Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143569.roa
File: AS143569.roa (raw, json)
Hash identifier: 1GPPhjo0y4JcjXGPDh6jJyAXUYNqjKDKGjx8mAvS72A=
Subject key identifier: 31:B3:5E:8D:27:20:39:FD:B4:A7:34:16:EB:DB:E0:A2:60:F9:C5:A9
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 613BCE5B6406804F1162C9966FD26BDAE4B09451
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143569.roa
Signing time: Tue 26 May 2026 06:13:01 +0000
ROA not before: Tue 26 May 2026 06:08:01 +0000
ROA not after: Tue 25 May 2027 06:13:01 +0000
asID: 143569
IP address blocks: 240a:a397::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:3b:ce:5b:64:06:80:4f:11:62:c9:96:6f:d2:6b:da:e4:b0:94:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:08:01 2026 GMT
Not After : May 25 06:13:01 2027 GMT
Subject: CN=31B35E8D272039FDB4A73416EBDBE0A260F9C5A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3c:aa:35:e7:74:52:f4:a3:45:67:d6:3d:6c:
56:55:e2:ee:3b:d3:b0:f5:9a:24:47:53:6e:4c:20:
65:c6:66:a8:9c:d3:bf:1f:93:20:90:7e:68:b0:c3:
cd:52:a3:ec:20:0e:c9:35:29:ce:26:06:53:21:e4:
69:68:3c:5f:af:30:27:67:75:1c:04:e7:f6:7b:0d:
fa:9b:44:68:72:21:95:80:90:5a:d3:70:11:a1:15:
4f:da:2e:6e:22:ea:a2:de:4a:9f:eb:25:77:17:4d:
c6:cc:3c:e2:93:b1:81:e9:0c:e5:c4:af:6f:43:ee:
dc:5c:48:29:4f:c2:f5:64:3b:63:6e:e0:36:c9:9e:
37:cc:ae:2d:29:ae:c2:86:b9:98:1b:45:fc:04:58:
1e:12:53:6e:b1:04:c4:f5:b1:6b:15:62:79:20:1e:
41:30:46:d4:d8:47:7b:f4:60:ca:58:51:b5:8b:be:
1f:b5:cc:8f:28:19:2a:1a:12:ca:0b:6b:ad:fa:cd:
f6:f0:9a:db:17:48:ec:ae:79:4a:af:12:52:2a:be:
a1:ec:ab:ef:3d:89:4c:85:6b:f7:0f:74:2d:e7:1a:
5f:39:54:1e:0d:0c:68:a5:48:36:71:bc:fa:9d:30:
64:88:70:d9:01:58:21:80:13:74:c5:f1:76:1d:3e:
09:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B3:5E:8D:27:20:39:FD:B4:A7:34:16:EB:DB:E0:A2:60:F9:C5:A9
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143569.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a397::/32
Signature Algorithm: sha256WithRSAEncryption
48:a9:46:9a:5e:f3:93:92:6e:da:a5:d4:42:bb:3c:0d:80:55:
07:08:fe:9d:c6:d5:99:27:d0:36:b7:81:ae:98:d5:32:9c:aa:
52:13:cd:89:24:64:9e:89:02:08:38:52:35:7d:85:34:86:c4:
cd:30:bd:3c:cc:78:dd:26:71:97:c8:4a:2b:85:b8:54:1d:25:
ef:4f:0f:a4:18:7d:60:68:48:59:78:cf:8c:8a:6e:ac:ab:45:
e3:66:db:cf:7e:04:4f:7c:f1:43:ef:c6:f4:ea:ee:42:d3:5f:
cc:eb:fd:dc:71:49:82:ce:67:ca:73:d6:41:03:96:80:6f:f7:
b2:60:e2:70:12:5c:ed:b5:9c:ab:f5:9d:69:f9:46:14:19:6f:
a3:6a:55:fe:d3:86:4c:87:9b:9c:fa:2f:94:27:e2:96:25:4e:
37:ee:75:42:2f:0c:2e:53:e6:0e:28:43:f4:1a:54:18:0a:ed:
a2:c5:74:05:3e:c1:a4:66:17:31:51:11:8c:97:5d:c6:fe:17:
1e:35:ea:a8:99:ee:ce:c7:3f:37:f8:9c:8d:f8:2b:c6:9a:d3:
8a:99:ef:2a:0a:e1:2c:b8:7c:39:48:10:00:72:1e:ee:f0:67:
23:1f:64:0c:02:cd:4e:c4:4d:86:b8:c5:17:e3:e9:02:58:90:
ca:b4:c5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:57 2026 by rpki-client