Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143324.roa
File: AS143324.roa (raw, json)
Hash identifier: 91GC6//87CawGdYK1sapdPbBYWH7Gxt+0nj1HBQCyFA=
Subject key identifier: FA:A7:8D:E7:99:EE:B1:D8:F1:B9:78:53:C9:1A:B0:60:61:43:32:8F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 56771967C1606CBA867A894D1184FD991ACF5196
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143324.roa
Signing time: Fri 22 May 2026 06:58:49 +0000
ROA not before: Fri 22 May 2026 06:53:49 +0000
ROA not after: Fri 21 May 2027 06:58:49 +0000
asID: 143324
IP address blocks: 240a:a2a2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:77:19:67:c1:60:6c:ba:86:7a:89:4d:11:84:fd:99:1a:cf:51:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:49 2026 GMT
Not After : May 21 06:58:49 2027 GMT
Subject: CN=FAA78DE799EEB1D8F1B97853C91AB0606143328F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b8:95:55:27:78:57:f7:8b:68:ba:01:d9:5c:
e2:ee:b6:ce:62:7f:01:7c:5b:ab:9a:dc:92:46:4b:
64:8c:9b:6d:ab:c3:13:37:69:33:ae:c6:df:10:35:
3e:40:ec:52:81:f9:c2:f4:70:87:a5:41:1a:8f:f8:
89:c7:2b:12:ce:24:d7:19:0d:02:aa:ec:f5:ea:02:
5a:5e:ac:e4:85:c0:5a:db:a3:c7:ef:f9:ad:88:da:
05:e9:8d:47:c4:a6:ff:ba:e6:0e:dc:f2:15:51:3a:
b9:98:e7:30:db:5c:bd:02:d7:64:b9:cb:5b:60:fd:
b6:df:65:60:b2:a6:38:f0:00:e0:42:5d:81:e4:02:
49:f1:a4:32:53:aa:4c:92:a6:c1:fb:8d:50:80:ab:
e2:af:cb:b0:6d:e5:24:47:c3:73:b8:0f:70:7b:df:
d2:06:54:92:e3:99:23:de:ac:d1:19:90:bf:2a:22:
52:97:36:72:bb:aa:94:ce:9f:05:44:eb:10:35:bb:
32:1d:2e:21:a8:c1:93:3f:84:34:7c:45:df:0b:f9:
26:fd:bc:b0:a9:f4:0d:de:74:70:fb:c5:b1:ea:b2:
8c:f6:c1:22:d2:4a:24:cc:ae:b0:fe:66:8e:15:11:
1f:9b:26:95:4d:53:d6:81:66:47:8c:aa:d1:c1:8c:
98:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A7:8D:E7:99:EE:B1:D8:F1:B9:78:53:C9:1A:B0:60:61:43:32:8F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143324.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a2a2::/32
Signature Algorithm: sha256WithRSAEncryption
2d:e3:2d:53:cf:d5:a2:ef:87:6c:3a:35:fc:47:63:3f:cb:a8:
df:2b:91:4c:6d:82:07:5e:ed:77:eb:c9:d1:4f:cd:fa:3f:e9:
1f:1a:81:04:17:6a:f4:f6:27:6e:ee:62:47:81:38:ac:72:54:
54:60:54:88:81:85:dd:d2:0a:d2:f6:ac:5a:63:74:15:48:f9:
04:dc:c1:01:c2:35:ff:f8:3a:cc:22:a9:3a:2b:ee:de:c1:92:
10:83:0e:7b:a9:69:11:67:6b:aa:f7:bb:10:47:aa:16:f5:c7:
81:6c:0d:8a:b8:b4:8f:fb:dd:96:a3:00:8a:b5:26:12:fc:11:
64:c5:2b:97:f8:cd:e6:77:19:58:62:db:e3:4f:07:f3:b4:56:
45:a2:c3:13:f7:d3:8b:1f:86:94:4c:42:d3:ee:a6:32:05:d7:
30:71:ab:21:e4:be:1b:eb:ee:e5:94:08:9a:56:4a:17:b6:52:
02:82:c5:fe:93:68:a2:93:7d:49:64:5e:a7:eb:f2:75:08:1e:
e6:32:58:1c:95:e3:63:21:a7:5b:27:35:be:7b:7f:00:ff:ea:
17:60:ae:9d:0d:f5:20:2c:65:3f:65:a6:99:c0:1e:e5:ed:d5:
1f:ed:c8:b7:a6:61:cd:ec:fe:86:0e:60:ed:5f:5d:42:85:a8:
60:62:8b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:58 2026 by rpki-client