Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143351.roa
File: AS143351.roa (raw, json)
Hash identifier: +ftAsH4oZOdoyCML25Nq8RoWFjOa/8yKY5zJpB26Bhk=
Subject key identifier: 00:D1:25:F1:71:DF:9A:1B:0F:44:83:8F:28:AD:76:E3:79:94:3B:F8
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 63F69561FCCEABD440A19502BABBE3A4353FCBA3
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143351.roa
Signing time: Tue 26 May 2026 06:30:24 +0000
ROA not before: Tue 26 May 2026 06:25:24 +0000
ROA not after: Tue 25 May 2027 06:30:24 +0000
asID: 143351
IP address blocks: 240a:a2bd::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:f6:95:61:fc:ce:ab:d4:40:a1:95:02:ba:bb:e3:a4:35:3f:cb:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:25:24 2026 GMT
Not After : May 25 06:30:24 2027 GMT
Subject: CN=00D125F171DF9A1B0F44838F28AD76E379943BF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:15:0b:2d:26:62:34:c8:cb:ba:0c:0b:c8:e1:
1b:74:09:40:d4:66:a8:cb:47:93:33:c2:89:6a:36:
6b:ce:15:95:d1:2e:36:5c:c5:97:b4:2f:6e:65:de:
7f:04:45:04:8e:e5:f9:31:0a:72:19:44:75:40:ab:
a4:a0:c3:a6:8e:5a:c3:49:b5:4c:9b:d8:64:db:1c:
8b:8e:5e:fb:db:de:b7:d0:a6:55:db:8e:31:e9:60:
23:26:69:17:32:d1:92:eb:d0:e5:75:ed:4e:40:4f:
8a:93:cf:d7:04:64:e9:fd:b4:4f:dd:f7:57:21:db:
d3:73:2d:5e:d4:24:d5:0f:77:0c:b9:00:ff:f3:87:
b5:67:eb:8b:86:f4:fc:3c:dc:8f:fe:89:ad:1c:5e:
86:c1:46:e2:3d:a2:07:d8:d5:cf:3e:87:69:8f:8c:
ec:14:65:60:b6:ae:d0:ee:a9:2a:47:6e:1d:00:d3:
ad:a0:48:cd:a8:f2:ea:22:cb:31:3d:6d:51:d9:5e:
f6:cd:b1:fe:af:6f:12:26:4c:3c:e1:8b:24:f2:bc:
43:b6:77:59:69:ba:93:66:d6:05:7b:dc:58:46:91:
a9:e9:70:33:8f:96:3d:0d:c6:ec:e5:e8:39:6c:8c:
16:a9:3a:28:81:3b:f0:b8:e6:01:51:13:44:16:1e:
26:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D1:25:F1:71:DF:9A:1B:0F:44:83:8F:28:AD:76:E3:79:94:3B:F8
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143351.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a2bd::/32
Signature Algorithm: sha256WithRSAEncryption
3b:81:e7:d2:d7:7e:a2:84:e5:14:1a:87:bf:d0:13:1b:b4:34:
3c:af:4f:5a:01:32:73:79:5e:17:e9:b0:dd:23:25:50:ae:ad:
59:e7:6f:d6:55:b9:7a:0f:3a:d4:c2:e4:5f:1e:82:df:5f:86:
12:74:85:34:4a:93:fa:be:5a:16:a0:b1:ec:34:1c:50:27:4b:
27:38:9d:ae:e2:28:59:6a:17:e5:a2:ec:b3:12:c4:0a:2f:94:
cc:ea:1a:f6:85:fe:eb:32:34:22:58:91:7d:c1:22:7d:5d:3d:
75:ca:0c:ec:7f:ed:93:e2:e5:bd:a8:83:b0:7d:4e:d7:a1:26:
c4:72:25:bb:a3:0a:68:53:47:82:80:fa:65:e8:0b:fa:63:d6:
0c:de:f7:12:b4:6a:75:7a:43:7f:2f:0c:9a:ef:26:75:77:27:
39:97:2c:a2:f5:49:cf:6f:fc:8f:0d:e6:61:44:fc:79:c5:9e:
52:19:b9:60:62:3c:b6:c3:f3:90:97:b3:90:23:03:57:e6:ef:
89:37:90:fa:23:36:75:38:4d:56:be:df:2d:ae:1e:fb:8a:01:
a1:98:cb:b3:c2:4e:22:29:33:83:cb:c1:15:ce:83:29:7b:8d:
55:23:8e:7d:39:4c:71:68:0b:79:61:03:38:01:d5:5f:52:7d:
7f:86:49:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:03 2026 by rpki-client