Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143392.roa
File: AS143392.roa (raw, json)
Hash identifier: vNKFH+scPLCkjmykKaYbJxNSLOGo+Eli6VsJi+dRRVg=
Subject key identifier: 5E:DC:3D:7F:B9:59:34:06:72:6F:C0:2A:C0:16:A6:AF:BA:9A:A2:93
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 630CA9B31B2BEBC010A96B8153524BBA9B841288
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143392.roa
Signing time: Fri 22 May 2026 07:32:01 +0000
ROA not before: Fri 22 May 2026 07:27:01 +0000
ROA not after: Fri 21 May 2027 07:32:01 +0000
asID: 143392
IP address blocks: 240a:a2e6::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:0c:a9:b3:1b:2b:eb:c0:10:a9:6b:81:53:52:4b:ba:9b:84:12:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:01 2026 GMT
Not After : May 21 07:32:01 2027 GMT
Subject: CN=5EDC3D7FB9593406726FC02AC016A6AFBA9AA293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a9:e9:8f:d1:fc:a1:f5:8b:8d:0f:e6:6a:4c:
af:9b:c3:27:38:a3:9c:97:05:b7:1a:f7:51:43:6b:
1e:25:c6:d9:49:7e:5c:99:1e:ae:3c:e4:5e:03:64:
62:6c:82:fe:50:a3:c3:bb:d9:1d:c0:21:f8:5e:9f:
ea:0b:57:6e:88:0c:ac:86:72:c0:53:50:c0:97:0e:
8c:00:00:6e:b0:fd:d5:68:82:72:8f:c5:95:ce:2e:
8d:cb:fc:65:55:3c:3b:a8:0e:f8:82:79:37:64:98:
36:f5:bf:e8:61:c8:56:3d:c2:f9:a2:8b:33:a8:11:
33:3c:d1:63:45:8b:f9:7c:a0:87:9c:71:f5:cb:9f:
bc:f3:ae:ba:d0:3a:b0:d7:d3:30:0f:63:d6:63:63:
df:e5:37:88:d4:72:27:13:ef:f4:5b:ec:1b:13:2a:
bb:2d:08:61:20:d5:b5:3d:fd:26:a0:aa:95:bb:91:
9b:c1:79:3d:17:16:df:5e:2d:92:49:e8:27:43:15:
95:12:76:98:33:db:12:89:8c:89:38:65:f6:24:45:
bf:bb:bf:3a:b8:53:97:00:87:73:06:fb:69:c2:1c:
66:7c:ba:a2:98:90:c7:3a:64:97:67:cd:ea:5f:8a:
bd:8f:84:ba:c0:bb:43:ee:f7:0b:6e:7b:d6:87:88:
a3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:DC:3D:7F:B9:59:34:06:72:6F:C0:2A:C0:16:A6:AF:BA:9A:A2:93
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143392.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a2e6::/32
Signature Algorithm: sha256WithRSAEncryption
13:90:b3:9f:3e:32:03:85:23:10:44:68:38:02:98:11:6d:e7:
fb:73:1c:b4:7b:84:5a:8d:75:3d:f1:19:7f:f2:de:7e:28:e4:
80:53:83:1a:7b:01:fb:5a:a1:96:37:1f:a9:69:e2:03:7d:8b:
be:4c:7a:5e:30:0a:28:e9:3f:d2:d6:a4:11:5e:52:20:ba:93:
01:c9:c9:5a:ea:fc:80:a9:f0:cf:47:70:e6:93:7b:15:dc:dd:
95:09:3f:17:24:37:de:90:68:fa:43:d2:ca:5a:25:0f:19:73:
cb:fb:30:1c:d6:69:0b:c4:b7:02:90:82:b6:6d:71:53:57:80:
79:d4:da:25:c0:59:32:22:d9:1e:50:7b:90:a5:f5:83:4d:d2:
a5:24:e7:28:8d:e6:ad:80:91:cd:39:d4:97:d1:5a:9f:fe:8e:
1a:0f:d8:6c:ca:1b:3c:94:1f:1c:1b:88:c1:84:65:b8:2b:29:
ca:73:49:65:13:4e:db:1a:b2:78:87:2c:41:2e:bd:27:cc:19:
0c:d6:31:60:31:d3:d8:48:58:50:c3:29:38:3a:2d:1c:c3:26:
73:43:4d:9a:7e:a4:83:35:c1:52:1f:9c:08:f2:17:3e:13:b5:
53:5e:b9:f5:f8:15:01:71:6e:88:3c:e1:50:d6:4e:55:f9:a6:
bd:70:f1:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:21 2026 by rpki-client