Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143340.roa
File: AS143340.roa (raw, json)
Hash identifier: pUNw8s8vfnC1paPmzxI1pCguPpfRHZy+jtYpZz195ig=
Subject key identifier: 93:60:53:D3:9F:AC:C6:51:87:24:83:40:50:F6:3B:E5:7B:85:46:E7
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2DCB1CCF6B63D748DFD40E5739AB150D85CE7893
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143340.roa
Signing time: Fri 22 May 2026 06:27:47 +0000
ROA not before: Fri 22 May 2026 06:22:47 +0000
ROA not after: Fri 21 May 2027 06:27:47 +0000
asID: 143340
IP address blocks: 240a:a2b2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:cb:1c:cf:6b:63:d7:48:df:d4:0e:57:39:ab:15:0d:85:ce:78:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:22:47 2026 GMT
Not After : May 21 06:27:47 2027 GMT
Subject: CN=936053D39FACC6518724834050F63BE57B8546E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:40:f1:22:bc:76:c0:19:c4:8e:97:63:79:20:
d9:89:dd:7d:6a:32:2e:6c:46:be:87:00:ed:83:f9:
14:bf:c8:68:c1:12:0a:b8:16:d4:a2:57:e8:51:ab:
28:8a:9e:62:5d:c8:1d:1e:c8:cc:2f:96:1e:5d:55:
16:8c:04:1b:78:bd:fc:d3:f5:57:6b:5a:cd:6f:5a:
6a:10:30:86:54:b3:02:f6:6f:85:d0:74:23:c2:06:
80:f8:60:12:58:c0:9d:a8:ce:87:17:2d:1a:0f:80:
38:10:93:8d:36:2d:7e:58:fc:8a:26:66:ec:92:06:
2a:02:6b:0d:9d:84:44:fb:8e:ce:e3:d1:56:1d:ce:
b7:d0:58:ad:06:83:0b:3c:53:6b:ed:f7:6d:7c:3f:
e2:42:aa:2b:56:d7:89:8c:b1:d2:02:5f:7a:78:42:
c4:9a:42:9c:5f:18:d9:02:cb:d6:6b:4f:d4:dc:24:
e7:86:7a:37:5b:6d:6d:ef:bb:72:3d:50:cd:40:87:
f9:99:45:6f:29:01:da:f8:6f:d3:fa:1c:3b:04:0f:
03:c8:e2:c2:0d:a1:97:51:39:e7:db:e8:83:63:8c:
5a:ac:49:9f:1d:14:28:fe:23:b0:a5:0d:9c:88:e0:
55:29:05:15:31:ad:d8:d7:5c:61:82:00:08:85:f9:
57:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:60:53:D3:9F:AC:C6:51:87:24:83:40:50:F6:3B:E5:7B:85:46:E7
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143340.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a2b2::/32
Signature Algorithm: sha256WithRSAEncryption
0d:42:68:94:c7:0f:0e:e8:30:c4:38:37:69:a9:82:8d:c8:bd:
f1:a7:03:1d:3d:2f:7f:45:da:51:ff:5b:c0:5f:c0:f2:5d:d5:
fd:ac:85:d4:72:3d:af:42:ec:6b:99:4d:fb:06:15:e9:92:b9:
bf:b7:25:fc:72:83:fc:5f:44:45:10:3e:6d:31:57:d4:72:47:
89:d7:d5:f0:26:b0:ce:d1:3a:5a:15:c6:e0:fe:06:35:a9:72:
a6:23:bb:a5:dd:34:e6:e8:95:dd:d9:1e:dd:af:03:c3:4e:ee:
b1:ea:2a:08:17:8f:67:9f:17:89:ef:44:87:b0:ef:aa:9a:d7:
a8:31:fd:4f:c4:d2:e2:ed:1e:3c:c6:d1:26:de:30:79:30:92:
29:6b:2c:87:54:e6:39:ac:6d:d8:be:06:df:60:de:70:a5:ff:
ce:65:be:59:e6:b1:c0:6a:3c:da:27:76:57:a2:8b:80:70:24:
63:d0:d2:21:d0:6c:23:9b:4b:ae:36:79:80:eb:a3:b0:62:60:
1c:d6:e0:b6:b0:bb:a6:ce:b0:a9:6a:91:b8:5f:d0:a4:9e:ae:
52:7a:54:58:7d:ba:68:a7:20:64:d7:58:95:42:95:b9:cf:96:
ea:9b:fd:54:a2:36:49:04:9d:d4:d0:3f:e9:e2:b0:68:7a:b6:
78:7d:c0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:51:01 2026 by rpki-client