Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143109.roa
File: AS143109.roa (raw, json)
Hash identifier: mbB0/3zV9aPlhGVNPy8k58lfQZncQx1StfmGqkWaU94=
Subject key identifier: F0:5B:0F:E5:16:5C:CC:F7:C5:5E:2A:A4:EB:27:25:F5:AA:AA:26:24
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1C69A7622DB47402C1DF9B9A6DCC7216B9A83C19
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143109.roa
Signing time: Fri 22 May 2026 02:47:25 +0000
ROA not before: Fri 22 May 2026 02:42:25 +0000
ROA not after: Fri 21 May 2027 02:47:25 +0000
asID: 143109
IP address blocks: 240a:a1cb::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:69:a7:62:2d:b4:74:02:c1:df:9b:9a:6d:cc:72:16:b9:a8:3c:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:25 2026 GMT
Not After : May 21 02:47:25 2027 GMT
Subject: CN=F05B0FE5165CCCF7C55E2AA4EB2725F5AAAA2624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:28:ea:7e:44:a2:a0:9f:c1:bf:fe:47:1f:78:
51:18:a0:c2:47:39:24:d7:79:45:e8:98:9f:b5:49:
58:cd:f9:62:61:0a:4a:53:3b:4a:4a:72:00:84:ef:
8c:7c:13:5c:2c:82:49:e2:d7:d4:57:79:44:21:f8:
02:47:21:f3:ac:96:cc:b7:e5:05:4f:7e:38:fd:71:
e9:76:e6:40:34:78:a6:38:8d:3b:c8:5f:fc:e2:5e:
ad:3b:a6:ad:a0:95:c5:33:c5:f5:7b:d4:7b:4b:47:
e9:0a:82:ae:87:9a:1b:67:23:c0:aa:5b:53:40:97:
37:16:80:17:a3:25:d8:d4:83:74:9d:6d:61:f0:36:
e6:6a:9f:db:30:b6:c9:f7:68:48:2d:01:42:5e:10:
e6:c7:c5:aa:81:ea:04:ad:02:1a:c1:84:f5:c1:4e:
8d:cc:27:d7:85:03:fe:3c:cf:5f:29:c7:52:60:15:
00:91:99:c8:15:9a:b8:5f:10:aa:f0:ea:69:58:8b:
54:27:23:1c:8f:73:b0:a8:e3:f9:98:25:a5:86:43:
c3:05:a7:a9:32:32:5b:5b:c0:16:72:39:29:9b:94:
71:4f:6b:3c:7a:87:60:7a:6a:b1:2c:55:90:5f:7a:
3b:8c:57:c6:58:fb:d9:b6:3f:d1:3a:bd:c3:09:75:
4e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:5B:0F:E5:16:5C:CC:F7:C5:5E:2A:A4:EB:27:25:F5:AA:AA:26:24
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143109.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a1cb::/32
Signature Algorithm: sha256WithRSAEncryption
ab:3a:3f:1b:db:d6:d5:53:12:5f:14:6c:4d:9b:2f:31:d0:d2:
f5:63:8b:5d:45:b4:3a:98:88:78:95:1f:d4:07:14:ab:ba:32:
0c:d7:37:e3:00:25:26:56:7e:26:3c:56:6d:58:c1:de:09:ec:
99:46:a7:40:66:f3:ae:6f:ac:84:de:6a:ab:71:09:5f:62:2e:
a0:f3:a6:5b:8f:04:b9:5f:ad:b8:96:37:e7:6e:d6:1b:7d:a4:
e3:04:a2:63:e1:c9:5d:fc:df:da:da:62:a4:b2:a4:3c:ed:a1:
d9:e7:21:eb:e5:1b:44:0f:a7:77:ee:7b:79:2f:ec:03:91:7d:
57:c0:49:1a:71:91:68:27:60:57:9d:3a:6c:7c:32:b7:f4:1c:
48:fb:9f:30:4b:21:e4:05:57:00:d1:49:a3:65:5a:34:93:dd:
03:b5:8a:a9:2b:82:f0:4d:f9:4a:48:34:b5:f4:45:05:53:c8:
46:10:95:dd:24:f7:aa:47:26:ef:61:e2:14:93:1c:4a:1e:48:
45:6a:76:e4:02:80:0c:a9:9c:0b:67:f9:50:45:46:d0:75:e7:
ae:17:ea:0c:bb:49:dd:23:13:03:fe:19:d2:74:d6:a1:d0:ab:
4d:e8:57:fc:9c:a0:0e:f1:73:16:04:84:e3:fb:19:e4:1e:a0:
94:74:e6:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:17 2026 by rpki-client