Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143063.roa
File: AS143063.roa (raw, json)
Hash identifier: dKmtZITLL2gy9PsCGNOwDnFOsLneAUV7p1J5qHHBluc=
Subject key identifier: 77:C1:F4:57:87:E4:9E:18:CE:DC:DF:F7:25:A0:FD:4E:92:D2:40:35
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 543546225F533B0BF68BBEC269C3361C090CF571
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143063.roa
Signing time: Fri 22 May 2026 04:26:55 +0000
ROA not before: Fri 22 May 2026 04:21:55 +0000
ROA not after: Fri 21 May 2027 04:26:55 +0000
asID: 143063
IP address blocks: 240a:a19d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:35:46:22:5f:53:3b:0b:f6:8b:be:c2:69:c3:36:1c:09:0c:f5:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:21:55 2026 GMT
Not After : May 21 04:26:55 2027 GMT
Subject: CN=77C1F45787E49E18CEDCDFF725A0FD4E92D24035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6c:5a:66:f3:5c:a6:53:8b:ad:85:78:7e:d8:
2b:a0:bd:81:0d:bc:cd:bb:c8:c1:7f:8d:22:bf:31:
7e:58:af:c2:7b:73:24:12:85:0d:0a:17:b2:70:be:
e5:70:b8:5b:13:3a:b9:39:98:1a:12:5f:f9:36:2b:
0f:40:d2:d8:d2:50:89:4c:7e:ad:1d:be:4d:8b:90:
89:2f:dc:a1:6d:cd:1c:7c:3d:6e:42:80:f5:74:6a:
5c:61:21:65:c6:e4:b5:3b:19:e1:ef:1b:ab:d6:86:
38:c0:9e:70:c3:8b:cb:44:cb:59:0f:f6:ce:a2:30:
1a:92:a6:58:c1:cf:7a:51:23:7f:2d:3a:eb:fc:2d:
b2:8d:06:63:fc:9c:fe:4b:0b:8f:2f:dd:5d:cf:8d:
10:c5:c2:c4:d0:68:f7:dd:54:f5:cf:b7:35:20:2c:
f6:b7:c3:b7:cd:93:4a:e2:bf:19:54:73:9e:b7:81:
c9:c6:0e:32:b7:ac:2f:0f:2a:40:d1:45:f5:8c:81:
5f:ea:44:77:64:38:97:fd:e4:27:6f:db:5b:19:5e:
d6:1e:06:91:d4:14:be:91:3b:0d:36:0e:e4:67:2d:
b8:6e:61:6b:4d:61:40:58:c1:18:db:63:6c:ea:c0:
82:c3:d7:b7:d5:c9:00:2c:dc:12:03:d9:c1:20:ea:
2c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C1:F4:57:87:E4:9E:18:CE:DC:DF:F7:25:A0:FD:4E:92:D2:40:35
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143063.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a19d::/32
Signature Algorithm: sha256WithRSAEncryption
8e:fa:fb:40:6a:da:67:f4:94:4d:94:f1:c3:7b:62:65:c4:a3:
ed:22:5d:4d:52:64:b8:13:71:48:0c:e7:fe:18:82:b7:13:27:
b3:75:62:27:9f:36:37:bb:eb:cd:11:fc:e2:f0:e5:5d:d3:47:
bf:94:cc:a1:41:ba:72:cc:a0:30:d8:c9:d5:6a:2f:7a:e6:7c:
9e:fc:56:d6:3f:f0:b4:87:07:09:57:99:ef:65:ff:7c:66:e7:
a0:d1:db:de:16:6e:72:62:49:59:76:22:a5:65:98:6d:36:9d:
b7:71:af:79:0e:bd:b5:92:de:42:e6:06:2d:7e:a0:a5:22:48:
40:4a:3d:28:e3:63:31:3c:57:49:12:66:e9:9c:23:0c:5a:1f:
3b:ac:29:fc:62:0c:3c:d6:8c:bd:de:f3:c0:2a:c6:8d:8e:f8:
29:6e:f4:f8:fc:c2:29:f2:85:c2:dd:6c:de:84:5d:2f:9a:62:
c7:61:df:84:63:49:e1:d9:78:48:d3:ee:1a:05:45:72:c0:df:
f9:09:2d:82:88:26:ce:d6:13:96:9c:c7:1c:ed:8e:3f:23:e0:
88:5b:48:e6:05:33:0b:df:0e:7f:cb:4a:05:b4:74:50:3f:07:
47:77:52:c4:3b:b5:88:74:9f:37:c3:90:64:01:18:cf:3f:d4:
ab:e1:bc:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:42 2026 by rpki-client