Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143099.roa
File: AS143099.roa (raw, json)
Hash identifier: FZmEQMeaNW6vHgRxTSCgXVFI84VIkGdnMpw/kywFuMU=
Subject key identifier: 1E:7F:33:4C:DC:43:08:46:84:58:18:83:4F:75:03:FF:9E:27:AF:6A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 24A2B958314F1EDBCDF00DD2285B7B386A258B7B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143099.roa
Signing time: Tue 26 May 2026 01:13:26 +0000
ROA not before: Tue 26 May 2026 01:08:26 +0000
ROA not after: Tue 25 May 2027 01:13:26 +0000
asID: 143099
IP address blocks: 240a:a1c1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:a2:b9:58:31:4f:1e:db:cd:f0:0d:d2:28:5b:7b:38:6a:25:8b:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:26 2026 GMT
Not After : May 25 01:13:26 2027 GMT
Subject: CN=1E7F334CDC430846845818834F7503FF9E27AF6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:06:26:cd:62:7c:05:46:69:a3:f8:82:30:1d:
ce:d5:59:25:8c:a1:c9:b5:cf:cf:fd:e9:22:69:14:
5f:fa:36:63:29:68:e3:8a:d0:2c:c9:7c:07:b3:71:
6d:9f:ec:54:76:ba:c5:af:f8:8e:0d:6c:83:67:89:
3a:34:81:89:9c:3f:88:38:18:1a:06:67:95:8a:d7:
5f:71:04:20:8a:8c:0c:66:1b:7e:ad:e2:72:16:95:
da:8d:d4:18:40:47:1c:75:f1:09:ce:c4:fa:48:34:
52:a9:4f:47:7b:0a:67:47:9a:17:b9:67:ef:92:c6:
0d:e9:6a:a8:23:f5:eb:d1:17:63:bf:f9:b9:5b:3e:
75:58:e0:47:03:a8:7a:e8:b6:41:78:a3:85:7d:e3:
65:cc:20:e5:6c:e1:49:8b:44:39:3a:9d:31:c3:d0:
76:c0:53:ae:91:bd:39:aa:b4:57:c6:28:c2:d7:57:
d9:e6:9b:73:30:b9:e6:53:d7:70:aa:38:3f:8f:7b:
f1:05:dc:f1:12:d2:6b:8f:3b:7d:8d:fe:7d:d5:b0:
38:70:9f:4e:0a:0b:09:4f:92:6e:4d:bf:6a:e9:e3:
1f:89:47:eb:bc:06:60:89:e6:88:18:18:8c:e3:bb:
f5:86:0f:0f:af:d1:a7:e8:23:de:79:16:8f:91:e2:
cf:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:7F:33:4C:DC:43:08:46:84:58:18:83:4F:75:03:FF:9E:27:AF:6A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143099.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a1c1::/32
Signature Algorithm: sha256WithRSAEncryption
ae:fe:85:52:8b:e4:57:3c:ca:67:d2:1a:30:78:97:9a:17:d6:
c1:87:e2:10:5e:ed:b8:dc:47:89:13:ee:11:0f:ae:64:2b:98:
4d:34:c2:6e:3a:3f:d0:10:b3:39:8d:3c:04:e3:9a:ce:76:ed:
15:8e:ab:33:65:fa:f1:95:f0:a2:ad:9b:47:f1:23:51:8a:c2:
dc:fd:80:d1:1d:d8:18:ed:47:a8:90:55:70:4b:9c:e0:d9:5a:
6e:a3:53:c7:d3:69:61:4e:a6:f5:2c:36:da:1b:fb:30:70:ba:
eb:fd:fb:a5:e6:48:16:51:ef:a8:37:56:20:ba:1d:e3:dd:ed:
58:a3:c5:15:68:38:9c:ec:b5:a9:35:94:be:54:5c:91:35:6d:
eb:91:17:9d:04:14:57:ed:e5:64:14:49:38:42:ce:1c:0e:ca:
b0:2f:da:35:eb:7b:ab:60:24:76:b1:f2:99:30:a0:a9:76:77:
d2:b4:55:97:03:a4:fd:df:66:3e:4e:f8:eb:dd:6e:a1:fc:a5:
da:6f:72:ab:df:fd:60:24:6e:71:f9:fa:c0:b8:0a:3c:f1:e8:
22:04:64:bf:92:25:3d:7b:93:c4:4c:e3:8e:9a:1c:9c:dd:29:
f0:eb:48:be:24:15:d9:4d:c7:32:64:57:48:1a:81:6d:e8:cf:
89:08:96:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:54 2026 by rpki-client