Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143338.roa
File: AS143338.roa (raw, json)
Hash identifier: Ru1GJIrfONWrDAoFzuoad0X5m8ebOHUcF20+5Ab0cJ4=
Subject key identifier: 68:30:06:5B:92:64:FB:EF:DE:5C:13:D9:A7:FE:C9:8E:77:27:5B:05
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 563260C39DBA86874E059C79EF4799E84206FDD2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143338.roa
Signing time: Fri 22 May 2026 02:47:26 +0000
ROA not before: Fri 22 May 2026 02:42:26 +0000
ROA not after: Fri 21 May 2027 02:47:26 +0000
asID: 143338
IP address blocks: 240a:a2b0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:32:60:c3:9d:ba:86:87:4e:05:9c:79:ef:47:99:e8:42:06:fd:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:26 2026 GMT
Not After : May 21 02:47:26 2027 GMT
Subject: CN=6830065B9264FBEFDE5C13D9A7FEC98E77275B05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ed:1d:e0:33:eb:e6:45:e7:ca:6d:6a:e0:31:
55:ff:35:0a:1e:c2:72:db:85:93:5e:18:35:6d:2e:
75:c5:a5:bc:89:99:92:b4:75:d2:56:7f:72:7f:78:
df:ca:63:0e:93:ca:dc:7a:b0:0f:56:82:3b:23:24:
f5:a8:6c:85:25:57:21:8e:19:1d:64:a4:e2:c6:45:
ae:2f:bc:f7:36:26:c3:fb:09:66:85:25:0b:4a:9f:
67:c6:84:c5:4a:3d:ce:e1:e9:bb:af:fe:34:34:2b:
f0:31:58:9b:5c:05:b3:8a:4c:e3:93:7d:0d:f1:a6:
57:40:6a:1c:bd:44:05:6b:89:c5:9e:bf:49:bd:68:
70:0e:50:44:3a:38:98:ff:c2:0e:34:76:20:9b:67:
82:88:df:2f:3f:54:f9:4d:2b:ee:89:00:bf:5b:5f:
97:b1:63:cd:f0:97:c9:ef:b2:ed:ea:da:b4:4d:74:
91:b7:cb:b8:78:8d:98:a8:30:a2:a5:7b:e3:c5:8c:
56:5b:fd:45:28:28:09:94:5f:c8:d4:f7:96:2e:3c:
96:48:08:d1:fd:c5:e1:1c:6e:0e:ed:0f:77:a3:12:
b2:e9:2b:29:0a:26:47:dc:03:cc:1d:1d:4f:59:b8:
64:fc:df:23:b3:8c:95:58:e9:77:c1:e4:c8:76:a9:
44:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:30:06:5B:92:64:FB:EF:DE:5C:13:D9:A7:FE:C9:8E:77:27:5B:05
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a2b0::/32
Signature Algorithm: sha256WithRSAEncryption
5e:a7:13:78:5d:f3:6b:f3:b4:29:3d:b2:6f:8d:31:fe:bd:94:
50:af:cb:b4:bb:1c:41:fb:aa:ec:11:dd:98:67:38:90:3d:b5:
80:c5:40:f1:d7:72:73:aa:4e:34:f7:59:9c:9f:46:07:d9:b1:
ac:0d:6c:6f:7c:6d:fe:c9:8c:82:bd:64:2c:96:37:42:ee:b9:
ff:8b:95:84:a6:37:4e:0b:91:9b:0d:20:f3:71:ce:9b:8a:29:
49:3d:a0:33:5d:7a:5d:e8:f0:80:a7:14:88:c5:85:2c:7d:70:
8c:2a:4a:5e:93:b6:73:99:4f:6c:6e:09:2b:eb:1e:20:a8:4d:
21:41:43:f1:a3:06:ac:ec:79:f1:83:0d:62:1c:14:d4:56:cb:
a4:c1:84:86:e8:d4:da:25:ed:82:1f:3a:d1:1c:c6:b2:42:7c:
c2:81:2b:af:5b:a1:6b:eb:81:50:b4:60:39:8a:1f:21:1f:1e:
81:4f:e3:df:95:d1:cd:39:bd:74:2d:fe:f4:90:4a:db:c6:2e:
01:8b:83:a5:2b:15:19:75:4f:61:1b:dd:cf:c1:5c:00:12:97:
e8:90:b4:45:9e:28:73:0d:4b:17:2d:83:07:10:4e:68:76:84:
85:a7:f6:e8:7b:cb:f4:13:40:03:c9:33:df:d6:cf:68:10:18:
8c:c6:cf:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:24:30 2026 by rpki-client