Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143512.roa
File: AS143512.roa (raw, json)
Hash identifier: hdBaY7kSi2aaKwP+3V42ecoPz4pqy1VujKPNEWVknUE=
Subject key identifier: 37:B7:47:32:F5:58:B2:19:D0:8C:1E:D1:4A:AF:EB:95:C5:89:2E:9C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3BC6695428A8FFAA516DFB15528AB18CEF8D7E15
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143512.roa
Signing time: Fri 22 May 2026 06:58:28 +0000
ROA not before: Fri 22 May 2026 06:53:28 +0000
ROA not after: Fri 21 May 2027 06:58:28 +0000
asID: 143512
IP address blocks: 240a:a35e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:c6:69:54:28:a8:ff:aa:51:6d:fb:15:52:8a:b1:8c:ef:8d:7e:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:28 2026 GMT
Not After : May 21 06:58:28 2027 GMT
Subject: CN=37B74732F558B219D08C1ED14AAFEB95C5892E9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:04:d5:37:73:e5:01:43:bf:c5:d7:5b:fb:27:
ee:9f:d9:ce:be:80:68:ce:a1:fe:dc:ae:cc:05:6e:
d0:7a:e0:b0:2e:f9:4b:ba:ca:64:be:1c:04:dd:23:
05:e6:81:1d:ab:43:05:a8:bc:3a:c0:f8:a0:b4:fa:
76:7b:a4:5e:54:0d:bb:a8:97:19:38:54:66:59:30:
ee:12:e1:f0:67:2e:3b:e0:a0:77:fe:6f:45:95:54:
82:bf:ef:f0:2d:9b:50:9d:dd:7e:21:46:44:c2:e6:
ba:61:ab:aa:c0:9b:21:af:cc:f3:89:e2:be:48:f7:
e6:ad:b4:ed:41:50:cf:ff:b4:bb:cc:63:1f:8d:3a:
a5:76:62:8c:fe:67:ad:94:5a:d1:28:2d:94:63:b0:
e8:50:df:07:c0:9d:39:19:1e:1a:fe:84:ac:c6:30:
ee:4a:6d:8b:b1:1e:71:51:07:d0:02:06:9a:e3:00:
47:a6:e6:b3:d4:d2:b0:49:3c:31:40:1c:f8:29:b3:
b9:3c:af:6e:21:3a:ff:e6:c9:26:d5:47:65:d2:7e:
18:7b:fa:1b:d5:9f:6a:62:4e:01:20:5e:a0:17:51:
b1:5d:59:b8:d9:bb:a4:0b:96:41:8e:bb:05:2a:02:
2a:5a:d7:46:9c:2f:50:d5:35:34:02:90:8d:ea:bd:
75:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B7:47:32:F5:58:B2:19:D0:8C:1E:D1:4A:AF:EB:95:C5:89:2E:9C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143512.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a35e::/32
Signature Algorithm: sha256WithRSAEncryption
14:2f:36:61:06:ab:10:c9:29:b7:71:f3:79:89:c3:98:4f:ec:
fd:56:c0:52:5a:7d:37:ff:a6:74:9d:0d:ab:3b:89:27:7f:e5:
2e:f5:7f:09:f4:4d:2d:23:17:1e:b0:3c:3d:b2:d1:75:8e:70:
dc:31:05:36:30:95:d4:28:48:eb:3e:c6:3e:7b:ef:e2:27:57:
4c:4e:f9:d1:cb:c7:b0:e4:94:09:5a:9f:ac:c4:1e:ef:55:48:
54:9c:7f:f0:d1:d5:4f:79:02:25:51:16:40:c4:94:ba:4c:29:
b5:e9:8f:ff:d1:de:79:0a:62:60:d1:61:2f:e6:76:2b:b0:48:
5c:01:2e:3f:b9:b6:56:fa:77:7f:25:4e:a6:2f:9e:41:be:e8:
49:2f:42:7e:db:18:91:d9:82:82:9c:b0:4e:10:11:85:a5:2a:
2b:14:ca:0e:f3:43:1e:11:8d:ef:93:2e:f5:e2:bf:48:46:12:
af:43:c9:4a:5f:51:49:d8:e9:9e:98:ab:82:5a:9c:e6:4a:75:
9f:18:1a:f4:5d:ec:f6:65:ba:09:70:e0:00:cb:8f:ab:4a:1f:
ec:d0:5c:44:5a:54:9f:c1:51:78:da:19:91:e9:ea:85:6d:c2:
aa:2c:9b:83:62:5b:0f:16:46:a4:f6:7e:f2:97:10:43:5b:4b:
fa:f5:ba:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:19 2026 by rpki-client