Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143004.roa
File: AS143004.roa (raw, json)
Hash identifier: SmbDPl9a2QMvZ9u1cKj4CqDvA9N83mqHHdzxbCHrybo=
Subject key identifier: 10:81:73:F9:A1:A0:35:B1:63:10:AF:4E:15:B2:41:AD:A2:62:10:F6
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1FAF948929FC83F48D7B410978AC3FE77FE64DA8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143004.roa
Signing time: Tue 26 May 2026 03:16:47 +0000
ROA not before: Tue 26 May 2026 03:11:47 +0000
ROA not after: Tue 25 May 2027 03:16:47 +0000
asID: 143004
IP address blocks: 240a:a162::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:af:94:89:29:fc:83:f4:8d:7b:41:09:78:ac:3f:e7:7f:e6:4d:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:11:47 2026 GMT
Not After : May 25 03:16:47 2027 GMT
Subject: CN=108173F9A1A035B16310AF4E15B241ADA26210F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c4:fe:32:f8:11:b3:b5:e4:4a:a6:cc:f3:ec:
ef:c5:95:50:25:dd:52:ba:be:b4:a1:91:77:e9:8f:
56:cc:19:df:2f:b7:b7:d2:b6:d2:dc:1e:35:5f:02:
9e:02:58:61:3a:c5:6a:29:65:b4:fa:f8:bf:8b:fb:
ae:a4:98:31:12:9a:a5:68:22:72:1a:a1:51:a8:e8:
b2:ee:c2:77:1d:dd:38:80:c5:d5:bd:08:6c:f0:4f:
8d:70:fe:82:ba:53:27:91:bc:64:34:53:ff:4f:03:
a4:46:e5:91:7d:2a:12:4f:41:8d:59:0e:a6:7a:2e:
43:ba:fa:ab:83:21:ac:7e:26:37:a9:a4:76:96:cf:
e7:52:1f:28:61:e0:ad:8f:55:98:b5:00:97:55:80:
f5:98:7b:97:e6:11:11:0c:f8:c0:90:24:6a:95:d9:
d9:10:20:18:6d:78:8e:ad:81:be:68:2c:0b:f5:24:
89:66:3d:38:0d:ea:d9:2c:50:67:b1:a0:f5:79:5e:
2c:6c:85:90:b7:dd:56:d8:8d:2f:9f:86:7b:03:4c:
02:cd:70:3e:f6:45:96:0a:cc:32:f2:18:ee:07:e6:
f0:4f:c5:c0:a9:12:9d:7a:53:1f:fb:fe:e5:51:0d:
4b:d2:28:9c:28:be:72:f8:66:95:03:22:40:3e:6e:
55:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:81:73:F9:A1:A0:35:B1:63:10:AF:4E:15:B2:41:AD:A2:62:10:F6
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143004.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a162::/32
Signature Algorithm: sha256WithRSAEncryption
7b:76:37:e3:46:c9:75:e5:fa:08:8c:d6:6e:e8:80:ba:01:b7:
aa:f8:61:7a:98:9d:f8:a7:5f:87:d3:a6:15:02:51:9f:46:eb:
41:25:b5:99:c7:7c:05:6e:fe:5d:3e:22:21:00:55:5b:34:b0:
f9:74:5b:ea:f2:e6:c7:2e:51:62:b3:d2:be:04:1a:70:32:3a:
fe:ac:1d:a5:b5:2d:12:a3:ae:33:7f:f5:5c:f4:f2:9b:f4:a8:
ed:b1:72:ac:a8:53:21:a0:f3:ca:4f:89:e9:a3:71:ca:59:8f:
f8:4d:d3:77:b3:0c:c4:fc:c4:66:06:83:51:51:86:cb:0e:d9:
aa:b8:97:9b:b8:03:bf:44:16:82:51:88:3a:6c:92:f6:fe:1d:
6b:de:b4:b8:0c:cd:b1:3b:39:52:7a:5d:ae:76:60:60:cf:80:
e0:1e:69:2c:09:e6:2f:99:c6:95:fb:3b:9f:d8:91:aa:36:96:
d2:c7:51:eb:91:de:d4:6d:53:73:d9:0b:f5:9a:bd:3f:21:56:
38:30:96:e9:0e:11:da:75:52:4f:da:da:2a:e1:ce:d1:e9:4d:
55:54:68:83:b8:74:0f:44:13:65:9c:78:76:1f:2f:e8:e2:7c:
7d:6a:77:6f:18:fe:c7:fd:f1:ee:20:33:6b:e1:9e:60:0c:80:
8d:1c:a3:2c
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUH6+UiSn8g/SNe0EJeKw/53/mTagwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMzExNDdaFw0yNzA1MjUwMzE2NDdaMDMxMTAvBgNV
BAMTKDEwODE3M0Y5QTFBMDM1QjE2MzEwQUY0RTE1QjI0MUFEQTI2MjEwRjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDexP4y+BGzteRKpszz7O/FlVAl
3VK6vrShkXfpj1bMGd8vt7fSttLcHjVfAp4CWGE6xWopZbT6+L+L+66kmDESmqVo
InIaoVGo6LLuwncd3TiAxdW9CGzwT41w/oK6UyeRvGQ0U/9PA6RG5ZF9KhJPQY1Z
DqZ6LkO6+quDIax+JjeppHaWz+dSHyhh4K2PVZi1AJdVgPWYe5fmEREM+MCQJGqV
2dkQIBhteI6tgb5oLAv1JIlmPTgN6tksUGexoPV5XixshZC33VbYjS+fhnsDTALN
cD72RZYKzDLyGO4H5vBPxcCpEp16Ux/7/uVRDUvSKJwovnL4ZpUDIkA+blXBAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUEIFz+aGgNbFjEK9OFbJBraJiEPYwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzMDA0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqhYjANBgkqhkiG9w0BAQsFAAOCAQEAe3Y3
40bJdeX6CIzWbuiAugG3qvhhepid+Kdfh9OmFQJRn0brQSW1mcd8BW7+XT4iIQBV
WzSw+XRb6vLmxy5RYrPSvgQacDI6/qwdpbUtEqOuM3/1XPTym/So7bFyrKhTIaDz
yk+J6aNxylmP+E3Td7MMxPzEZgaDUVGGyw7ZqriXm7gDv0QWglGIOmyS9v4da960
uAzNsTs5UnpdrnZgYM+A4B5pLAnmL5nGlfs7n9iRqjaW0sdR65He1G1Tc9kL9Zq9
PyFWODCW6Q4R2nVST9raKuHO0elNVVRog7h0D0QTZZx4dh8v6OJ8fWp3bxj+x/3x
7iAza+GeYAyAjRyjLA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:11 2026 by rpki-client