Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143311.roa
File: AS143311.roa (raw, json)
Hash identifier: BhFBAs3KOgZrVXJ3JVaMvunG7a6aT//Py3A+CnLz3+A=
Subject key identifier: 38:37:CB:12:13:04:8E:98:0F:15:B8:05:64:F6:FD:7C:80:84:2E:AA
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 12D5BB0652A7FFCD90C71CDF6BC914E5E286345F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143311.roa
Signing time: Tue 26 May 2026 08:52:43 +0000
ROA not before: Tue 26 May 2026 08:47:43 +0000
ROA not after: Tue 25 May 2027 08:52:43 +0000
asID: 143311
IP address blocks: 240a:a295::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:d5:bb:06:52:a7:ff:cd:90:c7:1c:df:6b:c9:14:e5:e2:86:34:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 08:47:43 2026 GMT
Not After : May 25 08:52:43 2027 GMT
Subject: CN=3837CB1213048E980F15B80564F6FD7C80842EAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:17:70:e2:92:88:52:21:22:b1:9e:04:35:27:
5c:e3:bb:2c:30:8a:21:3e:61:ac:56:3d:9a:82:3d:
a5:62:9b:ae:83:d6:8d:cd:63:f8:d7:5b:5a:26:44:
b4:3d:65:71:aa:74:68:b6:3d:e4:69:dc:b4:5e:29:
ed:ce:80:05:9a:a3:8a:b1:04:b1:9f:4a:d6:8e:21:
3a:21:49:a4:2b:88:dc:74:bd:b4:be:26:2e:5e:b4:
1b:99:7f:ae:e7:8e:47:7d:5a:49:8d:74:7c:7b:0f:
19:bd:47:65:f1:8d:cc:8f:d0:79:60:36:d1:fd:c7:
e1:c3:d0:5f:4c:22:73:94:29:6f:83:87:05:1b:92:
1a:36:06:f8:aa:3e:6c:ba:1f:5a:7e:d7:93:3e:09:
d1:ad:e6:2f:13:2b:c1:cf:53:a5:8d:23:75:37:1d:
21:32:f9:e9:85:e2:36:10:25:e3:77:37:0a:84:6a:
bf:53:83:a8:30:04:0d:7f:92:5d:ee:84:7b:5b:ea:
11:e4:91:13:83:4b:c2:98:66:6a:18:9f:b2:f5:e8:
e4:36:3b:a5:13:6b:2e:fa:22:6e:6d:a9:70:f2:e0:
01:aa:2c:6e:cf:53:58:5a:93:ce:23:7e:87:f8:28:
7c:3a:e6:ef:4b:9a:e2:1e:56:4c:e3:de:87:f0:06:
98:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:37:CB:12:13:04:8E:98:0F:15:B8:05:64:F6:FD:7C:80:84:2E:AA
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143311.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a295::/32
Signature Algorithm: sha256WithRSAEncryption
31:e0:2b:70:ed:c0:c9:92:58:6c:6b:2b:69:9b:5b:1d:42:b1:
b9:0f:b7:e8:b9:1c:a0:c7:14:f8:c5:01:c0:9f:8c:84:17:bf:
85:4e:63:21:6d:30:60:87:06:7f:ab:e0:cc:6c:f6:9e:9e:49:
c7:2e:45:30:fd:ab:a4:40:dd:e5:4f:dc:52:4d:b3:c5:7d:d4:
42:86:e7:03:fb:51:ee:e5:b8:4d:25:0b:b0:72:05:d5:fb:9e:
76:ee:9b:45:67:64:10:b2:d7:5a:21:53:92:fc:ed:3e:c2:2c:
7b:09:e0:b3:07:8e:07:0f:c0:e8:5e:19:8f:6e:45:e4:9e:a8:
fc:2e:e1:71:3b:f4:ba:ae:3c:70:a4:e6:d3:c5:7f:51:11:0a:
1c:ee:ac:e5:d2:2e:28:c6:34:02:ba:2f:87:b2:74:df:b4:ae:
36:55:08:2a:a3:c5:14:b9:90:2c:48:e5:0a:19:fc:8d:23:9d:
1d:d0:b5:d1:79:71:f2:17:96:41:2c:90:b4:77:0a:8e:52:56:
14:f5:51:e8:37:93:ad:50:a5:b6:28:f6:e4:fc:1b:29:44:96:
27:ee:b2:44:25:d0:9b:c2:97:06:9b:f3:34:63:19:50:36:71:
d6:5a:78:ca:e4:17:64:dc:3c:b4:5d:ed:82:5e:28:86:f6:5f:
db:9b:96:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:00 2026 by rpki-client