:d8:b8:c2:56:d2:f4:58:47:44:d1:
b3:f9:cc:af:71:97:a2:76:53:42:86:82:88:a7:83:50:34:5c:
55:f1:a6:e0:55:ad:3f:78:6b:fe:d9:eb:f4:4b:89:14:05:c4:
ac:39:87:ca:a4:15:79:73:a2:dd:48:56:a5:b8:a6:b8:ee:af:
01:dc:ce:b7:36:1f:bd:9e:cf:66:88:45:c9:28:2d:cf:9a:83:
f2:d0:02:c7:78:de:c5:7e:1a:01:3a:1c:53:b0:91:0e:11:f6:
d2:12:1e:4a:96:35:5a:21:b5:8b:8a:a4:19:1c:59:45:c3:13:
db:c9:4c:48:cd:d1:7b:62:36:71:59:3e:ff:86:b4:42:61:2d:
ce:be:ab:58:af:0c:a5:4d:a9:52:5d:48:77:dc:77:c5:01:bc:
b7:6f:82:02:29:c7:2f:18:67:41:5b:59:14:80:31:84:e3:92:
7b:98:b1:c7:5f:9b:42:c2:16:df:2a:23:08:82:72:8a:1e:45:
1c:db:01:34:1e:09:21:26:dd:a9:a7:3d:ac:b7:2f:d1:16:10:
70:ca:38:76:2f:f9:58:10:31:07:14:da:b7:14:8a:01:31:08:
66:16:47:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:30 2026 by rpki-client