Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143077.roa
File: AS143077.roa (raw, json)
Hash identifier: lir+25EEo9F6f3gjFTfG4MtxbEsyPZa44yzW/gzqW4I=
Subject key identifier: 6C:76:F2:C7:C1:12:B4:0E:6D:29:71:B5:91:FD:14:AA:E1:64:D5:32
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4D306414B87B238AC6A638821E09026F519717ED
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143077.roa
Signing time: Mon 25 May 2026 01:51:33 +0000
ROA not before: Mon 25 May 2026 01:46:33 +0000
ROA not after: Mon 24 May 2027 01:51:33 +0000
asID: 143077
IP address blocks: 240a:a1ab::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:30:64:14:b8:7b:23:8a:c6:a6:38:82:1e:09:02:6f:51:97:17:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:33 2026 GMT
Not After : May 24 01:51:33 2027 GMT
Subject: CN=6C76F2C7C112B40E6D2971B591FD14AAE164D532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:49:2b:5d:11:fd:96:ca:37:6a:f3:c4:93:9a:
45:fd:c9:4d:22:8d:e1:77:59:c9:89:dc:71:6b:59:
8e:81:b6:ee:e6:b9:4b:31:25:95:88:49:f7:8f:a5:
bd:ee:91:cf:1d:83:6c:49:2c:dd:22:46:ca:4e:f4:
97:41:90:7a:d9:f2:ab:2d:38:08:19:7e:a2:8f:2d:
b6:b0:4d:7c:6b:0f:dd:7d:6a:e7:70:45:18:b2:53:
6e:11:78:a2:54:b4:2c:42:6e:e4:1c:71:a0:2d:a0:
a6:a3:29:56:80:0b:24:d0:40:93:c7:6b:0d:eb:df:
78:2d:4f:3a:db:67:18:f3:9c:6c:d8:b6:ad:8c:e8:
d8:d8:c2:e3:5f:01:f2:63:0f:19:a8:39:42:52:11:
7f:ea:34:c4:43:8d:ec:41:df:03:f7:ac:69:c2:27:
0b:57:e3:b1:0c:06:bb:26:ec:a7:09:58:57:0c:08:
4c:2a:9a:ee:28:4d:b7:19:df:f9:f4:e8:03:d1:15:
36:09:39:08:dc:07:98:43:b8:b0:c7:50:4d:42:e8:
71:e5:24:4f:0c:81:d2:48:8b:33:44:1c:61:a8:55:
52:34:c8:82:13:15:b7:27:39:61:3a:4a:8f:a9:5b:
96:c8:7c:37:3e:c0:ea:62:9e:46:8a:12:8d:8d:81:
0e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:76:F2:C7:C1:12:B4:0E:6D:29:71:B5:91:FD:14:AA:E1:64:D5:32
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143077.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a1ab::/32
Signature Algorithm: sha256WithRSAEncryption
54:b6:1a:91:fd:7f:09:71:46:0c:d6:6b:e6:27:cc:d4:89:a9:
b5:c1:60:5d:57:1e:c1:cc:0b:4e:88:e6:a6:2f:db:a1:23:11:
00:96:73:7c:b7:5b:35:f1:a0:ee:00:de:67:ef:d5:d8:cc:68:
91:1b:f0:1c:04:30:78:58:17:56:80:97:21:53:b5:8b:23:e8:
8e:af:ef:d3:c3:45:1b:0f:fd:7f:71:1f:8a:68:92:53:72:4f:
4d:cc:fa:07:eb:16:38:ce:36:a0:45:bc:24:e7:54:28:71:c4:
7b:2a:6f:ad:b6:ad:08:57:f7:44:7c:d4:38:fd:b7:0e:c3:e4:
2e:95:13:49:96:4f:39:d5:69:f9:a0:1e:11:ba:e9:17:26:00:
29:3b:1e:64:98:57:6f:cb:7b:78:2d:d1:ed:ee:be:83:d7:69:
04:be:cf:9f:bc:88:45:60:cf:b6:d3:43:d4:6b:e0:53:76:8a:
5b:d7:2c:63:e1:fa:71:c5:ed:5d:28:88:bd:dc:8d:ac:18:76:
c5:26:12:72:19:26:61:b7:6f:ca:ce:32:d9:45:2e:82:0a:b2:
f4:2b:28:14:b8:4f:d8:f7:48:3c:23:be:de:ce:06:dd:71:e9:
7f:94:d1:5b:9a:25:b2:95:17:38:d8:08:5f:1b:ed:1a:38:c1:
70:ce:74:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:05 2026 by rpki-client