Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143328.roa
File: AS143328.roa (raw, json)
Hash identifier: I0zfcGiIgdM7ml85cUioODDOjxpPO4xNlnKxgILV1yA=
Subject key identifier: BC:93:73:ED:A4:2C:23:A7:F3:23:28:89:20:D7:4C:97:41:E0:81:91
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5075EF9F699A904C472DF3C4EF8B2DC2B0CDD164
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143328.roa
Signing time: Mon 25 May 2026 02:22:19 +0000
ROA not before: Mon 25 May 2026 02:17:19 +0000
ROA not after: Mon 24 May 2027 02:22:19 +0000
asID: 143328
IP address blocks: 240a:a2a6::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:75:ef:9f:69:9a:90:4c:47:2d:f3:c4:ef:8b:2d:c2:b0:cd:d1:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:19 2026 GMT
Not After : May 24 02:22:19 2027 GMT
Subject: CN=BC9373EDA42C23A7F323288920D74C9741E08191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ec:af:ef:04:81:32:4b:c8:40:68:a9:81:9d:
24:4f:3f:bb:70:ed:2e:12:a3:d7:f3:2c:52:2e:72:
ac:9d:1b:0f:aa:d0:fc:06:66:0d:56:7b:cd:c8:df:
77:e7:c7:1c:04:30:64:8b:6e:da:4e:10:de:f5:a0:
57:dd:45:ad:cb:1e:04:93:42:48:da:99:65:3f:4a:
a3:41:ce:1d:8c:e0:34:89:e6:10:dd:2a:43:99:b1:
90:88:62:3d:ce:3f:61:1c:d2:03:c9:99:fc:6d:65:
d9:75:46:af:77:df:34:c0:f5:0d:fc:7a:68:87:26:
84:d4:f7:64:dc:6c:fa:e0:6e:3c:3d:85:8f:d7:9f:
2d:bd:ce:29:d3:d0:0b:e3:95:b1:75:b3:a4:25:9d:
c1:0b:36:1c:a7:15:cb:cb:94:48:84:19:36:87:fe:
da:67:cc:e3:4f:67:6c:7d:49:2e:12:23:33:29:57:
89:9f:23:e6:86:41:da:d3:d1:12:da:c9:8e:ec:b9:
3e:20:5c:33:03:84:ab:9a:73:51:4f:68:11:e3:31:
ee:0c:d2:70:f3:fb:fa:f5:ee:b4:14:6b:a6:03:71:
39:49:68:77:fa:12:1c:e9:13:7a:a6:86:dd:49:a9:
94:44:fe:15:30:39:d0:8b:32:ae:9b:83:9a:6e:cd:
29:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:93:73:ED:A4:2C:23:A7:F3:23:28:89:20:D7:4C:97:41:E0:81:91
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143328.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a2a6::/32
Signature Algorithm: sha256WithRSAEncryption
88:25:c9:33:a6:02:d5:c9:66:06:8a:45:4c:e6:45:2f:a7:30:
48:33:89:2c:46:c9:eb:6d:f1:f9:11:53:85:35:7d:ff:5f:7f:
f2:cf:26:9a:0c:e9:53:f1:5a:97:3f:f4:96:a8:35:b9:95:69:
c7:30:d1:54:b5:2b:2c:39:98:a5:b6:73:e3:18:62:ae:8d:10:
88:d5:1d:a9:9a:27:f3:31:3d:25:67:34:58:50:8c:63:8b:68:
0c:43:bb:f6:86:f1:41:35:2c:a4:a9:a2:a3:1a:1d:b2:01:db:
e1:2b:21:05:3a:35:48:0e:12:ce:e3:cf:33:e9:e7:fa:d5:11:
63:7b:1a:a3:61:da:53:2b:a6:4b:7e:6b:78:8c:f1:b3:54:3d:
80:40:08:f6:99:58:8e:a4:9e:17:d1:e7:ac:13:14:ed:f9:0b:
9c:1e:ef:13:e7:32:99:be:c8:97:cf:ec:be:9b:c7:24:4f:4f:
ca:90:c9:f9:36:30:5c:25:7f:d7:c4:ff:c1:3b:4e:bb:68:44:
31:f5:0b:b4:bb:68:a9:7f:bc:da:c9:c1:7a:0c:9f:fe:0c:8f:
5a:52:be:4e:dc:5b:72:d9:96:01:d8:2e:57:e2:ea:07:f3:c8:
75:c4:d0:71:7a:e1:08:63:ea:3e:0d:57:57:6b:2a:33:07:c6:
a7:81:e6:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:28 2026 by rpki-client