Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143102.roa
File: AS143102.roa (raw, json)
Hash identifier: qajd7YTIRZxFk5j5znvJQn0TPgkq7uYGZMWZHSItESk=
Subject key identifier: BB:05:B0:0D:D4:1F:9B:3B:37:83:2C:9F:F5:E7:A5:A2:00:B5:07:EF
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 41C97277475F9A2A05D9087062B3FF426EE6D47D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143102.roa
Signing time: Tue 26 May 2026 06:30:27 +0000
ROA not before: Tue 26 May 2026 06:25:27 +0000
ROA not after: Tue 25 May 2027 06:30:27 +0000
asID: 143102
IP address blocks: 240a:a1c4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:c9:72:77:47:5f:9a:2a:05:d9:08:70:62:b3:ff:42:6e:e6:d4:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:25:27 2026 GMT
Not After : May 25 06:30:27 2027 GMT
Subject: CN=BB05B00DD41F9B3B37832C9FF5E7A5A200B507EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a7:d0:81:73:5b:bd:1b:4a:3b:42:8f:f7:13:
73:5c:b1:d2:03:86:bd:5a:cc:25:38:76:8f:aa:58:
f0:a4:1b:57:78:eb:ac:04:f5:0d:da:41:48:34:ab:
c8:6e:dc:9f:e2:bb:66:fa:24:48:07:e3:7f:43:68:
f2:6b:03:00:cb:21:52:d1:77:67:3d:51:69:3c:48:
78:5a:35:c2:9f:35:6a:8a:6b:ab:df:35:d9:60:65:
30:36:7d:28:b7:b5:fc:6d:3b:71:c5:30:0c:d7:05:
dc:47:8b:db:42:cc:46:67:7a:f1:e1:a0:45:fc:c4:
74:d8:b3:ae:3a:32:dd:1e:a2:60:80:91:db:0c:8f:
9a:7e:10:06:69:5a:a8:d4:b3:38:7e:ce:5d:2c:86:
1d:0e:ea:52:68:fe:1b:d5:45:5d:d4:83:92:d3:27:
78:14:84:35:fa:40:68:d9:09:c5:e0:b6:f2:2f:8a:
81:d6:44:a1:04:4c:18:4d:48:4a:64:a0:0e:48:a9:
9c:13:4b:e8:47:60:43:75:c2:b5:98:cc:db:c9:1c:
55:d3:96:30:e7:22:ab:93:a7:08:eb:40:f2:a0:00:
68:95:b1:47:a9:46:3e:63:45:60:e8:f9:55:5d:83:
97:33:a4:f5:39:74:e2:e8:52:0a:67:9d:19:66:44:
88:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:05:B0:0D:D4:1F:9B:3B:37:83:2C:9F:F5:E7:A5:A2:00:B5:07:EF
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143102.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a1c4::/32
Signature Algorithm: sha256WithRSAEncryption
7f:2e:2d:93:79:74:0e:b3:b8:24:c0:68:0c:88:5a:c8:3d:c9:
dd:f7:9d:70:d2:21:c1:c4:24:5f:cb:81:1d:ab:26:a8:06:73:
a4:09:b8:36:13:11:92:49:99:54:36:32:0a:0c:59:78:9d:97:
bf:e0:a9:e0:46:48:c0:15:ee:08:91:c5:82:95:f8:3e:a0:1d:
8d:6d:eb:57:fc:18:e5:fa:c2:3e:18:2d:1e:ed:10:05:d5:c4:
27:38:88:58:77:49:eb:86:c0:78:bb:d9:c0:b0:bc:e6:71:eb:
ec:d4:61:3a:25:cd:46:9f:13:77:31:21:60:59:44:88:77:5d:
ea:cf:a8:15:3a:7c:39:5d:d2:25:84:b1:9e:79:b5:03:b8:b6:
1e:fd:16:e5:2d:43:31:d4:75:22:39:89:97:ba:5d:61:b7:bc:
f9:98:cf:7e:f8:f2:69:cc:e8:77:83:f3:6e:4a:9d:3d:70:e3:
9f:e7:33:84:f5:57:18:a1:c7:26:83:20:c6:bf:34:0c:f3:9c:
37:2f:46:a5:3d:e8:f9:b9:17:d3:12:7e:4e:2b:00:d8:b2:15:
64:65:2c:68:14:90:34:03:7c:e8:ce:d1:05:5d:58:29:50:f8:
f6:d8:6b:e4:ba:93:03:1c:6e:71:79:91:8f:d8:b5:1f:45:b9:
17:48:e0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:13 2026 by rpki-client