Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143400.roa
File: AS143400.roa (raw, json)
Hash identifier: PHZoT2w1bRl/AB5Dcraq9GRhgzrtza4qF3rI6LynzME=
Subject key identifier: 51:58:03:19:01:B1:69:F2:9F:D6:A2:81:A9:9E:15:7F:5C:F7:DD:E0
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 23F3406AE951D118E321ED970C60FA70798D3E84
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143400.roa
Signing time: Fri 22 May 2026 06:46:33 +0000
ROA not before: Fri 22 May 2026 06:41:33 +0000
ROA not after: Fri 21 May 2027 06:46:33 +0000
asID: 143400
IP address blocks: 240a:a2ee::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:f3:40:6a:e9:51:d1:18:e3:21:ed:97:0c:60:fa:70:79:8d:3e:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:33 2026 GMT
Not After : May 21 06:46:33 2027 GMT
Subject: CN=5158031901B169F29FD6A281A99E157F5CF7DDE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:05:9f:13:fe:ee:b2:97:a9:26:6a:8c:ff:8d:
94:3d:28:29:0c:0a:64:1b:91:a6:18:b5:a3:3d:2a:
b0:fb:0a:7b:25:b7:c9:f0:d5:03:89:be:ed:a4:d4:
85:19:2f:a1:82:af:c9:5a:7a:e0:d3:b0:61:a3:89:
b1:7e:fe:97:f3:20:56:5f:f1:c3:b7:74:08:d4:a8:
5e:7c:40:06:83:e5:0b:9e:1d:52:2e:e2:aa:59:9c:
de:44:e9:85:91:5c:c2:d9:9f:dc:57:00:20:2a:7a:
06:1f:e6:d0:64:a3:7c:f2:c1:16:bc:a3:6f:1e:63:
dc:05:d7:d9:e4:93:30:ff:19:5f:20:17:7d:e5:3e:
85:2d:20:a3:34:55:c5:d0:ed:b6:f1:f6:7e:c2:bb:
d0:2d:7f:76:20:a8:46:1a:c4:95:5a:46:d7:c8:95:
46:8e:1b:0b:60:86:a4:59:d1:2f:4c:9a:32:d8:eb:
2f:df:12:62:a8:55:14:b1:ec:44:15:e9:88:0d:92:
23:b0:94:64:02:82:62:91:fb:e8:b3:29:88:6e:f1:
70:c8:79:f8:d9:26:94:b6:51:65:74:43:7c:f3:46:
09:f0:92:60:66:e3:55:27:99:48:cc:7c:38:ec:f1:
d5:65:57:e8:36:06:4c:b5:15:6f:15:f7:e3:06:70:
6e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:58:03:19:01:B1:69:F2:9F:D6:A2:81:A9:9E:15:7F:5C:F7:DD:E0
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143400.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a2ee::/32
Signature Algorithm: sha256WithRSAEncryption
6b:b8:bf:c4:2a:af:bf:6e:9f:b1:52:e7:fd:51:3b:09:e0:ff:
68:04:d2:4b:b4:46:98:d6:c0:8a:22:f3:a1:99:78:b0:0d:de:
d7:e5:cd:38:70:83:dd:a2:5f:d9:53:e0:75:0d:4c:c7:e5:81:
db:d4:ff:93:01:9a:f7:30:78:fa:30:ad:17:7f:17:ce:48:3f:
2c:b4:08:a0:5d:f4:06:0f:42:73:88:c7:1c:90:10:88:0c:13:
a2:1a:08:5f:74:72:1c:cd:bc:61:ff:6d:56:0d:48:6a:17:b5:
a8:aa:a9:4f:e4:56:3b:7f:85:29:21:40:63:01:1b:79:03:df:
1d:c9:0a:b1:ee:08:31:b1:ec:af:5a:75:85:6c:1b:ae:f1:df:
2a:e2:62:08:b2:6a:76:24:ae:4f:98:24:22:cc:87:be:1e:30:
d1:b2:24:55:05:95:9f:c0:18:90:fc:c7:ed:eb:98:ad:61:4a:
dc:e5:74:14:a2:a2:91:ea:89:86:f2:de:ed:c8:41:32:90:20:
67:76:58:0b:83:68:b7:36:d2:18:68:d0:df:74:7a:be:19:00:
10:da:9c:7d:62:a7:9c:bc:0f:d0:c0:61:24:4c:e6:bd:32:15:
24:33:e9:b5:f9:02:ae:74:d2:fe:c4:5a:2f:32:ae:fb:81:4e:
ad:0f:a2:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:43 2026 by rpki-client