Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143318.roa
File: AS143318.roa (raw, json)
Hash identifier: Tr0oIQlibB8gUDtIJ4rK8tqv54X4sf2dse225wit6IU=
Subject key identifier: 37:23:81:70:F2:D2:B4:1D:C4:7E:17:1A:58:EA:D2:29:04:BF:7F:7C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 14D7B515C0B4C3406442BBD41E587B2C7C03106E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143318.roa
Signing time: Fri 22 May 2026 04:07:59 +0000
ROA not before: Fri 22 May 2026 04:02:59 +0000
ROA not after: Fri 21 May 2027 04:07:59 +0000
asID: 143318
IP address blocks: 240a:a29c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:d7:b5:15:c0:b4:c3:40:64:42:bb:d4:1e:58:7b:2c:7c:03:10:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:02:59 2026 GMT
Not After : May 21 04:07:59 2027 GMT
Subject: CN=37238170F2D2B41DC47E171A58EAD22904BF7F7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8b:df:6b:61:fe:76:1a:69:b5:0d:4c:b4:07:
43:bd:80:0b:77:08:c3:40:c1:af:e0:64:cc:55:fa:
13:18:14:03:30:2a:a8:6b:df:53:61:6c:36:b5:64:
11:91:84:69:88:40:ba:3a:47:0f:95:98:cc:21:f5:
b2:79:7f:5e:1f:f1:c9:33:cc:f4:31:1f:1f:52:2c:
c6:b8:23:5d:9b:75:dd:44:25:01:fd:25:6b:0c:ac:
ec:ed:09:12:0e:dd:2e:61:ba:2e:4d:cc:59:35:29:
53:f1:23:b9:fe:b8:67:1b:67:5f:eb:89:f1:a9:39:
98:ca:93:ce:88:60:54:dd:2f:69:ae:57:31:a2:aa:
9f:24:ff:35:f3:f6:fc:a3:32:59:c1:1e:f1:66:09:
eb:fa:62:57:37:fa:5a:52:9c:57:53:ee:0c:a5:cd:
70:8a:0b:83:4d:00:0e:89:3a:ad:eb:bc:43:b2:8e:
9f:3b:f9:52:48:4f:03:fd:46:22:09:1a:9a:c5:52:
29:58:58:78:09:09:3b:22:5e:e1:ab:e8:e1:f7:15:
f4:cb:59:51:77:79:98:6e:1b:25:3a:61:0c:82:2b:
f9:49:f0:37:76:60:d2:0a:19:8b:34:06:c7:c3:23:
04:53:ce:e5:38:1a:2f:0b:23:b0:e4:62:5c:2e:1a:
62:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:23:81:70:F2:D2:B4:1D:C4:7E:17:1A:58:EA:D2:29:04:BF:7F:7C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143318.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a29c::/32
Signature Algorithm: sha256WithRSAEncryption
5e:e8:ce:f9:12:50:11:7c:0c:79:d4:eb:78:00:89:e8:5a:ab:
d1:4d:0a:33:f1:ec:3a:96:1d:8d:47:7f:a4:ee:f8:bc:46:d6:
c0:89:e5:2a:d6:b7:64:6c:c3:3c:5d:9f:93:90:fd:83:ed:b0:
30:b0:b4:02:5d:62:64:72:96:bc:d2:50:17:f0:41:b9:0d:33:
ca:9c:9a:12:31:0a:26:f2:d3:f3:16:49:49:7e:ad:90:84:62:
96:f7:20:53:4b:27:fe:49:93:b7:53:01:50:fd:53:a5:6c:ad:
69:41:c9:d0:8a:96:54:d4:7a:12:3d:5f:ec:6c:58:da:5e:11:
86:ab:93:cc:d0:27:b6:89:47:42:38:f5:a4:84:0f:21:78:50:
3f:73:36:8f:99:9b:fd:55:49:8b:ed:9a:00:98:46:2c:a8:e5:
44:47:0f:cb:37:ee:a3:43:33:77:b4:c3:13:73:19:3a:dd:c8:
e3:2f:8b:94:f5:ef:a9:b9:6d:78:cd:12:9e:20:02:89:19:ca:
45:33:4c:cd:c8:4d:6b:31:99:71:b7:96:e3:38:59:6d:7d:d5:
7e:24:5a:50:45:b1:1d:93:d0:0e:52:4f:a3:41:fc:30:b5:fc:
ee:9c:f1:d3:f2:4a:da:f3:1b:fc:25:e2:32:07:8b:f7:26:7a:
01:a5:72:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:13 2026 by rpki-client