Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143599.roa
File: AS143599.roa (raw, json)
Hash identifier: 4O+kJcenMNxXJc772ksnro86XIJw46O0bg8ND/1/Kvw=
Subject key identifier: C3:E6:FB:B3:54:D7:77:09:FE:EA:5B:C6:79:47:9C:D0:43:67:41:E2
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 22B7A7B6033595376909306869C5EC9049F871E7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143599.roa
Signing time: Fri 22 May 2026 06:05:22 +0000
ROA not before: Fri 22 May 2026 06:00:22 +0000
ROA not after: Fri 21 May 2027 06:05:22 +0000
asID: 143599
IP address blocks: 240a:a3b5::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:b7:a7:b6:03:35:95:37:69:09:30:68:69:c5:ec:90:49:f8:71:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:22 2026 GMT
Not After : May 21 06:05:22 2027 GMT
Subject: CN=C3E6FBB354D77709FEEA5BC679479CD0436741E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d2:cc:3b:58:60:d8:c9:79:97:d0:44:81:a0:
d2:d9:53:0b:66:dc:78:ea:20:a9:7b:ec:10:03:e7:
b7:d0:65:97:20:a1:09:71:d1:b7:16:1a:6f:bf:76:
9d:1f:c6:3b:93:1e:ba:d0:f2:e5:96:a5:41:10:ad:
6c:08:d8:29:26:eb:93:9a:ed:96:4d:bd:e1:22:22:
f0:2a:5c:c6:fa:5a:04:21:b4:20:9c:18:fa:c0:16:
96:bd:15:38:f9:42:ce:b5:e7:66:78:af:c1:01:61:
be:86:dc:a2:0e:66:58:01:e6:c3:50:cb:ac:02:6e:
df:40:40:bf:aa:5e:3c:35:87:7a:a2:5a:e0:9f:44:
ee:b1:e0:0b:fa:a3:b8:30:bf:bf:c1:f8:1d:26:e9:
4a:c3:a6:c1:10:2d:5b:3d:0a:ae:dd:ba:10:0e:f5:
eb:a5:d1:f4:64:90:5c:94:78:fb:6e:bb:e0:94:ce:
f1:1a:28:f8:46:47:d3:7e:25:c6:30:86:67:ae:50:
43:4d:fb:7a:31:87:77:1e:24:67:6e:9f:a8:94:85:
ba:9b:32:df:c7:73:25:d8:4f:22:b7:59:49:8c:52:
a0:e0:c5:7b:4f:60:7c:94:7e:32:99:95:30:18:89:
a4:0b:94:e6:35:b2:a3:42:4c:bb:e5:64:6d:65:69:
f1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E6:FB:B3:54:D7:77:09:FE:EA:5B:C6:79:47:9C:D0:43:67:41:E2
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143599.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3b5::/32
Signature Algorithm: sha256WithRSAEncryption
ba:24:99:37:0c:70:fd:da:bc:ab:1b:dd:28:47:6e:84:e3:c0:
32:43:b1:4b:6c:61:65:14:a5:25:45:a5:d8:d4:b3:10:6b:dd:
46:b5:08:4e:55:2d:ac:b9:0b:a4:59:a2:fb:5e:17:ca:97:06:
b9:2f:5b:56:3a:b7:70:61:9b:dc:7b:19:ed:31:04:84:ea:cc:
f3:fc:fb:2f:d6:9d:e8:cd:77:08:b8:96:f1:73:5d:e9:10:0e:
32:18:a4:9d:a0:97:ba:eb:28:4f:ad:eb:d6:e7:76:e9:8f:6b:
49:8d:cf:8e:43:b7:15:4d:68:b3:e5:6b:63:67:b4:89:98:93:
75:16:60:57:04:ec:70:e1:db:7d:14:d1:d2:03:0c:11:1c:d2:
e3:61:33:20:6b:4b:c2:2f:7e:7f:7c:44:34:94:1b:aa:0e:d5:
3e:a6:2d:52:76:69:62:f7:94:e1:4e:68:ab:23:b0:e0:dc:9b:
af:65:8a:0f:73:08:a8:91:de:b7:6f:d0:fb:9d:79:0e:61:e5:
d0:a6:9d:5f:10:13:cc:77:b0:74:0d:82:d7:a2:be:17:6a:5d:
1a:27:e3:d0:26:c4:62:e6:07:55:62:b2:f1:0b:19:fc:40:0e:
0b:50:8b:49:9a:6a:34:56:5f:76:1b:39:8b:41:b7:8d:19:b0:
7c:05:0c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:51 2026 by rpki-client