Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143312.roa
File: AS143312.roa (raw, json)
Hash identifier: cEdKFIDYQl5/Z6x9nqxVlNW0IabciNOfKX5yCykZEUo=
Subject key identifier: A0:32:4D:C9:30:55:96:E9:91:E8:20:90:6E:D2:0C:3D:A4:76:75:9D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4C3A983DDA5CD2D1DB6229498ED0A5B90BC28BD6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143312.roa
Signing time: Fri 22 May 2026 06:28:06 +0000
ROA not before: Fri 22 May 2026 06:23:06 +0000
ROA not after: Fri 21 May 2027 06:28:06 +0000
asID: 143312
IP address blocks: 240a:a296::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:3a:98:3d:da:5c:d2:d1:db:62:29:49:8e:d0:a5:b9:0b:c2:8b:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:23:06 2026 GMT
Not After : May 21 06:28:06 2027 GMT
Subject: CN=A0324DC9305596E991E820906ED20C3DA476759D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:32:b8:a6:48:0d:cf:d5:e2:a0:a2:ba:47:3a:
a8:a7:21:91:fc:be:a6:d4:3c:77:18:9f:6d:6a:5a:
ab:a6:a1:fc:a7:fd:e2:9e:f7:f0:1b:73:56:7c:0d:
3d:da:a5:91:18:7d:87:95:be:b4:11:de:c9:2d:7e:
08:06:34:b4:24:f6:b0:81:0f:d3:c8:45:b5:21:8b:
52:2e:8f:29:2f:dd:96:5a:7b:3a:31:f1:5d:dd:37:
29:fd:b1:6c:1a:56:84:bb:d6:2a:f9:f3:c7:17:15:
d3:17:e2:f9:56:cc:e8:f4:56:cd:61:e0:d7:c5:75:
bb:36:fc:b1:81:73:ea:08:4b:62:ac:30:9b:0d:07:
ca:63:f6:e4:4e:8f:40:d5:ce:77:bd:d3:fe:65:bd:
30:04:78:2a:6d:b3:f1:00:0d:9d:f4:cf:e1:e3:df:
8f:4f:49:99:f9:e3:9d:18:b8:03:63:c0:a9:b9:7b:
c4:dc:4c:45:49:f1:ae:e6:58:fd:69:2b:66:c2:8e:
77:07:ee:c4:41:39:c9:77:cd:18:99:ef:e0:53:4a:
50:ad:cd:bd:56:35:d5:7a:42:69:69:35:d3:11:5d:
ee:94:9d:07:76:4a:4a:f9:41:7f:67:a7:b4:55:f8:
4e:c7:61:38:37:da:9f:0a:c2:5e:e9:f9:7c:86:a4:
e8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:32:4D:C9:30:55:96:E9:91:E8:20:90:6E:D2:0C:3D:A4:76:75:9D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143312.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a296::/32
Signature Algorithm: sha256WithRSAEncryption
8e:5e:fe:8a:88:9e:db:0e:72:79:54:2a:9c:c7:af:12:90:99:
e5:69:82:09:1d:4c:96:62:8f:d3:14:7d:e4:8a:7e:1f:04:bd:
77:54:3f:c3:9b:8e:6c:83:50:af:86:d3:6e:bc:64:f2:1f:de:
63:9e:1b:3f:ab:03:83:04:f9:e3:7b:55:5b:5b:ff:60:3c:d2:
e0:be:3e:7b:71:47:e2:34:99:ed:d1:ea:8f:85:87:cd:44:c4:
00:b5:aa:eb:f7:f5:75:4c:97:ec:09:94:0c:eb:f2:16:3b:ad:
c5:9a:cc:94:18:19:40:3b:d5:f5:c8:22:9a:ff:ff:8f:7a:f3:
bc:4b:46:d3:69:35:d9:fc:bb:58:d3:56:b0:fc:51:28:cd:ba:
5a:00:98:45:b2:8f:31:f7:f8:43:b8:9c:96:42:15:1a:0e:1c:
b9:a6:22:64:3f:ae:0d:e0:ef:d2:63:a2:92:03:08:7f:e0:f0:
14:bd:cc:8c:3e:87:90:38:1c:27:68:e4:2d:64:4d:9e:18:f1:
d6:f3:d7:18:3d:91:c7:34:63:8d:1f:2d:bd:f0:71:2c:00:4c:
59:57:77:c3:f1:10:af:6e:88:37:7e:49:20:e7:90:ba:e8:63:
6f:5e:b3:e0:c3:c8:9d:61:68:ef:2c:b0:04:8e:be:5e:ed:85:
87:a5:90:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:10 2026 by rpki-client