Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143055.roa
File: AS143055.roa (raw, json)
Hash identifier: Zf8L+CnO0HZbsJjR0YdPohMAZhFCunD1XhvUhorolxA=
Subject key identifier: 35:15:0F:31:41:A6:11:8E:DE:EC:AF:A8:8E:E8:ED:CE:D6:9C:D7:70
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3362CF94350A222D0FC1F0A0CDE208C6E3DB7B40
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143055.roa
Signing time: Fri 22 May 2026 06:28:01 +0000
ROA not before: Fri 22 May 2026 06:23:01 +0000
ROA not after: Fri 21 May 2027 06:28:01 +0000
asID: 143055
IP address blocks: 240a:a195::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:62:cf:94:35:0a:22:2d:0f:c1:f0:a0:cd:e2:08:c6:e3:db:7b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:23:01 2026 GMT
Not After : May 21 06:28:01 2027 GMT
Subject: CN=35150F3141A6118EDEECAFA88EE8EDCED69CD770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e2:04:e3:89:7e:1f:e4:3b:c9:57:4e:d6:90:
bd:70:ec:fa:4e:fc:96:bc:54:15:c7:a4:cb:38:95:
f2:9a:a7:48:51:9e:22:d3:fe:8a:ad:cb:d6:47:25:
c8:c0:84:32:7c:4c:2a:63:fe:e5:88:08:2c:67:ae:
a3:17:4e:00:f0:bf:0a:2d:30:22:de:96:60:7c:61:
11:4c:db:95:66:9a:66:12:bd:68:7f:7c:36:a2:0c:
78:a1:16:34:31:fb:9a:f1:63:64:19:6d:65:6a:3e:
76:ae:d2:e0:b5:eb:f3:ec:fb:17:3d:dd:e7:2f:85:
9d:0a:b1:c9:5f:21:1b:08:39:87:56:57:d1:b7:ea:
a4:ea:fa:52:b3:ab:a2:8a:4d:87:ed:31:5a:0c:4b:
8d:2a:39:14:42:7f:3d:53:d2:f7:f4:1a:a9:bf:4c:
1a:b3:2b:89:38:bc:85:b4:e1:0b:51:b6:8e:ed:17:
81:bd:d5:e5:63:a9:17:42:e4:0d:42:e1:22:84:e4:
f1:3b:df:4d:04:a8:a3:37:15:0c:42:40:4f:6c:47:
f6:ab:42:95:1a:ed:00:8d:6a:b2:23:ec:d1:c2:5a:
0e:e9:b3:e1:4c:d5:e1:88:d7:47:06:a9:96:21:56:
68:33:26:bd:2c:3f:c7:09:4f:ca:58:7b:d9:a8:4c:
a6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:15:0F:31:41:A6:11:8E:DE:EC:AF:A8:8E:E8:ED:CE:D6:9C:D7:70
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143055.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a195::/32
Signature Algorithm: sha256WithRSAEncryption
29:64:66:64:16:06:cc:a5:09:71:b3:d5:c1:86:ba:06:0a:d9:
78:49:46:41:07:3d:fc:1f:b7:40:eb:9f:b4:01:ee:13:18:01:
70:65:9a:59:36:aa:62:ae:52:ef:f6:f5:0a:95:96:83:4b:71:
0a:c7:0c:20:0a:04:81:fc:18:78:16:34:84:04:b6:7f:41:36:
a0:9e:d1:ff:a9:5d:8c:47:01:2f:ae:64:15:98:2c:40:b3:99:
7d:5a:4e:bc:36:c0:b6:18:28:b9:bb:0b:26:d2:21:a3:c3:b3:
32:ab:ad:ef:4b:97:ca:be:20:51:02:92:d2:52:d5:94:95:3c:
a1:aa:3d:16:72:8e:e0:13:84:e5:3a:04:55:50:07:16:41:ad:
a3:b5:7d:81:70:be:ce:81:90:27:76:af:f5:95:51:a0:ec:1d:
21:30:0c:d8:5e:b0:fd:c0:20:10:48:f2:d0:8c:88:97:63:eb:
e5:a6:c0:11:33:cb:84:75:52:1c:97:de:de:d1:87:4e:47:10:
42:4a:3b:30:75:dc:07:a9:a1:87:1f:3c:d7:7b:3e:c9:56:a5:
0f:67:c8:8f:c6:2b:d0:81:58:ab:e4:d5:39:c9:09:f0:c2:64:
0b:e1:7d:9d:6d:c7:26:40:91:4e:ac:3f:e8:7b:70:c8:c2:ba:
71:98:41:41
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUM2LPlDUKIi0PwfCgzeIIxuPbe0AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjIzMDFaFw0yNzA1MjEwNjI4MDFaMDMxMTAvBgNV
BAMTKDM1MTUwRjMxNDFBNjExOEVERUVDQUZBODhFRThFRENFRDY5Q0Q3NzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC34gTjiX4f5DvJV07WkL1w7PpO
/Ja8VBXHpMs4lfKap0hRniLT/oqty9ZHJcjAhDJ8TCpj/uWICCxnrqMXTgDwvwot
MCLelmB8YRFM25VmmmYSvWh/fDaiDHihFjQx+5rxY2QZbWVqPnau0uC16/Ps+xc9
3ecvhZ0KsclfIRsIOYdWV9G36qTq+lKzq6KKTYftMVoMS40qORRCfz1T0vf0Gqm/
TBqzK4k4vIW04QtRto7tF4G91eVjqRdC5A1C4SKE5PE7300EqKM3FQxCQE9sR/ar
QpUa7QCNarIj7NHCWg7ps+FM1eGI10cGqZYhVmgzJr0sP8cJT8pYe9moTKaXAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUNRUPMUGmEY7e7K+ojujtztac13AwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzMDU1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqhlTANBgkqhkiG9w0BAQsFAAOCAQEAKWRm
ZBYGzKUJcbPVwYa6BgrZeElGQQc9/B+3QOuftAHuExgBcGWaWTaqYq5S7/b1CpWW
g0txCscMIAoEgfwYeBY0hAS2f0E2oJ7R/6ldjEcBL65kFZgsQLOZfVpOvDbAthgo
ubsLJtIho8OzMqut70uXyr4gUQKS0lLVlJU8oao9FnKO4BOE5ToEVVAHFkGto7V9
gXC+zoGQJ3av9ZVRoOwdITAM2F6w/cAgEEjy0IyIl2Pr5abAETPLhHVSHJfe3tGH
TkcQQko7MHXcB6mhhx8813s+yValD2fIj8Yr0IFYq+TVOckJ8MJkC+F9nW3HJkCR
Tqw/6HtwyMK6cZhBQQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:30 2026 by rpki-client