Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143019.roa
File: AS143019.roa (raw, json)
Hash identifier: CkOMjZeznRgE3cjTWAxtyWAI7AW5nvqwS6JwFlP5iDg=
Subject key identifier: 7C:97:41:3C:9B:CF:67:13:77:69:BE:45:70:10:BD:FE:8B:45:2F:07
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3C00B7F7F7CE276D640C21CA89BDD3AC26723D5C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143019.roa
Signing time: Fri 22 May 2026 01:50:40 +0000
ROA not before: Fri 22 May 2026 01:45:40 +0000
ROA not after: Fri 21 May 2027 01:50:40 +0000
asID: 143019
IP address blocks: 240a:a171::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:00:b7:f7:f7:ce:27:6d:64:0c:21:ca:89:bd:d3:ac:26:72:3d:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:40 2026 GMT
Not After : May 21 01:50:40 2027 GMT
Subject: CN=7C97413C9BCF67137769BE457010BDFE8B452F07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:80:96:9f:58:b6:d1:a4:25:67:dd:32:1e:12:
ab:f3:a1:4d:10:6c:cc:43:25:54:ec:62:2a:a8:82:
af:66:fd:3f:a4:dc:99:3e:6e:13:39:b7:52:a7:da:
d4:3e:e0:44:e7:79:fc:f5:90:46:d3:9e:8f:54:59:
25:06:be:77:bd:82:a3:9c:33:8f:e4:69:14:ea:ec:
a8:dc:43:94:b5:dc:f6:49:27:39:cf:6b:d6:cc:05:
87:e7:57:b3:94:79:00:90:6e:9a:32:21:98:fd:0f:
5f:33:2a:35:e8:aa:f0:2d:48:7d:8d:06:82:1d:2b:
bf:da:32:e4:8a:f5:f7:93:50:db:5d:67:a1:70:c3:
b6:00:8f:c7:14:e2:73:05:41:81:87:3b:72:32:e4:
96:fd:54:d5:78:de:b4:98:96:8b:4f:23:d7:c6:6d:
46:46:70:6b:e0:45:8f:d1:d4:5f:24:19:d2:04:15:
b1:18:09:72:b4:af:e7:62:f1:6f:5c:fd:81:31:e6:
a4:03:77:0e:5e:d3:b6:8a:7b:ff:40:aa:51:7f:69:
d9:d2:59:56:5f:c9:29:e6:42:8d:6e:24:50:e5:3d:
9f:c7:90:fb:dc:96:d3:d3:34:6d:f5:f4:66:ff:89:
de:b7:df:ab:97:57:8f:49:d1:c1:eb:b8:a7:be:8c:
3c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:97:41:3C:9B:CF:67:13:77:69:BE:45:70:10:BD:FE:8B:45:2F:07
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143019.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a171::/32
Signature Algorithm: sha256WithRSAEncryption
06:0d:6f:72:0b:c0:2f:02:69:d2:7a:ac:37:32:4c:88:80:43:
0a:53:62:80:23:3e:8d:4b:0a:a7:df:cb:0f:dc:ce:96:d2:fc:
bc:c4:c4:d7:45:35:06:64:10:35:d4:a0:36:62:7a:a4:8b:39:
a9:28:bb:81:1d:07:d6:e7:92:0c:4c:7b:8a:c8:8a:c2:c7:0f:
11:61:1d:0a:9a:bf:b4:70:48:72:09:6d:c8:c7:e2:d1:ab:bc:
9d:d3:af:9f:20:10:ef:13:6c:c1:db:37:c7:b3:ae:de:f0:6f:
b5:11:05:39:22:db:6f:1f:c5:1c:01:34:53:fb:10:48:72:16:
10:3c:84:2b:b7:63:4f:e8:88:fc:9a:f4:46:f4:7d:f3:4b:f9:
9d:22:cf:94:49:b0:a4:ac:a5:1f:f1:ed:0a:6a:e7:6c:df:3a:
a0:ed:3e:7a:79:76:a5:10:13:a5:97:1d:c5:3c:d9:63:66:a5:
6b:11:2f:5d:10:74:80:d4:2d:5c:60:5e:d8:da:10:6b:72:35:
d7:5b:ba:f4:e2:4c:43:7c:f3:b3:b6:c5:d5:5d:53:b1:35:dc:
61:ff:1c:76:94:33:f5:0f:8b:8a:81:d8:75:72:a7:5f:b0:7a:
9c:0c:20:a1:eb:8c:f2:e5:6f:78:37:7e:f0:01:28:e5:96:e8:
81:df:44:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:10 2026 by rpki-client