Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143349.roa
File: AS143349.roa (raw, json)
Hash identifier: KLTy6xsSDKfhBxmMNSA52XpEX7KjdDLkjzsIw8aDqIc=
Subject key identifier: FA:2C:14:C5:54:29:3D:A6:9F:64:64:DB:D8:6B:01:DC:18:23:80:70
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 51F695A8BF96B714EA978286C1D4AF02CBC1B761
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143349.roa
Signing time: Fri 22 May 2026 07:41:16 +0000
ROA not before: Fri 22 May 2026 07:36:16 +0000
ROA not after: Fri 21 May 2027 07:41:16 +0000
asID: 143349
IP address blocks: 240a:a2bb::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:f6:95:a8:bf:96:b7:14:ea:97:82:86:c1:d4:af:02:cb:c1:b7:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:36:16 2026 GMT
Not After : May 21 07:41:16 2027 GMT
Subject: CN=FA2C14C554293DA69F6464DBD86B01DC18238070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c3:95:ea:35:dc:6e:0f:29:72:6e:df:65:42:
ed:4e:f1:22:44:3c:3c:2c:8a:d9:db:32:dc:27:f4:
76:06:1d:ab:19:4d:90:4e:1b:5f:f6:ad:ce:50:54:
a0:3b:e3:6b:38:4e:fc:1b:ce:7e:0e:10:d9:fc:ef:
6d:9d:39:02:fe:5e:f1:2b:e4:91:24:c5:cf:e0:bf:
63:40:60:24:b3:66:3b:20:6c:b2:d6:b4:e1:87:b9:
14:79:fd:02:e2:28:52:df:84:8f:24:e8:ae:7c:fa:
c9:0d:47:a6:6f:55:a3:9b:e0:ff:2f:1e:8a:a5:d6:
57:65:c2:0a:5c:bb:96:b2:89:55:4a:23:67:ea:61:
c8:4a:87:15:d0:bc:74:a8:fc:f6:21:ba:f3:8c:dc:
78:ce:7e:9b:84:37:c1:37:21:d8:da:96:85:35:59:
9f:c2:b6:44:73:72:1e:4b:b2:40:49:7e:5f:73:b6:
64:af:18:4a:98:4a:eb:c4:cf:cd:e6:4d:e5:b2:3d:
8f:68:c2:00:53:26:dd:dd:d5:97:50:98:78:b4:2f:
8a:36:7e:f2:67:dc:6d:c6:64:69:19:d5:c3:42:59:
22:41:e3:b8:f4:87:5e:40:21:ea:a0:74:30:e5:6e:
c3:c1:9f:8a:c7:10:0b:9e:70:2a:c6:5c:51:24:fc:
60:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:2C:14:C5:54:29:3D:A6:9F:64:64:DB:D8:6B:01:DC:18:23:80:70
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143349.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a2bb::/32
Signature Algorithm: sha256WithRSAEncryption
09:f3:6c:e1:c4:e6:51:04:34:22:da:a1:23:b7:a7:88:dd:f7:
0a:8d:a2:e0:ba:b1:74:9e:ea:1a:bf:3e:0c:75:c8:c9:ee:72:
20:9d:16:ee:3c:32:7f:5a:a2:9c:62:90:23:3e:07:8e:a3:89:
e6:ed:f3:24:d4:a2:b4:26:60:7a:9a:71:bf:44:a8:eb:ef:db:
ef:6e:eb:a0:64:83:e6:6c:84:d0:df:e3:be:b5:e9:77:e8:1c:
e8:6f:a6:e0:ab:77:76:ff:d2:47:fa:50:c8:e5:53:68:fe:56:
22:fd:96:68:a4:13:88:f1:c4:f0:9f:81:cb:09:7d:c1:59:73:
a2:ad:17:ae:32:10:35:26:2c:0d:3b:b6:a4:a0:d0:90:f9:30:
21:84:06:0f:9b:0a:a1:57:80:bf:46:c8:a8:aa:fd:3a:e6:46:
eb:bb:f8:b1:72:de:9f:14:d3:6d:98:eb:d3:ab:86:ca:f0:f0:
70:40:83:88:f5:cc:6c:0a:1c:31:e2:9f:1d:2c:80:db:c2:cc:
53:ec:2d:c7:b0:bd:1a:9c:b6:60:a2:a9:ae:98:90:e3:1f:29:
1d:9c:8e:c7:ff:36:4f:66:26:f1:9a:b0:37:4d:51:3c:4a:55:
4c:6c:d7:a3:e2:48:9b:28:00:a5:5b:0a:24:ed:ea:d9:fc:25:
e6:b6:26:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:47 2026 by rpki-client