Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143379.roa
File: AS143379.roa (raw, json)
Hash identifier: OlppwUTCRSg5i6B1OmfpzFIgsu/vPi2l8uVN6zhMJTY=
Subject key identifier: 1A:C7:39:C0:E0:97:EF:15:75:49:62:73:2E:7E:D1:56:75:31:DA:2E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 52A2F7E61F30ED67A4C84E29575667CAF5DD7646
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143379.roa
Signing time: Mon 25 May 2026 03:19:49 +0000
ROA not before: Mon 25 May 2026 03:14:49 +0000
ROA not after: Mon 24 May 2027 03:19:49 +0000
asID: 143379
IP address blocks: 240a:a2d9::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:a2:f7:e6:1f:30:ed:67:a4:c8:4e:29:57:56:67:ca:f5:dd:76:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:49 2026 GMT
Not After : May 24 03:19:49 2027 GMT
Subject: CN=1AC739C0E097EF15754962732E7ED1567531DA2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:bc:fc:7c:25:92:ed:b1:27:96:95:87:14:79:
c9:18:81:ca:45:5e:37:50:11:35:14:05:36:12:43:
e4:d6:6d:38:0a:cf:8b:c2:eb:0d:f2:a6:b3:63:dd:
76:99:83:cc:d0:27:40:71:34:ba:ec:0a:e0:80:5d:
49:0e:d8:ca:86:fe:ea:f0:a8:02:72:70:ea:d5:3b:
f7:d2:a4:d8:8e:d1:8b:5b:1a:fc:a0:d9:fb:42:62:
ca:fd:c6:a4:4b:30:6b:52:fe:ef:2e:33:9f:d6:f3:
d6:b8:d9:cd:a5:bf:b5:35:5f:47:38:c0:3c:c1:f5:
2c:d2:07:60:1f:b0:24:31:b8:6c:cc:a6:80:25:6b:
80:89:31:df:b7:e0:d4:54:f4:9e:4d:d7:a8:c0:e0:
ff:4a:fc:26:07:80:4f:2f:d6:86:6b:90:8e:d1:33:
26:80:88:cf:0b:6e:e4:4b:67:16:1c:4f:7e:29:6e:
2e:86:07:7f:d7:dd:ba:c8:55:a2:9c:f6:6b:2a:02:
8d:69:86:0f:3b:ef:b4:79:27:0e:e4:04:41:a8:d2:
87:e4:58:d3:19:58:3f:d5:a3:2c:f5:88:b5:4a:9f:
bb:a1:e1:82:4d:70:16:74:b4:ec:c0:00:be:8f:86:
c7:a6:fb:61:4e:f6:ad:e9:5c:ab:27:ff:45:f1:cf:
8a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C7:39:C0:E0:97:EF:15:75:49:62:73:2E:7E:D1:56:75:31:DA:2E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143379.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a2d9::/32
Signature Algorithm: sha256WithRSAEncryption
a6:6f:3e:ae:78:2a:b6:d8:6d:d6:b1:67:06:0d:21:09:b7:42:
58:df:6e:d3:01:bc:af:bd:94:51:54:63:a7:56:9e:7d:b5:0d:
e4:bf:a7:41:35:a8:34:dd:45:f4:1c:57:2a:ca:a9:6f:ea:43:
cf:0e:ae:cf:d0:8a:f0:44:b0:db:d3:d4:f5:a4:c2:72:cc:e4:
d9:61:54:07:ad:74:e4:e3:2b:6a:2c:ec:e9:5c:94:ed:3d:e6:
8f:65:2f:06:01:7b:47:84:e3:4a:4d:0d:65:ad:eb:a4:33:38:
cc:c0:a4:f1:8f:af:85:cb:d8:0c:23:bf:d8:58:d6:cb:47:ee:
eb:ec:48:5c:77:a2:d6:a0:31:80:c0:c8:ef:41:59:14:64:4b:
96:c1:94:cd:59:11:57:7b:39:1b:6c:3f:4b:ba:ff:0e:87:4a:
73:5f:89:27:a4:c8:43:da:4e:01:c4:df:b8:6d:f4:af:99:e4:
a1:22:8c:1c:7b:28:fd:8e:4f:bf:72:68:4d:70:47:7f:1f:2a:
4b:a9:f7:18:f3:86:ab:c3:a2:f3:ff:88:fd:0c:2a:59:dd:64:
e8:4f:24:43:81:c5:22:7c:08:72:94:b8:d9:58:c1:22:54:b8:
04:18:c2:25:7d:cc:71:00:8f:13:f7:d2:27:6b:0e:ef:49:e2:
b1:20:5e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:34 2026 by rpki-client