Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143297.roa
File: AS143297.roa (raw, json)
Hash identifier: JgeAcW1GaRr2Bp2LtD2Em4OGO8P/F49M3xUqOV+B2KI=
Subject key identifier: 96:37:71:3F:1F:71:24:9A:2A:1A:30:8D:60:FE:ED:0E:AB:CF:2F:73
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2E341E560B3D7F821855F28EE86428B8F7AFBA85
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143297.roa
Signing time: Fri 22 May 2026 06:46:33 +0000
ROA not before: Fri 22 May 2026 06:41:33 +0000
ROA not after: Fri 21 May 2027 06:46:33 +0000
asID: 143297
IP address blocks: 240a:a287::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:34:1e:56:0b:3d:7f:82:18:55:f2:8e:e8:64:28:b8:f7:af:ba:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:33 2026 GMT
Not After : May 21 06:46:33 2027 GMT
Subject: CN=9637713F1F71249A2A1A308D60FEED0EABCF2F73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1f:aa:e7:a1:e4:f0:7c:c7:fb:44:7d:b8:b3:
d1:83:7a:d3:d6:57:31:ff:d1:12:df:cd:c5:f0:51:
85:18:b6:3f:a0:2b:80:5f:1e:cf:fa:a4:99:7f:d7:
d2:f0:70:29:bd:eb:59:1b:34:43:f3:2e:71:3b:a2:
c4:1b:da:56:35:9f:e2:51:94:3d:24:28:80:f5:a7:
78:39:bd:d8:aa:bd:4d:da:a0:f6:b7:ee:61:af:1f:
f8:2e:5e:cb:39:56:92:55:27:2b:b8:dd:71:66:6f:
de:74:8f:7f:70:95:e1:38:c8:f2:84:2b:5d:e0:cc:
f9:2c:75:87:7c:fd:52:9f:03:66:cb:98:49:e5:fd:
fd:51:4e:3f:56:1b:d8:14:e7:c8:ef:dc:57:6d:b0:
a8:c1:9b:c6:ea:8c:a6:ae:42:df:24:68:4f:43:97:
e1:78:2b:9a:7e:70:60:30:7b:83:4f:da:db:b8:dc:
ff:32:a2:81:10:ed:b2:a0:7c:4c:94:07:84:be:ae:
ee:8c:7e:ff:a2:16:46:e1:e4:3d:4d:85:f2:24:20:
95:38:ad:02:f9:56:4f:42:07:a8:d6:17:08:d7:b5:
e2:50:8c:82:27:a6:84:67:51:83:63:28:ba:44:8f:
23:59:09:e5:36:f5:f9:52:d1:ba:33:8e:d4:e3:42:
57:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:37:71:3F:1F:71:24:9A:2A:1A:30:8D:60:FE:ED:0E:AB:CF:2F:73
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143297.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a287::/32
Signature Algorithm: sha256WithRSAEncryption
10:fb:07:4f:20:34:63:77:d2:61:8f:49:36:e8:43:22:c3:95:
18:38:7e:f7:3a:ab:92:e3:57:c0:58:db:20:e2:e9:37:ea:e1:
8a:69:02:02:e6:5b:0a:b5:10:b6:5f:47:90:6e:94:63:70:23:
c1:b4:81:aa:78:df:50:42:6b:fa:1e:74:ce:fc:c1:18:c9:b5:
36:bc:a0:af:bc:8a:3b:17:b4:6d:ed:9d:6e:92:94:94:2d:71:
aa:bd:b2:f5:30:7f:0f:2d:1c:af:c0:72:13:0b:82:e0:e8:1e:
07:a1:ad:78:57:7e:bb:18:47:7b:ec:dc:b5:93:4c:a1:97:c7:
fd:50:c3:d1:c3:1c:e0:aa:66:6e:e5:f0:8f:38:0d:64:e4:13:
6c:5c:45:45:cc:63:40:51:30:1e:ca:00:72:24:1a:e0:8e:96:
4e:65:7c:f1:ae:08:7c:3e:58:48:32:e5:66:e9:e9:07:7d:71:
6a:1b:ea:44:74:b0:07:5b:ca:4c:a1:a9:9b:be:47:97:1d:3c:
c0:e9:65:c5:f3:44:e5:aa:0e:0d:64:be:94:f5:6f:0e:8f:53:
08:52:e6:26:18:40:9d:15:ac:7c:50:d0:25:03:ad:bf:ee:01:
52:bd:1c:55:02:9f:f4:01:28:3f:58:1b:5e:93:f7:87:a9:e5:
0e:2e:1c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:24:26 2026 by rpki-client