Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143049.roa
File: AS143049.roa (raw, json)
Hash identifier: 0o27Navjs7gpN2e0QiIoab7ZmYGr41I0OI6zcCuYWM4=
Subject key identifier: 8F:3B:8B:63:59:3C:76:01:C5:94:7C:08:4A:42:2E:17:8F:F2:B9:2D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 17EE7997064BFD54ABA45FA945CBF2F9862C3C85
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143049.roa
Signing time: Mon 25 May 2026 06:48:57 +0000
ROA not before: Mon 25 May 2026 06:43:57 +0000
ROA not after: Mon 24 May 2027 06:48:57 +0000
asID: 143049
IP address blocks: 240a:a18f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:ee:79:97:06:4b:fd:54:ab:a4:5f:a9:45:cb:f2:f9:86:2c:3c:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:43:57 2026 GMT
Not After : May 24 06:48:57 2027 GMT
Subject: CN=8F3B8B63593C7601C5947C084A422E178FF2B92D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9a:9d:c6:b5:51:e1:01:65:43:6b:ff:4d:2c:
cc:ad:5e:43:5b:cf:8c:08:08:ff:38:ce:57:fa:3c:
fa:98:ff:86:9e:20:4b:17:9f:d5:94:ca:77:06:5c:
39:a7:46:2f:5e:5e:f6:75:8c:e6:ae:85:77:6f:3f:
4b:e6:38:30:92:11:17:a1:e6:e1:7f:80:d6:9d:b6:
9d:c4:18:20:fb:4c:23:2c:06:41:9d:84:f4:a5:b0:
dd:cd:51:c2:4c:1e:a7:c1:73:57:1a:d1:ab:94:d2:
9f:90:69:a2:2c:bd:30:57:2b:40:65:c5:29:f4:10:
d6:7b:49:10:d1:72:a7:96:91:70:04:db:38:c8:22:
33:97:31:0b:79:20:66:48:eb:a7:a4:12:d9:95:7a:
4c:35:af:1d:49:e9:77:33:5a:6d:26:3f:94:e4:e8:
d9:16:4c:a0:d2:32:7b:c4:82:13:72:73:58:64:a3:
d2:78:d1:99:3b:16:bc:bc:d0:0b:f7:51:c1:f8:af:
bf:fd:36:40:09:c9:0b:50:28:61:ce:e1:30:f2:51:
4e:5c:78:42:ef:15:b9:2f:5e:b7:2c:4d:78:d8:9d:
76:52:c6:a5:fa:61:13:03:6e:b5:06:a6:ed:aa:5b:
39:2e:f7:b4:89:a5:77:e7:98:29:e9:79:0f:aa:3f:
29:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:3B:8B:63:59:3C:76:01:C5:94:7C:08:4A:42:2E:17:8F:F2:B9:2D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143049.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a18f::/32
Signature Algorithm: sha256WithRSAEncryption
1d:34:a0:f8:d4:5e:7d:49:3b:ce:0c:0d:a3:e5:8b:42:89:43:
2d:41:7d:cd:04:91:19:89:10:b9:92:62:c5:bf:f2:40:d9:86:
9a:04:5b:1f:b2:e6:00:30:69:58:56:cb:59:ef:fd:47:f9:64:
4b:b6:c5:9e:a4:3a:47:86:65:55:fb:99:8a:91:9d:f7:04:75:
f7:e9:37:50:45:69:3b:08:7c:74:a5:e8:30:3f:60:d7:e0:bb:
2c:a8:af:6f:31:ce:84:12:f7:e3:e5:6a:23:22:85:82:30:83:
0d:76:9b:66:f2:90:99:8d:26:7f:45:fd:df:ba:89:bb:4f:a0:
58:b1:97:6f:ef:97:18:22:41:17:02:78:c9:05:17:59:47:49:
26:61:3d:1e:70:69:4a:46:4c:ba:a4:2e:06:fa:d9:89:5e:e9:
bd:4d:72:f7:77:0e:b5:2e:92:06:c4:f8:3d:a2:72:54:06:33:
82:e8:b0:07:dd:d5:fe:da:c4:62:fa:6c:4e:5e:ad:76:f5:cd:
c3:5b:c3:2a:6b:bd:6e:01:44:26:3a:f4:0a:ef:60:5a:6b:68:
60:38:38:e5:95:06:76:ea:35:1f:46:b9:99:8a:fe:0e:46:5d:
41:74:96:0e:ef:70:04:9e:a9:25:53:cf:e1:91:53:88:e8:66:
05:67:4f:e0
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUF+55lwZL/VSrpF+pRcvy+YYsPIUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwNjQzNTdaFw0yNzA1MjQwNjQ4NTdaMDMxMTAvBgNV
BAMTKDhGM0I4QjYzNTkzQzc2MDFDNTk0N0MwODRBNDIyRTE3OEZGMkI5MkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVmp3GtVHhAWVDa/9NLMytXkNb
z4wICP84zlf6PPqY/4aeIEsXn9WUyncGXDmnRi9eXvZ1jOauhXdvP0vmODCSEReh
5uF/gNadtp3EGCD7TCMsBkGdhPSlsN3NUcJMHqfBc1ca0auU0p+QaaIsvTBXK0Bl
xSn0ENZ7SRDRcqeWkXAE2zjIIjOXMQt5IGZI66ekEtmVekw1rx1J6XczWm0mP5Tk
6NkWTKDSMnvEghNyc1hko9J40Zk7Fry80Av3UcH4r7/9NkAJyQtQKGHO4TDyUU5c
eELvFbkvXrcsTXjYnXZSxqX6YRMDbrUGpu2qWzku97SJpXfnmCnpeQ+qPyk5AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUjzuLY1k8dgHFlHwISkIuF4/yuS0wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzMDQ5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqhjzANBgkqhkiG9w0BAQsFAAOCAQEAHTSg
+NRefUk7zgwNo+WLQolDLUF9zQSRGYkQuZJixb/yQNmGmgRbH7LmADBpWFbLWe/9
R/lkS7bFnqQ6R4ZlVfuZipGd9wR19+k3UEVpOwh8dKXoMD9g1+C7LKivbzHOhBL3
4+VqIyKFgjCDDXabZvKQmY0mf0X937qJu0+gWLGXb++XGCJBFwJ4yQUXWUdJJmE9
HnBpSkZMuqQuBvrZiV7pvU1y93cOtS6SBsT4PaJyVAYzguiwB93V/trEYvpsTl6t
dvXNw1vDKmu9bgFEJjr0Cu9gWmtoYDg45ZUGduo1H0a5mYr+DkZdQXSWDu9wBJ6p
JVPP4ZFTiOhmBWdP4A==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:04 2026 by rpki-client