Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143030.roa
File: AS143030.roa (raw, json)
Hash identifier: BJj+0swOLDc4sGycNvMWGGIQJOBtYW7IUtNkmzVytPc=
Subject key identifier: E5:F4:D6:B1:9C:2E:95:4B:5D:F6:50:CB:4C:E0:E8:68:0C:E6:64:94
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6EC826A03557B866445BF298E9512DB5B4A8DF7D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143030.roa
Signing time: Mon 25 May 2026 01:51:20 +0000
ROA not before: Mon 25 May 2026 01:46:20 +0000
ROA not after: Mon 24 May 2027 01:51:20 +0000
asID: 143030
IP address blocks: 240a:a17c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:c8:26:a0:35:57:b8:66:44:5b:f2:98:e9:51:2d:b5:b4:a8:df:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:20 2026 GMT
Not After : May 24 01:51:20 2027 GMT
Subject: CN=E5F4D6B19C2E954B5DF650CB4CE0E8680CE66494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:37:f4:1e:42:de:62:b0:4f:5a:b7:d5:01:98:
4f:1f:31:e7:a1:ac:e5:6d:fc:2b:ad:dc:a3:af:05:
f3:a0:b5:cf:6d:db:cd:fd:eb:c9:83:df:e3:3e:63:
c2:06:59:fa:10:fa:ae:a7:e1:6a:a1:67:53:5b:d4:
eb:a5:51:de:59:24:80:86:f8:4b:91:b8:e1:20:20:
6a:a6:f5:b3:bb:c5:0d:9e:2e:8b:d7:3e:3f:fd:2b:
6a:b3:30:54:af:63:ec:73:ba:43:ac:cf:83:c4:9b:
8e:5a:ad:5a:e6:e9:4e:42:f8:3a:cd:ca:52:77:20:
e4:e0:6e:5b:e4:22:90:0d:76:48:8d:aa:d0:fd:2b:
a9:3f:6b:f2:18:4c:1a:c5:1b:a8:4e:eb:bd:58:49:
49:34:93:0a:d2:a2:ae:c7:86:ca:3a:f5:4a:10:ca:
6a:3a:41:82:bf:27:b4:c1:0a:54:4d:80:70:32:cb:
5a:2f:53:aa:ae:9a:9c:9f:11:cf:89:8f:2f:f9:a0:
9d:15:94:70:01:fc:8e:95:ba:d6:27:80:70:b7:7c:
6a:69:ec:4f:3e:c5:4d:94:ba:15:14:c7:ea:30:72:
05:aa:cd:9e:d7:5c:c7:bb:e0:d1:5b:b7:14:0e:6a:
91:75:ee:0a:6b:ca:cd:0b:1c:00:91:3d:d2:98:5e:
0d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:F4:D6:B1:9C:2E:95:4B:5D:F6:50:CB:4C:E0:E8:68:0C:E6:64:94
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a17c::/32
Signature Algorithm: sha256WithRSAEncryption
8d:38:dc:24:bf:b8:65:f8:df:d5:a9:04:89:5f:f8:69:a2:05:
ae:6c:04:a6:cc:9c:4f:d8:9d:22:8e:c9:05:d1:b9:8f:61:0c:
bb:55:e0:c0:90:3b:82:a8:72:24:b1:30:22:5c:41:be:72:f7:
8b:97:da:07:53:67:64:28:04:6a:3f:e1:be:16:a1:79:fa:c2:
95:f0:ea:40:b3:46:d9:d5:20:17:96:d4:62:b9:94:a8:cd:3a:
1d:6f:81:13:d0:c9:cd:47:6b:eb:73:96:3e:fd:2d:e1:ea:6b:
3d:53:7f:47:b7:e1:0f:20:73:1a:3b:20:cb:0b:55:d8:02:b3:
b6:b2:6e:ce:61:71:5f:2c:4e:78:33:2b:f9:1f:4b:b5:51:e0:
4e:38:40:f8:8e:12:02:34:8b:2c:5c:c3:64:11:8a:7c:58:7e:
fc:4b:49:f5:ed:31:11:41:3e:ae:d5:60:12:68:ad:fa:f1:20:
62:3a:7c:86:8f:6b:53:4a:9f:20:9a:3f:60:e6:c9:dc:c6:2c:
9c:8e:a0:1e:d4:ee:2d:2b:4b:93:96:d1:ea:f3:56:72:2e:50:
e1:0a:71:cd:45:bc:a2:33:1b:67:d8:a1:9d:e3:d9:28:30:4e:
77:51:b4:7e:8d:9b:f1:e0:33:cc:ab:63:ad:48:49:a1:72:29:
f4:c3:cf:8c
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUbsgmoDVXuGZEW/KY6VEttbSo330wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTQ2MjBaFw0yNzA1MjQwMTUxMjBaMDMxMTAvBgNV
BAMTKEU1RjRENkIxOUMyRTk1NEI1REY2NTBDQjRDRTBFODY4MENFNjY0OTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZN/QeQt5isE9at9UBmE8fMeeh
rOVt/Cut3KOvBfOgtc9t283968mD3+M+Y8IGWfoQ+q6n4WqhZ1Nb1OulUd5ZJICG
+EuRuOEgIGqm9bO7xQ2eLovXPj/9K2qzMFSvY+xzukOsz4PEm45arVrm6U5C+DrN
ylJ3IOTgblvkIpANdkiNqtD9K6k/a/IYTBrFG6hO671YSUk0kwrSoq7Hhso69UoQ
ymo6QYK/J7TBClRNgHAyy1ovU6qumpyfEc+Jjy/5oJ0VlHAB/I6VutYngHC3fGpp
7E8+xU2UuhUUx+owcgWqzZ7XXMe74NFbtxQOapF17gprys0LHACRPdKYXg2xAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU5fTWsZwulUtd9lDLTODoaAzmZJQwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqhfDANBgkqhkiG9w0BAQsFAAOCAQEAjTjc
JL+4Zfjf1akEiV/4aaIFrmwEpsycT9idIo7JBdG5j2EMu1XgwJA7gqhyJLEwIlxB
vnL3i5faB1NnZCgEaj/hvhahefrClfDqQLNG2dUgF5bUYrmUqM06HW+BE9DJzUdr
63OWPv0t4eprPVN/R7fhDyBzGjsgywtV2AKztrJuzmFxXyxOeDMr+R9LtVHgTjhA
+I4SAjSLLFzDZBGKfFh+/EtJ9e0xEUE+rtVgEmit+vEgYjp8ho9rU0qfIJo/YObJ
3MYsnI6gHtTuLStLk5bR6vNWci5Q4QpxzUW8ojMbZ9ihnePZKDBOd1G0fo2b8eAz
zKtjrUhJoXIp9MPPjA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:20 2026 by rpki-client