Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143085.roa
File: AS143085.roa (raw, json)
Hash identifier: jTzL3T8sp/dzqxl1pZ/QiQodx9dY7uwebwIk4heUq3Q=
Subject key identifier: AC:EA:0C:F9:F0:AC:EA:D8:FF:79:43:C4:47:6D:13:C5:9D:30:51:CC
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2E02BAAE57D8E1954A1266CE8EF90EF6CDDA5FF7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143085.roa
Signing time: Fri 22 May 2026 04:08:03 +0000
ROA not before: Fri 22 May 2026 04:03:03 +0000
ROA not after: Fri 21 May 2027 04:08:03 +0000
asID: 143085
IP address blocks: 240a:a1b3::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:02:ba:ae:57:d8:e1:95:4a:12:66:ce:8e:f9:0e:f6:cd:da:5f:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:03 2026 GMT
Not After : May 21 04:08:03 2027 GMT
Subject: CN=ACEA0CF9F0ACEAD8FF7943C4476D13C59D3051CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:97:e9:90:4c:8a:ff:ec:20:02:31:71:78:51:
3e:d4:57:46:85:49:51:af:f0:0c:b2:e5:e8:22:62:
fd:27:24:9a:43:3d:d1:7c:ef:86:5e:a9:7a:b0:b3:
23:1f:5f:52:cb:a0:6b:86:46:4b:52:47:55:01:50:
f8:b3:7c:76:54:af:28:dc:a1:9f:c6:5f:74:e7:70:
b7:46:7b:15:89:0d:9b:03:e7:73:1e:d1:e0:aa:d0:
0b:29:ca:8d:13:87:ce:67:dd:6e:75:73:7e:ec:8f:
e5:de:73:e2:35:2f:36:4c:8b:28:00:74:1b:ec:b5:
68:43:bc:f6:b5:29:26:a4:94:69:dd:c9:d7:33:ef:
84:70:14:54:b4:c1:7e:8a:c4:e0:f6:2a:6e:2b:f8:
b1:d0:a5:7d:b1:b8:78:e6:fa:30:d3:95:01:82:84:
99:f7:1f:01:7a:99:c1:3e:7d:ab:54:7c:4b:ca:74:
f2:0a:c1:24:fb:89:51:b8:dd:95:6a:df:04:c6:d1:
97:db:ba:f4:ef:71:7c:2f:a5:9a:c8:f5:a9:6e:c3:
48:d6:d2:ed:12:19:aa:23:d4:66:c9:5f:a7:3c:cb:
37:8c:f2:72:57:14:50:7d:72:2a:24:c7:5b:26:a3:
89:85:b1:4d:e8:63:8c:07:a4:00:eb:0a:2a:be:49:
2a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:EA:0C:F9:F0:AC:EA:D8:FF:79:43:C4:47:6D:13:C5:9D:30:51:CC
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143085.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a1b3::/32
Signature Algorithm: sha256WithRSAEncryption
ac:9e:1f:6e:a9:7c:64:b0:01:e8:de:6f:dd:ca:cd:0f:69:cd:
c3:14:ab:9e:b3:e0:f1:87:a3:b0:d2:8b:b1:c9:bd:49:e5:7f:
54:23:a3:f4:dc:ae:0f:cf:ba:04:cb:31:22:2c:93:83:0b:21:
f9:a3:ad:ea:be:44:e7:5f:28:ca:4a:02:e2:b9:d2:f6:fc:fa:
61:3f:f7:ca:7d:77:fa:f8:46:1e:45:fa:cc:55:10:0b:84:bf:
2d:24:ee:e4:6b:3f:69:2f:29:b0:75:ab:4a:81:13:6a:e8:fe:
1b:69:ee:64:92:d6:28:16:86:37:dd:c3:f2:69:40:75:82:97:
62:17:77:2a:12:c5:c1:f3:cf:80:4f:81:26:ec:7e:14:cf:2e:
41:41:b5:66:7b:76:e1:4f:47:70:84:54:d2:77:54:01:ad:16:
56:e9:3a:2c:26:36:a6:09:c6:f5:f8:39:64:84:5d:ef:12:b3:
1c:f0:e7:25:7a:08:05:9c:6a:13:97:c6:69:ad:fa:ab:ec:28:
dc:3b:6b:34:f7:7f:d1:f2:58:34:b5:f5:e5:c2:1a:b4:c3:c7:
e4:47:ec:3b:55:57:89:f6:44:04:d9:41:de:c8:b4:8a:62:9f:
bf:e6:6d:c5:58:c6:d9:cd:be:f7:42:7a:71:82:0f:11:4f:c1:
95:cc:75:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:20 2026 by rpki-client