Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143396.roa
File: AS143396.roa (raw, json)
Hash identifier: jVn3yZ3A5VbNBRzOrt1HvB8Dc+c12m4ct0OHPBuJDnY=
Subject key identifier: D9:B5:04:C4:05:A8:AE:64:29:AA:01:5E:6B:55:F0:94:91:81:DC:DD
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 49C0FA09A80861422FA4854BEBC2BCD9836F791B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143396.roa
Signing time: Mon 25 May 2026 06:28:22 +0000
ROA not before: Mon 25 May 2026 06:23:22 +0000
ROA not after: Mon 24 May 2027 06:28:22 +0000
asID: 143396
IP address blocks: 240a:a2ea::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:c0:fa:09:a8:08:61:42:2f:a4:85:4b:eb:c2:bc:d9:83:6f:79:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:22 2026 GMT
Not After : May 24 06:28:22 2027 GMT
Subject: CN=D9B504C405A8AE6429AA015E6B55F0949181DCDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bf:a5:c1:67:c9:7d:67:43:c5:31:5b:b6:38:
3f:b6:90:e3:fc:8e:69:51:0e:69:fd:71:65:31:a4:
3b:ae:f4:bb:78:94:49:c4:2b:4d:99:7c:51:00:bc:
cb:76:6f:e2:27:2c:45:c6:55:e9:a0:8b:74:a2:aa:
cc:90:b5:a7:8f:8e:93:f5:76:3f:2f:e2:30:6d:96:
c3:b6:9e:0c:42:d9:b4:1e:ed:82:04:33:2d:1a:99:
f8:59:8f:d4:79:25:fe:f5:f4:e5:fd:d8:c8:1a:9a:
c4:6e:db:71:a8:6a:f4:63:75:36:12:8c:81:98:2f:
0b:f0:2e:e1:cd:f9:c7:9f:c0:9f:3f:c5:0a:95:54:
11:86:75:6d:ed:5d:6c:04:30:b7:87:8c:42:fb:e7:
52:b0:2e:90:54:73:64:cb:bd:ce:52:a1:67:42:6f:
43:c6:47:3e:ab:8c:1e:c0:f7:29:02:9a:50:6f:10:
3b:1b:7f:63:0f:6b:80:e4:57:67:35:f1:81:ad:8c:
db:af:12:82:f8:50:b1:9c:5f:f2:71:f2:6e:b6:5a:
9d:b8:be:49:4b:c2:e9:41:fa:6d:b8:b1:5c:67:3f:
7d:50:e5:cb:83:50:50:f5:47:27:22:cd:14:9f:87:
98:71:a5:93:c6:b0:66:ea:2e:1d:39:66:5d:46:36:
6d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B5:04:C4:05:A8:AE:64:29:AA:01:5E:6B:55:F0:94:91:81:DC:DD
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143396.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a2ea::/32
Signature Algorithm: sha256WithRSAEncryption
68:29:34:06:b7:ec:48:6c:97:b9:d2:3a:38:e3:71:15:48:c6:
85:4f:fe:c4:c3:0e:de:96:ad:d1:a4:cd:62:3c:b7:a8:fc:bd:
4f:96:a7:c6:34:ac:aa:6f:97:59:70:25:38:42:3a:78:b0:b8:
8e:a2:47:71:9c:23:1c:77:9d:08:6b:59:a1:c7:62:92:39:fd:
78:c6:74:4e:02:dd:ca:4d:76:3e:80:4e:6e:cc:14:32:11:8f:
ba:34:f8:f8:ee:2d:f4:7c:85:2f:d0:43:4f:c0:1d:7c:43:34:
6e:bd:c2:5e:63:08:b1:4c:57:ba:ac:d2:65:d5:01:46:7b:3e:
9a:f1:49:df:e3:35:75:92:b6:33:eb:b0:19:5e:f3:5a:5a:e7:
18:84:a0:3d:a8:b9:f6:2c:4e:40:60:37:e7:cc:30:05:70:37:
2d:8e:a5:6c:93:c8:9d:fc:e3:f6:e4:eb:f2:1a:1b:18:47:03:
1c:ac:e5:99:0e:3e:aa:7b:bc:46:19:0b:88:02:bb:03:57:84:
03:ea:1b:ad:39:17:69:8c:7d:d3:11:07:a4:6c:96:43:a6:9d:
8f:18:bf:ea:34:7a:69:7d:9e:13:cb:b7:be:7f:89:c3:07:ab:
c1:d2:a9:18:b4:58:d9:8d:91:3c:a2:4a:ad:a6:74:e7:98:36:
91:c4:12:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:59 2026 by rpki-client