Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143348.roa
File: AS143348.roa (raw, json)
Hash identifier: UYsUQhGUwKTE+/PkXAN5vBy1o7szoxG11AOynH4X8UE=
Subject key identifier: 4C:14:69:2F:C1:DE:84:B6:60:90:51:E0:D7:20:EA:74:47:66:F5:93
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 125FA339707DBA9C2CD0C78D02EADA6E714AA2C6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143348.roa
Signing time: Tue 26 May 2026 02:34:55 +0000
ROA not before: Tue 26 May 2026 02:29:55 +0000
ROA not after: Tue 25 May 2027 02:34:55 +0000
asID: 143348
IP address blocks: 240a:a2ba::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:5f:a3:39:70:7d:ba:9c:2c:d0:c7:8d:02:ea:da:6e:71:4a:a2:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:29:55 2026 GMT
Not After : May 25 02:34:55 2027 GMT
Subject: CN=4C14692FC1DE84B6609051E0D720EA744766F593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e4:c7:4c:b2:bb:80:34:b2:17:85:0a:0f:66:
f0:d1:22:c5:19:c1:5f:7d:36:6c:fd:c6:c0:67:96:
c0:24:be:da:61:06:84:a0:be:3b:1b:6e:4d:08:ed:
4a:75:6d:31:bc:50:bc:f4:88:6c:e6:02:4a:67:bb:
34:92:cf:83:0b:ed:fa:c7:b2:d5:75:fe:ad:de:af:
3c:38:c6:00:33:08:04:c7:22:6b:ae:44:b0:20:59:
07:f7:36:a1:09:94:7a:97:16:a3:24:e3:98:78:9c:
f5:1a:a5:9e:96:bc:f9:dd:1a:d9:4f:e4:53:36:a4:
19:4c:30:2b:a4:da:0a:32:37:af:0f:41:61:99:a1:
ee:e5:01:2a:c0:2d:21:99:8f:06:f4:ab:51:fd:18:
82:d9:a2:11:b7:3d:fb:f2:8a:a3:9b:7f:00:df:a8:
a8:15:b9:ba:42:f6:70:9b:23:f1:d5:c7:8f:c7:4f:
9f:1a:dd:5b:4b:05:d4:35:77:8e:4d:15:00:10:b4:
c2:3e:7c:eb:85:b8:21:aa:f3:5c:39:0c:0a:e6:8a:
0d:c5:e6:04:76:0c:bd:7f:bd:71:1e:f8:8b:0d:94:
08:02:36:1d:82:21:cc:27:ac:e9:38:f2:ce:47:a3:
b9:65:e8:f4:b8:eb:20:2e:27:d6:4a:62:a7:b5:5c:
f7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:14:69:2F:C1:DE:84:B6:60:90:51:E0:D7:20:EA:74:47:66:F5:93
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143348.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a2ba::/32
Signature Algorithm: sha256WithRSAEncryption
61:7d:1a:97:b5:33:a4:78:90:c7:2d:40:ce:c8:35:b3:26:8e:
01:50:25:8e:2f:b5:71:70:7b:f2:31:4b:04:ae:9e:1c:90:a5:
87:52:0f:66:d6:55:78:84:5e:0a:ee:e7:ab:c8:d3:e2:d1:51:
b6:6d:20:61:a6:6e:e0:b1:43:51:d5:9b:d4:06:49:d0:4e:b5:
f3:02:f7:14:eb:82:0b:4a:d2:6f:c6:e1:9f:69:d8:79:fb:0b:
51:38:97:24:e8:31:8c:d8:1b:e2:4f:f6:8e:56:ae:eb:e0:dc:
2c:d3:77:02:0d:a7:14:ac:5f:4c:1e:f3:14:65:f8:80:a0:54:
55:d7:c3:25:8e:69:ed:66:bc:2b:f8:14:c7:a0:75:e6:cc:37:
21:86:d3:70:5d:cc:ca:da:ed:39:5a:d6:c8:07:d1:65:9e:42:
4d:7e:c3:1e:45:e3:ae:2a:ca:15:0b:13:a4:4f:49:ab:f9:54:
aa:88:2f:54:32:23:75:fc:3e:63:49:7d:ca:b8:c6:02:95:16:
0b:e0:83:46:ae:9d:cb:e3:8f:1c:eb:4d:78:78:91:a0:75:8b:
12:aa:56:b5:93:d1:6c:58:98:90:ff:00:26:2b:24:4d:75:28:
89:2b:d4:19:fa:19:9e:0f:78:4a:06:0b:c6:fb:9b:90:7b:8a:
de:b4:1e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:04 2026 by rpki-client