Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143149.roa
File: AS143149.roa (raw, json)
Hash identifier: GIs/JyKeRQlXyOBRrvr8x5iORzFxmovXUfxUUU7j07k=
Subject key identifier: 94:3F:60:0B:6D:70:6C:9C:6E:68:BC:1D:48:6A:91:DB:17:72:9A:C3
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 06E29AE7CDE74628B1687AC1C65D5C1E62981E83
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143149.roa
Signing time: Mon 25 May 2026 01:19:56 +0000
ROA not before: Mon 25 May 2026 01:14:56 +0000
ROA not after: Mon 24 May 2027 01:19:56 +0000
asID: 143149
IP address blocks: 240a:a1f3::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:e2:9a:e7:cd:e7:46:28:b1:68:7a:c1:c6:5d:5c:1e:62:98:1e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:14:56 2026 GMT
Not After : May 24 01:19:56 2027 GMT
Subject: CN=943F600B6D706C9C6E68BC1D486A91DB17729AC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2b:a6:86:58:e5:39:61:49:d3:d2:00:8e:9f:
6a:37:92:27:b6:2c:86:5f:3a:e3:96:20:0a:cd:70:
59:7f:eb:1f:78:b6:9b:ba:7a:37:00:a6:f6:d5:75:
74:9a:b6:45:5a:3c:56:6f:08:d7:a8:a2:9d:d5:59:
af:e4:ba:6a:38:4b:4e:5f:f5:f8:d7:73:a2:02:ee:
ec:e6:5a:26:62:ff:e4:09:79:fd:1e:6d:1a:10:d4:
22:fd:ac:c2:f4:27:ce:95:c2:28:97:6f:af:45:e6:
51:87:bb:d6:b3:bf:07:5d:45:d3:a0:4a:5a:cd:60:
9f:d6:be:f8:d8:35:36:68:01:46:8d:9e:1b:e0:c9:
59:28:54:a8:65:78:fc:a9:a7:10:90:e2:83:92:33:
c5:fa:56:57:c2:a4:cc:15:ec:8a:05:97:c5:b5:01:
1e:86:6a:c0:ab:5d:cc:8e:00:a9:5e:55:d5:b7:ea:
f9:06:82:e8:fd:d0:af:25:3b:5b:c6:9f:5b:b3:7d:
a3:9d:a1:a9:f2:57:24:87:d4:b9:09:1d:be:77:26:
e1:19:f2:c6:9b:d5:d5:26:14:35:91:81:f0:18:1a:
b7:1c:39:b9:e6:3e:b1:9a:87:4d:f3:a4:d2:8b:62:
cb:19:4d:b9:18:85:9b:2b:bb:03:e0:05:17:ad:7c:
f9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:3F:60:0B:6D:70:6C:9C:6E:68:BC:1D:48:6A:91:DB:17:72:9A:C3
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143149.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a1f3::/32
Signature Algorithm: sha256WithRSAEncryption
54:7c:52:66:f0:21:01:d2:2f:93:be:d3:a0:ec:41:c6:87:45:
3d:19:00:20:4a:56:e7:6e:5e:25:10:de:2e:30:75:7a:58:87:
45:b6:ab:07:c1:a1:23:21:8d:b0:31:86:a3:d4:6d:2a:46:94:
02:0f:54:a5:6e:35:fb:2a:be:a8:f1:97:ad:a7:94:da:a8:2d:
14:86:95:aa:39:79:7d:da:f3:d3:f6:a8:f5:eb:5c:4c:10:44:
f0:60:5b:93:20:eb:90:dc:d9:5a:00:b3:26:eb:1f:73:2d:1f:
58:d9:7c:16:56:08:cf:1c:b6:b1:4d:29:91:75:47:53:89:56:
67:4f:b1:38:d2:9d:06:0f:1e:9c:28:2b:4c:df:51:40:0f:b3:
74:c0:0b:70:f0:71:0f:3d:3b:63:c9:6a:3b:ab:aa:8d:e0:0b:
d1:1a:02:c9:55:98:f3:f0:7d:78:5a:b5:5a:be:80:70:fa:27:
5c:df:3e:36:aa:55:ee:69:58:72:b2:da:bb:34:c0:94:18:44:
0a:ec:56:b7:84:04:3d:ef:16:68:ce:a5:1d:4d:da:9d:db:68:
11:02:33:b3:0b:b1:ff:ed:4c:25:89:45:29:b6:8a:3e:ef:65:
1b:44:a0:3a:a2:cb:b2:09:f0:6c:94:8c:17:23:d3:e9:fe:4f:
9d:42:a9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:17 2026 by rpki-client