Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143579.roa
File: AS143579.roa (raw, json)
Hash identifier: CQ2H3+dbngdM5zh8G0sw5rrGP0gmm/3ganr0O9TDhIw=
Subject key identifier: CC:C9:99:E7:02:90:3A:1C:62:16:5E:BB:ED:E5:5A:99:6D:AE:80:08
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 180283E4D0252A1A53171B659144275CADCBB310
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143579.roa
Signing time: Mon 25 May 2026 03:19:22 +0000
ROA not before: Mon 25 May 2026 03:14:22 +0000
ROA not after: Mon 24 May 2027 03:19:22 +0000
asID: 143579
IP address blocks: 240a:a3a1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:02:83:e4:d0:25:2a:1a:53:17:1b:65:91:44:27:5c:ad:cb:b3:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:22 2026 GMT
Not After : May 24 03:19:22 2027 GMT
Subject: CN=CCC999E702903A1C62165EBBEDE55A996DAE8008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f4:1e:87:90:cd:55:26:1b:39:eb:49:47:a3:
bc:43:d5:95:84:b2:ad:26:bf:69:e3:8e:b8:14:65:
5a:4d:a1:30:8a:9f:4a:40:8e:92:f8:e4:f0:c7:0f:
08:28:45:eb:81:f1:8e:bd:a7:26:69:48:41:5a:2d:
a9:0e:68:6b:3b:90:36:92:b4:16:8c:d3:a6:3c:7d:
03:3f:c1:c8:31:04:86:9e:eb:f9:40:6b:56:0f:90:
d5:7c:b5:2d:2a:5e:fb:c1:e0:86:0b:b7:29:28:0f:
25:2c:fd:1b:56:ed:67:03:2c:2e:ac:49:e7:a3:8a:
fe:78:65:93:87:73:7f:d5:82:73:b4:c6:af:bb:fd:
6e:be:8b:bf:bf:b3:9c:0e:1a:3f:84:a5:48:9a:80:
f7:dd:6b:35:09:7f:de:60:84:c9:5c:db:b2:0f:43:
85:75:7d:ba:24:75:b4:53:ff:00:17:d9:7d:f2:74:
86:21:78:09:3e:d6:1b:54:3b:97:46:65:a0:a6:3a:
8b:e4:fc:37:62:13:f1:5c:bf:b9:46:2a:f0:7c:cb:
e4:df:db:83:66:91:9a:fb:4f:89:c7:b7:40:ce:b7:
eb:78:e9:bd:42:1e:03:45:dc:25:37:8c:dd:e6:7c:
10:66:a7:bf:f1:fa:c5:f7:0b:6b:dd:a8:a8:08:a9:
23:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C9:99:E7:02:90:3A:1C:62:16:5E:BB:ED:E5:5A:99:6D:AE:80:08
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143579.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3a1::/32
Signature Algorithm: sha256WithRSAEncryption
19:8a:5d:90:52:34:78:fa:19:9a:30:dd:44:4f:a0:d9:73:27:
39:04:e8:e0:32:9c:9c:d0:99:b4:5e:2e:fe:a7:9a:6b:06:37:
ec:af:b1:4f:a0:49:fa:92:e4:60:b2:4a:bb:12:7c:9c:94:31:
71:57:5f:b4:5b:7b:49:be:eb:95:b4:b9:16:16:9c:8b:8c:9b:
5c:cf:97:2d:d9:97:df:be:42:ae:90:bf:52:b8:bf:fc:9b:b8:
e9:f1:e7:1d:14:0b:bf:27:8a:78:48:d0:ca:38:b9:41:61:9a:
51:81:c7:26:a0:3b:8d:cf:98:e7:95:b3:0a:66:8f:fb:2a:5c:
d9:23:07:75:5b:21:0b:58:f6:99:09:a8:f3:14:f8:28:71:69:
5b:3c:00:10:0d:37:22:03:d8:c6:60:4c:72:85:6f:62:09:fa:
41:62:16:17:c7:fb:4f:7a:70:1f:44:24:ca:5b:1a:99:2a:eb:
be:bd:9d:46:e2:4e:ae:54:73:37:d3:6c:73:05:0f:b6:34:6f:
37:00:33:34:8d:e8:92:45:3a:95:f0:45:00:93:c7:7e:c9:d5:
12:36:bc:cd:11:20:dd:f5:18:21:50:f0:08:21:f2:a5:da:9f:
ae:05:2a:80:2c:86:45:32:34:f0:9e:00:c8:1d:6d:36:73:35:
a0:2b:ad:93
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUGAKD5NAlKhpTFxtlkUQnXK3LsxAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMzE0MjJaFw0yNzA1MjQwMzE5MjJaMDMxMTAvBgNV
BAMTKENDQzk5OUU3MDI5MDNBMUM2MjE2NUVCQkVERTU1QTk5NkRBRTgwMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf9B6HkM1VJhs560lHo7xD1ZWE
sq0mv2njjrgUZVpNoTCKn0pAjpL45PDHDwgoReuB8Y69pyZpSEFaLakOaGs7kDaS
tBaM06Y8fQM/wcgxBIae6/lAa1YPkNV8tS0qXvvB4IYLtykoDyUs/RtW7WcDLC6s
Seejiv54ZZOHc3/VgnO0xq+7/W6+i7+/s5wOGj+EpUiagPfdazUJf95ghMlc27IP
Q4V1fbokdbRT/wAX2X3ydIYheAk+1htUO5dGZaCmOovk/DdiE/Fcv7lGKvB8y+Tf
24NmkZr7T4nHt0DOt+t46b1CHgNF3CU3jN3mfBBmp7/x+sX3C2vdqKgIqSONAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUzMmZ5wKQOhxiFl677eVamW2ugAgwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzNTc5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqjoTANBgkqhkiG9w0BAQsFAAOCAQEAGYpd
kFI0ePoZmjDdRE+g2XMnOQTo4DKcnNCZtF4u/qeaawY37K+xT6BJ+pLkYLJKuxJ8
nJQxcVdftFt7Sb7rlbS5Fhaci4ybXM+XLdmX375CrpC/Uri//Ju46fHnHRQLvyeK
eEjQyji5QWGaUYHHJqA7jc+Y55WzCmaP+ypc2SMHdVshC1j2mQmo8xT4KHFpWzwA
EA03IgPYxmBMcoVvYgn6QWIWF8f7T3pwH0QkylsamSrrvr2dRuJOrlRzN9NscwUP
tjRvNwAzNI3okkU6lfBFAJPHfsnVEja8zREg3fUYIVDwCCHypdqfrgUqgCyGRTI0
8J4AyB1tNnM1oCutkw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:36 2026 by rpki-client