Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143259.roa
File: AS143259.roa (raw, json)
Hash identifier: MUlFyYeWx346PscpTStayrXAGpUmebqB3BsgGCmUoG4=
Subject key identifier: FF:35:9C:39:33:47:87:7A:EF:BF:26:3D:66:F7:1D:B9:F1:B2:D7:84
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4F3DAE44CBA21DB093EC29ACDEE680B068FE40E7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143259.roa
Signing time: Mon 25 May 2026 02:22:17 +0000
ROA not before: Mon 25 May 2026 02:17:17 +0000
ROA not after: Mon 24 May 2027 02:22:17 +0000
asID: 143259
IP address blocks: 240a:a261::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:3d:ae:44:cb:a2:1d:b0:93:ec:29:ac:de:e6:80:b0:68:fe:40:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:17 2026 GMT
Not After : May 24 02:22:17 2027 GMT
Subject: CN=FF359C393347877AEFBF263D66F71DB9F1B2D784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3a:93:cb:f2:2b:6f:3a:35:a7:26:11:04:83:
5f:6b:15:fc:0a:de:84:6c:bd:52:dc:ca:cb:4e:20:
0e:1e:43:4b:61:86:35:5d:31:8f:19:24:45:27:6d:
9f:b5:9b:3c:05:6d:0d:d0:67:e7:27:91:ae:35:90:
74:51:66:15:93:15:a0:3f:e9:10:18:c6:c0:65:31:
0e:94:ac:93:ef:c0:8b:d8:ce:7a:9b:22:c6:7d:db:
2c:6c:15:66:98:2b:7d:dd:04:7d:29:3f:bf:8f:af:
93:4a:cd:98:0b:d2:da:18:3e:e2:6c:a7:7a:d5:9d:
ea:4d:a5:1e:9f:dc:ff:5c:b4:2f:90:e7:a8:81:e5:
50:e8:02:fc:78:e4:a0:1a:78:96:d1:86:60:37:a9:
9a:e1:ed:d6:51:3e:78:83:c6:2b:46:05:4e:14:c0:
32:8d:db:43:36:66:a5:26:1a:80:1a:eb:c5:83:98:
0e:cb:36:5e:f8:6a:98:24:61:c9:19:96:6f:de:bd:
df:1a:38:8c:36:0a:9e:4e:b7:77:30:e6:b0:ca:43:
f4:d9:9e:98:77:41:a0:64:71:49:a0:2a:6b:99:13:
c9:3a:0a:82:12:af:79:40:65:0c:1a:9e:50:3c:de:
d1:c9:66:cb:61:2d:a8:ee:8b:96:6c:a8:6d:be:95:
c5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:35:9C:39:33:47:87:7A:EF:BF:26:3D:66:F7:1D:B9:F1:B2:D7:84
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143259.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a261::/32
Signature Algorithm: sha256WithRSAEncryption
8c:5c:91:7c:5e:39:fb:e9:4f:35:3f:c9:05:f2:ba:41:63:ff:
e3:3d:06:da:3d:92:78:b8:fa:77:bc:2e:01:d0:e1:37:56:41:
80:48:1b:49:da:35:cb:4c:2d:55:bf:3c:3a:11:9e:9e:9d:ce:
94:ed:5a:8f:45:21:25:b9:0b:64:06:b5:3b:0d:51:4b:34:c5:
1c:b8:b1:ff:b7:6b:45:b1:45:77:f6:c4:70:e5:43:5a:20:69:
e1:72:16:cd:de:f4:f5:29:03:10:2e:5d:3e:88:cf:15:15:f3:
42:5e:b1:9c:2d:b9:26:ff:17:20:db:61:97:f3:c7:28:80:41:
ed:cc:6c:e1:b0:a3:63:a7:27:67:ce:01:2b:f9:4a:3d:09:e4:
48:4f:39:c8:96:1a:60:9a:a4:c5:4e:78:b6:59:09:c2:03:f4:
1e:e0:d2:04:b4:06:b1:e2:6b:63:65:d9:a2:68:5d:eb:86:5e:
e2:cb:41:58:36:bb:19:7a:28:df:46:49:ac:ac:02:6a:28:7e:
7c:fb:1e:c6:4d:38:f5:a5:9f:1a:a6:53:8e:34:6e:45:78:af:
31:ad:5d:b9:14:a3:ef:bd:45:e5:4d:9d:d3:0c:dc:70:02:96:
d1:f1:a9:fb:99:8b:9c:ba:bb:e6:2c:58:ca:06:01:05:69:3e:
73:b7:31:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:59 2026 by rpki-client