Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143319.roa
File: AS143319.roa (raw, json)
Hash identifier: KxKq/7uliFEiB+Lrrg5iUWC8fSYgC8Wc5bxI0KW2BBQ=
Subject key identifier: 75:03:D3:E0:8F:7D:0B:8F:01:9B:D2:B1:2F:9C:97:AC:63:27:B8:74
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7B27D9783D65247D487D5835F5FDC02C2A832DDE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143319.roa
Signing time: Fri 22 May 2026 04:08:01 +0000
ROA not before: Fri 22 May 2026 04:03:01 +0000
ROA not after: Fri 21 May 2027 04:08:01 +0000
asID: 143319
IP address blocks: 240a:a29d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:27:d9:78:3d:65:24:7d:48:7d:58:35:f5:fd:c0:2c:2a:83:2d:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:01 2026 GMT
Not After : May 21 04:08:01 2027 GMT
Subject: CN=7503D3E08F7D0B8F019BD2B12F9C97AC6327B874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:40:b4:ff:74:4a:14:70:46:50:f6:c8:92:5c:
f5:a8:0a:1f:cd:92:17:e3:53:32:95:fb:8e:d8:5c:
58:75:7c:72:79:95:99:e4:af:02:fc:4c:41:16:64:
a8:04:16:65:2b:24:16:2d:82:c1:b3:96:d4:46:ea:
fc:91:d6:a3:3f:11:62:6e:1b:c3:e7:1b:0f:92:94:
20:7c:95:a7:79:a8:ad:fa:9b:52:a7:01:1f:5f:f1:
76:83:e0:3f:e0:25:41:21:81:61:f2:b3:c4:d3:18:
0e:d2:41:87:24:61:d8:84:41:0b:f8:3c:9b:c6:23:
8d:58:48:42:31:2b:4f:57:ab:27:c2:a5:2f:dc:60:
e6:cc:06:5a:f4:e6:f9:e7:3f:1d:f3:f4:e7:78:00:
3c:e5:78:41:8f:96:d8:f0:1b:48:df:6c:5b:90:fc:
5f:2d:67:98:b9:73:97:c9:48:6a:4e:14:17:e5:bb:
cb:d9:1a:cf:66:bf:3c:e8:78:2b:70:58:90:00:f9:
12:27:55:a4:9d:76:67:16:db:87:73:2d:bd:28:fa:
ae:6e:b1:76:3e:29:8a:8e:88:83:ee:fb:aa:a8:38:
6c:17:b1:a9:79:27:20:22:a6:b8:fd:f2:92:3b:2a:
5c:af:c3:e5:a5:a5:94:f2:88:db:63:43:e5:cd:07:
36:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:03:D3:E0:8F:7D:0B:8F:01:9B:D2:B1:2F:9C:97:AC:63:27:B8:74
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143319.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a29d::/32
Signature Algorithm: sha256WithRSAEncryption
3e:2e:eb:57:2d:d0:5c:3f:8c:93:8a:2b:a4:e0:e4:9f:e7:dc:
73:72:7e:a1:e7:b7:1e:9e:65:43:08:42:e5:e1:f4:42:2e:16:
95:78:24:48:f8:38:40:de:94:91:57:9e:a0:f3:a9:95:5d:9e:
4b:20:ec:25:af:5c:dd:22:b0:2e:36:08:bc:22:a1:b3:72:c9:
e8:01:2a:4a:2a:25:2e:14:66:43:7b:7e:51:e0:27:1a:fe:65:
5f:c4:22:95:8c:d5:05:c2:45:60:d4:8b:84:35:3f:62:e4:c3:
fd:a6:70:f0:51:44:b9:bf:2b:27:f7:f2:cf:00:1d:c6:83:02:
cc:e0:b0:0f:55:b8:bc:52:36:86:7d:c7:a7:92:08:49:42:ac:
dc:36:c5:07:19:47:a4:37:d9:e0:47:20:8f:60:fb:f4:a6:e1:
a7:ed:4f:e0:bf:14:5a:1b:94:1f:97:a0:6b:67:3a:56:74:a7:
c5:2e:52:52:eb:80:6e:93:f8:52:5a:db:8e:5d:ae:6e:fb:68:
d4:41:ff:a2:26:1d:a6:bb:77:14:39:66:03:1e:99:bc:86:9c:
a8:57:31:e0:8e:5d:f5:4f:b4:5f:e0:cb:eb:44:2c:0f:10:d1:
ec:67:b9:e2:80:f3:f2:81:e9:ad:64:52:63:b1:1d:9c:48:bc:
7f:ed:ae:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:07 2026 by rpki-client