Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143140.roa
File: AS143140.roa (raw, json)
Hash identifier: SBEnO2XSSth/1LBIsw2xEJ2HL/0OQ/QXEAogllDx8qo=
Subject key identifier: 80:A8:09:19:B5:5A:B5:AA:F6:06:0D:E4:67:06:29:95:FA:4B:9C:F2
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 497AED70518C8477090E90D53092ABECF61317DF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143140.roa
Signing time: Tue 26 May 2026 06:12:46 +0000
ROA not before: Tue 26 May 2026 06:07:46 +0000
ROA not after: Tue 25 May 2027 06:12:46 +0000
asID: 143140
IP address blocks: 240a:a1ea::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:7a:ed:70:51:8c:84:77:09:0e:90:d5:30:92:ab:ec:f6:13:17:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:07:46 2026 GMT
Not After : May 25 06:12:46 2027 GMT
Subject: CN=80A80919B55AB5AAF6060DE467062995FA4B9CF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:97:b5:ae:4b:5b:b4:98:da:b1:5c:8a:b5:83:
26:ca:0b:67:8d:f1:b0:1d:ca:3a:9f:2e:92:23:47:
4b:38:d9:14:e3:e9:0d:41:44:16:ac:dd:b2:6b:7a:
db:bd:6d:88:cf:c9:e1:da:90:79:6c:08:b2:da:e5:
4d:b2:2d:1f:20:49:d4:73:f1:c0:1d:36:5a:96:39:
a0:3e:43:28:f3:3d:55:78:82:b4:fb:3c:d3:96:89:
22:12:d9:1c:00:27:f2:97:25:9a:73:d3:6f:30:24:
fa:6a:5d:11:6b:f8:fd:23:8a:dc:00:e1:dd:50:3e:
09:52:2b:e8:27:ac:db:d2:08:68:90:2f:88:b8:67:
0b:6c:df:89:a1:14:e9:66:ac:c6:0d:26:c2:e2:95:
79:8f:19:08:fc:93:23:04:28:ff:b0:61:62:4e:1e:
56:96:a2:b5:c4:7d:f2:be:22:24:57:72:18:ad:6c:
63:e4:bc:97:2a:52:0d:f7:f1:76:c7:fc:e3:97:8b:
64:e5:48:be:3e:88:2e:e9:8b:b1:f9:c1:46:4b:82:
57:09:f7:48:e6:e5:45:a2:b6:cd:dd:82:ea:23:c2:
8d:da:51:37:89:da:2b:3e:d7:73:9a:a4:4e:b8:1e:
1d:21:6f:3c:34:f7:de:6f:cb:7f:05:05:5a:e6:6c:
94:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A8:09:19:B5:5A:B5:AA:F6:06:0D:E4:67:06:29:95:FA:4B:9C:F2
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143140.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a1ea::/32
Signature Algorithm: sha256WithRSAEncryption
bb:31:92:fc:fa:70:51:cb:4d:51:22:ed:47:61:95:9a:32:3f:
80:5f:0b:1d:16:dd:86:8a:a5:70:2d:40:a2:21:16:25:f7:db:
b2:f5:01:4b:50:42:79:46:bd:77:d5:91:50:83:a2:04:ee:d3:
0d:80:a6:20:dd:13:95:94:ee:d5:a1:e1:e4:bc:16:8b:ba:43:
42:59:10:14:56:42:95:c6:3c:8e:8e:da:d9:06:d9:2d:37:23:
96:85:2f:62:98:e1:41:18:3e:6b:4e:5c:d9:23:02:21:f9:ad:
dc:94:93:79:19:7f:5d:c4:77:d3:51:09:84:d2:10:72:c5:20:
bc:0d:3c:4f:1d:00:a5:be:c8:21:64:ea:67:cb:d3:0c:b4:d8:
80:44:19:41:6a:3b:59:99:e0:7b:b3:2b:d4:3a:0e:5e:a7:35:
9f:6f:a3:b9:fd:1b:53:5f:34:5a:5c:e6:42:d9:7d:36:ec:0c:
85:54:b7:ec:40:bf:03:11:d1:50:3e:9b:7c:7b:fe:5c:1a:54:
56:09:d2:6b:67:f7:64:8c:37:3f:22:d9:a3:c0:96:3f:00:49:
1c:df:9a:db:ee:b8:44:e3:30:43:ef:80:94:d7:f9:fa:b5:f8:
79:07:c7:10:a8:74:6c:f5:5b:90:c2:22:39:93:8b:25:c6:dc:
a5:0e:93:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:09 2026 by rpki-client