Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143967.roa
File: AS143967.roa (raw, json)
Hash identifier: MuANVWzFVp6ld05ngHmTZL360zBHhap95OXyay0B2R8=
Subject key identifier: 5A:B5:1D:DC:ED:D9:7A:C9:F9:5B:20:87:8F:6A:71:1F:7A:F0:E8:C2
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: E93EE7486A0590F2D009BE9E84C5059D016E9E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143967.roa
Signing time: Fri 22 May 2026 07:08:47 +0000
ROA not before: Fri 22 May 2026 07:03:47 +0000
ROA not after: Fri 21 May 2027 07:08:47 +0000
asID: 143967
IP address blocks: 240a:a525::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
e9:3e:e7:48:6a:05:90:f2:d0:09:be:9e:84:c5:05:9d:01:6e:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:03:47 2026 GMT
Not After : May 21 07:08:47 2027 GMT
Subject: CN=5AB51DDCEDD97AC9F95B20878F6A711F7AF0E8C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:86:f7:43:fa:41:85:b8:42:26:b1:67:9b:63:
f7:9d:b3:1b:b1:4f:10:ae:6f:43:60:68:f0:c1:8b:
e5:36:05:4d:b1:6f:48:29:b4:98:a1:ee:df:a2:12:
58:d2:20:8d:7c:b8:fb:34:17:90:47:7e:95:e3:a3:
9a:8c:63:ae:60:8c:d7:ec:9d:fa:b2:0f:59:19:f9:
13:d4:14:eb:74:0c:23:64:29:15:92:8d:d2:30:70:
a8:44:13:40:37:18:1e:cc:4a:aa:17:db:06:de:70:
83:66:6e:ab:c4:68:68:7b:75:83:db:db:7f:dc:36:
5a:1c:b4:80:a2:24:ce:36:14:34:2e:2b:4f:f7:fc:
26:45:81:be:dc:f7:b5:85:49:1b:14:88:6d:82:5e:
76:1f:af:bc:a6:de:17:bf:80:77:22:f2:27:b5:01:
ec:26:1d:60:f4:aa:88:49:f2:1a:70:eb:79:60:27:
3b:e5:56:ec:0b:d4:b5:33:c4:2d:cf:81:e4:b3:95:
4f:b6:fe:fa:ce:2f:28:5d:ef:fb:76:f8:b3:5a:dd:
1f:17:f8:08:88:44:1e:77:69:1e:1f:67:03:59:46:
40:e9:0b:22:b8:2b:d0:d3:e7:97:b4:43:0a:6c:0c:
a4:b5:9c:02:5b:ae:a2:92:e6:8c:82:69:d2:0e:ed:
2c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B5:1D:DC:ED:D9:7A:C9:F9:5B:20:87:8F:6A:71:1F:7A:F0:E8:C2
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143967.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a525::/32
Signature Algorithm: sha256WithRSAEncryption
07:a5:07:ad:32:35:2b:21:f6:6b:37:f3:04:4a:0f:7c:70:80:
a8:86:6d:7c:32:01:18:7c:30:08:20:32:fa:d4:76:e2:b0:f6:
53:47:22:6a:8b:57:88:ac:c1:c1:0f:6f:2c:ba:84:fb:47:f1:
16:6a:6a:ca:0c:4a:6d:36:2d:e4:f6:8f:9d:90:81:6b:0a:be:
2e:17:d4:d8:83:4a:da:a9:fb:c7:23:88:70:e7:d7:e4:d0:48:
25:55:bf:e7:c6:f2:38:97:19:ee:a2:70:b3:95:4b:39:fd:5f:
51:2b:02:0a:b4:65:49:74:99:ac:ce:54:f7:1c:2c:f5:83:01:
64:de:c1:df:6b:d8:36:e4:59:30:7b:4d:3c:6f:1d:a7:b1:2d:
ef:a3:b8:26:13:ef:0a:ef:1f:72:e0:cf:bd:36:cd:7a:16:39:
8c:81:af:d0:98:2f:d2:34:8e:85:56:03:43:1d:fc:ea:19:23:
58:6f:af:00:be:a5:37:d4:2f:c1:74:78:8f:d9:1f:82:02:88:
87:3d:c5:cf:0d:26:cc:10:20:a4:3a:e1:ba:c8:d1:f0:04:83:
4b:3a:58:53:6b:5d:73:c0:75:ec:28:a8:bf:cf:4d:76:98:2a:
00:70:0c:89:ed:53:89:d5:68:dd:7c:93:19:da:ae:c0:46:24:
33:47:f1:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:46 2026 by rpki-client