Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143492.roa
File: AS143492.roa (raw, json)
Hash identifier: zdECxw+UfxRSnTakMnTPy+FrxjcM7oKerHKsQpNI1O0=
Subject key identifier: 80:43:E2:96:F6:97:89:F3:E9:B3:A7:0B:D0:0B:26:70:FF:E5:97:7B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 631A4D260AC938E6F09A46F3CC3FD7F0ACB71012
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143492.roa
Signing time: Tue 26 May 2026 02:35:22 +0000
ROA not before: Tue 26 May 2026 02:30:22 +0000
ROA not after: Tue 25 May 2027 02:35:22 +0000
asID: 143492
IP address blocks: 240a:a34a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:1a:4d:26:0a:c9:38:e6:f0:9a:46:f3:cc:3f:d7:f0:ac:b7:10:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:22 2026 GMT
Not After : May 25 02:35:22 2027 GMT
Subject: CN=8043E296F69789F3E9B3A70BD00B2670FFE5977B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d9:02:84:d5:36:aa:12:26:f9:fd:2b:20:fa:
42:bc:75:af:9b:74:da:59:60:9e:68:eb:79:a9:28:
9a:23:01:a4:de:26:9f:cf:c7:0d:91:5d:49:b5:93:
22:25:04:30:be:39:5d:d9:9b:e7:f2:1b:4b:d3:32:
48:20:24:3b:f8:bd:ac:42:e2:82:b2:d2:1a:e8:56:
ea:4c:8d:82:cd:5b:02:d7:f0:27:78:db:5f:5d:59:
e7:71:ce:85:37:80:e9:66:50:8f:f9:4e:44:d2:a1:
bd:08:2d:74:3f:4a:4e:36:46:d6:88:ab:d7:ca:f8:
7d:e9:9e:4a:14:dc:5a:31:05:8a:d6:bf:a8:c1:68:
b3:8a:2a:7f:29:df:a9:93:1c:cc:73:16:00:f4:97:
91:92:6d:ba:22:cd:71:cb:a4:7f:89:f3:88:c0:ed:
b5:8b:1b:ee:95:b1:06:f3:0c:23:5a:22:9f:78:da:
07:14:d7:67:82:57:7f:21:d7:4d:29:a5:ac:ca:e0:
e4:bf:d5:46:b6:3c:7a:84:e8:fc:c4:9c:00:84:10:
0e:69:5b:c6:6e:44:e3:ab:bb:ed:bb:34:b3:fe:cc:
1e:d3:a0:27:c3:13:28:94:8c:42:7f:33:78:7b:ab:
ae:ba:fb:d8:b8:23:7a:84:e8:5a:24:b4:06:8a:a9:
e5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:43:E2:96:F6:97:89:F3:E9:B3:A7:0B:D0:0B:26:70:FF:E5:97:7B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143492.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a34a::/32
Signature Algorithm: sha256WithRSAEncryption
bd:70:03:f6:5e:0c:e9:73:6d:09:47:be:61:03:c4:85:9a:1d:
8e:0a:a6:2c:09:46:d4:13:19:71:06:b8:40:42:58:e8:07:95:
f4:c4:ee:c7:12:fc:9f:93:06:69:94:6d:ff:92:77:27:11:64:
70:55:06:fb:70:f9:c6:f7:14:03:f0:ee:27:3c:06:7d:24:95:
4c:f1:d1:37:fe:9e:37:95:b6:80:dc:e0:80:1b:cc:fd:77:14:
8d:c7:b1:9a:26:9d:bc:2a:03:02:69:ae:87:2e:83:fe:92:48:
d4:2f:b6:e2:16:93:76:eb:68:1e:3f:01:f7:a2:f5:1a:e4:f0:
95:e8:cc:7b:be:10:6e:31:da:3d:9e:25:70:8b:d9:34:d8:b8:
c1:e2:5a:20:95:4e:80:e0:3f:d9:d2:26:fa:8e:a4:d3:ee:48:
76:22:91:45:c8:78:cc:43:70:b6:32:3d:f8:3e:8f:30:ff:2f:
2e:a0:69:3a:89:62:88:c2:d9:68:90:31:68:3f:01:68:ca:a5:
dd:ea:3b:3c:4b:76:91:75:1e:b1:13:33:9a:93:9f:05:b5:69:
59:83:8b:b0:4d:ff:5d:57:ed:4c:57:68:66:9e:a2:ee:d3:0d:
bf:e9:87:35:68:5a:06:f6:19:a7:57:70:0c:a7:29:c5:62:8a:
1b:63:24:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:42 2026 by rpki-client