Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143072.roa
File: AS143072.roa (raw, json)
Hash identifier: 0FBRPtRrOQv8h8r+btU9MjAAylr3cCmQU7OEvt8ySKA=
Subject key identifier: F4:4F:B6:FA:F8:DF:73:E6:99:F6:AF:D1:40:01:D5:E3:92:8A:B5:79
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2C3153E3B4209676D8EA261E82855237D7C3F348
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143072.roa
Signing time: Mon 25 May 2026 06:28:25 +0000
ROA not before: Mon 25 May 2026 06:23:25 +0000
ROA not after: Mon 24 May 2027 06:28:25 +0000
asID: 143072
IP address blocks: 240a:a1a6::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:31:53:e3:b4:20:96:76:d8:ea:26:1e:82:85:52:37:d7:c3:f3:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:25 2026 GMT
Not After : May 24 06:28:25 2027 GMT
Subject: CN=F44FB6FAF8DF73E699F6AFD14001D5E3928AB579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:24:2e:4c:b2:6e:b0:b4:1a:88:01:84:2c:5a:
ec:31:cd:4d:92:4d:34:0f:d8:18:87:15:7a:f7:a7:
3b:2b:44:cd:c9:c0:22:a7:21:18:af:cb:f8:09:0b:
06:d3:64:2a:aa:59:e9:63:75:3a:76:12:41:3c:eb:
ee:24:6a:2d:e1:a8:da:88:47:98:32:b3:07:a9:ca:
b2:ec:90:39:95:ab:72:63:31:2a:25:7d:8b:4b:6c:
33:e8:02:6b:a3:47:9f:73:cd:b4:c0:2b:54:55:cb:
84:fd:f8:6b:55:5b:77:9c:b2:7e:42:be:92:cc:45:
38:fa:c8:8c:3e:ef:aa:a5:fb:4d:20:db:bf:75:6e:
43:7b:60:70:d0:86:4c:d7:2d:bf:2d:03:9d:ca:26:
ac:01:5b:6a:05:19:93:1c:29:8a:ac:14:c4:1d:b4:
23:03:91:5a:9c:3c:02:3f:37:5f:c9:a8:fe:d6:1a:
3a:55:11:7b:ae:73:e1:e2:32:27:94:a0:7c:d0:d1:
b9:f9:9e:b2:95:f8:9c:d2:44:ae:f1:b8:76:6a:26:
d0:6d:3b:d9:7d:01:4f:5d:3a:7a:3d:cc:6d:a9:5b:
2b:0e:24:57:3e:01:98:46:75:fa:e2:eb:b6:a6:64:
70:60:b8:a7:ce:85:a3:c0:6d:99:87:d2:75:ae:8f:
6d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:4F:B6:FA:F8:DF:73:E6:99:F6:AF:D1:40:01:D5:E3:92:8A:B5:79
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143072.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a1a6::/32
Signature Algorithm: sha256WithRSAEncryption
3a:4a:44:d5:56:32:5d:a6:0a:bc:ca:75:1b:3c:f2:a3:f7:5d:
7f:9c:35:f0:d9:5f:a0:40:bb:e2:9a:79:70:34:be:51:16:ac:
82:0a:63:e5:e0:b5:45:f2:b3:0b:ad:8f:64:d1:00:4a:3c:11:
97:a8:22:0e:2c:ba:38:d5:40:77:4e:29:36:72:50:23:ee:db:
eb:2a:5c:49:85:37:39:83:cd:de:6f:50:27:16:5a:e2:62:cf:
cc:b5:84:63:0b:df:8a:fd:7a:d5:d0:75:de:6d:d6:84:c1:39:
30:68:ce:d0:d6:68:63:3b:dd:2e:58:eb:2e:e7:6a:f1:d6:05:
14:4e:93:f9:aa:1d:64:96:d3:78:c3:26:6b:4b:8a:eb:23:64:
81:fa:19:85:70:13:69:31:39:31:54:88:b3:29:a5:30:01:12:
fd:d0:2f:26:33:d6:78:ac:ed:b8:dd:17:48:01:44:d3:0d:f5:
71:27:87:15:8c:aa:0d:b0:1c:6a:4f:c3:d9:b9:9c:10:49:2c:
ec:5d:d3:62:ab:ee:e3:2f:76:38:0c:36:0d:15:f5:8a:dc:1a:
86:6f:2a:1d:2e:84:51:14:0f:73:b9:96:b9:71:c5:81:41:16:
8b:f8:f2:72:6f:25:57:a1:21:42:1e:50:73:4b:0a:02:d5:af:
7e:9d:5f:ab
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIULDFT47QglnbY6iYegoVSN9fD80gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwNjIzMjVaFw0yNzA1MjQwNjI4MjVaMDMxMTAvBgNV
BAMTKEY0NEZCNkZBRjhERjczRTY5OUY2QUZEMTQwMDFENUUzOTI4QUI1NzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTJC5Msm6wtBqIAYQsWuwxzU2S
TTQP2BiHFXr3pzsrRM3JwCKnIRivy/gJCwbTZCqqWeljdTp2EkE86+4kai3hqNqI
R5gyswepyrLskDmVq3JjMSolfYtLbDPoAmujR59zzbTAK1RVy4T9+GtVW3ecsn5C
vpLMRTj6yIw+76ql+00g2791bkN7YHDQhkzXLb8tA53KJqwBW2oFGZMcKYqsFMQd
tCMDkVqcPAI/N1/JqP7WGjpVEXuuc+HiMieUoHzQ0bn5nrKV+JzSRK7xuHZqJtBt
O9l9AU9dOno9zG2pWysOJFc+AZhGdfri67amZHBguKfOhaPAbZmH0nWuj21VAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU9E+2+vjfc+aZ9q/RQAHV45KKtXkwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzMDcyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqhpjANBgkqhkiG9w0BAQsFAAOCAQEAOkpE
1VYyXaYKvMp1Gzzyo/ddf5w18NlfoEC74pp5cDS+URasggpj5eC1RfKzC62PZNEA
SjwRl6giDiy6ONVAd04pNnJQI+7b6ypcSYU3OYPN3m9QJxZa4mLPzLWEYwvfiv16
1dB13m3WhME5MGjO0NZoYzvdLljrLudq8dYFFE6T+aodZJbTeMMma0uK6yNkgfoZ
hXATaTE5MVSIsymlMAES/dAvJjPWeKztuN0XSAFE0w31cSeHFYyqDbAcak/D2bmc
EEks7F3TYqvu4y92OAw2DRX1itwahm8qHS6EURQPc7mWuXHFgUEWi/jycm8lV6Eh
Qh5Qc0sKAtWvfp1fqw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:30 2026 by rpki-client