Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143337.roa
File: AS143337.roa (raw, json)
Hash identifier: gRsq87P6f7PqDrs+SoOSEHRfY8j2UUQlmmujltzDjZk=
Subject key identifier: 9B:60:3B:32:0C:05:E8:C9:3D:F9:89:49:83:93:C0:96:68:A0:34:25
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3A65A726B4AD6D6020218718C2387BC347AC4F51
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143337.roa
Signing time: Tue 26 May 2026 06:30:49 +0000
ROA not before: Tue 26 May 2026 06:25:49 +0000
ROA not after: Tue 25 May 2027 06:30:49 +0000
asID: 143337
IP address blocks: 240a:a2af::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:65:a7:26:b4:ad:6d:60:20:21:87:18:c2:38:7b:c3:47:ac:4f:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:25:49 2026 GMT
Not After : May 25 06:30:49 2027 GMT
Subject: CN=9B603B320C05E8C93DF989498393C09668A03425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a9:1e:dd:ee:45:21:fe:5c:99:a5:81:ad:5b:
90:b4:8b:2e:3f:e4:f4:6d:0e:6f:b3:e8:31:3a:ef:
4b:49:00:4f:b8:6e:d4:dd:6f:3b:6d:5a:b6:85:28:
44:65:07:fe:ca:2c:33:29:bd:f4:1b:32:aa:c5:c5:
4e:58:c6:2b:03:40:7c:01:43:c1:f5:46:5f:6b:50:
d3:55:53:9a:d3:56:2e:5b:3f:1a:62:95:82:18:4d:
0b:6d:23:61:3e:b6:7d:32:42:c9:a6:ca:77:e6:4e:
27:a7:21:d5:43:77:42:aa:22:87:d7:e8:97:48:b8:
51:bd:73:90:b9:85:60:d5:c6:07:3a:13:53:7a:bc:
54:c2:23:58:07:67:13:5f:5e:63:5b:c0:f7:6c:dc:
b1:c1:41:1e:6a:fa:d0:11:bb:09:0d:87:a5:c4:7e:
df:7d:42:a4:c7:01:1e:88:e9:21:d7:79:3f:08:ee:
93:a8:db:c7:13:21:42:a9:f1:7d:19:c7:d0:8c:a1:
1a:9d:dc:60:10:c8:02:06:34:4e:be:39:33:1a:69:
89:b9:54:58:37:c1:8f:b4:12:4f:2b:58:8d:0d:67:
85:e5:16:5a:37:5f:c0:88:2a:14:2c:b0:f8:e4:b3:
7c:15:79:fe:d6:9a:f4:13:32:63:ea:77:21:a2:c0:
22:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:60:3B:32:0C:05:E8:C9:3D:F9:89:49:83:93:C0:96:68:A0:34:25
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a2af::/32
Signature Algorithm: sha256WithRSAEncryption
0e:9d:11:e5:c7:1b:fa:52:f6:ce:11:fe:1c:e0:b1:50:da:09:
7f:25:44:c2:6a:ee:eb:f7:df:aa:a5:85:18:7c:3a:82:62:54:
e4:72:3a:0b:d1:e6:49:af:3a:e6:45:71:19:6d:e3:02:25:03:
fe:4a:4b:9f:5f:33:17:af:c1:ac:99:b6:83:40:3a:ca:3c:07:
10:9e:e6:f8:b3:a0:c5:62:72:c8:c2:93:e4:ad:08:e3:e8:fb:
35:78:07:9d:ff:e5:6a:32:09:98:78:45:93:d4:cf:3a:58:f2:
56:02:c4:19:2f:16:e6:bd:91:ff:ab:16:98:f7:2c:78:ac:21:
54:b6:a3:97:5e:d2:31:15:fc:9f:cc:56:27:35:31:e2:da:bd:
c5:fd:86:05:cc:b8:75:da:fb:5d:02:8a:79:a4:9d:e1:d2:6c:
1f:1a:9d:a2:39:86:bf:a0:49:0c:5d:e0:28:47:b2:27:85:be:
6f:7f:27:ab:d0:5d:9f:78:a4:a6:75:fd:b1:48:ea:58:fc:1e:
cf:ce:d3:f0:3e:fd:0d:9e:6f:03:7f:8d:07:70:d4:a5:c9:fe:
06:eb:38:1e:90:ef:0c:65:93:ca:61:93:52:e3:27:52:82:c9:
c2:bf:cf:b0:4c:a1:3c:1b:88:01:89:4d:de:c4:8d:0b:cc:67:
cf:af:d4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:49 2026 by rpki-client