Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143076.roa
File: AS143076.roa (raw, json)
Hash identifier: oBZ5D5bqZRE8oSdt5DUvPLST7QfIaVcEifDtZudKMos=
Subject key identifier: FE:C3:E2:69:B0:BB:81:73:04:70:F7:AD:0E:5E:76:49:1A:73:DF:D6
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 63CCD04E35E6799555671F0E6EB85B821A32C4F9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143076.roa
Signing time: Fri 22 May 2026 01:50:08 +0000
ROA not before: Fri 22 May 2026 01:45:08 +0000
ROA not after: Fri 21 May 2027 01:50:08 +0000
asID: 143076
IP address blocks: 240a:a1aa::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:cc:d0:4e:35:e6:79:95:55:67:1f:0e:6e:b8:5b:82:1a:32:c4:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:08 2026 GMT
Not After : May 21 01:50:08 2027 GMT
Subject: CN=FEC3E269B0BB81730470F7AD0E5E76491A73DFD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:7d:54:d9:05:81:8d:17:ba:46:8b:67:dc:62:
66:b3:9a:09:71:5f:f5:8e:16:ee:0c:70:32:88:72:
8f:81:b1:2b:b1:21:15:76:b0:d1:ba:cb:9b:d1:89:
10:ef:c3:b5:ce:e4:9d:3b:0e:4b:d9:e3:21:1f:3b:
76:83:8e:c5:0b:89:89:fa:ca:d7:a2:73:7a:99:f8:
90:dd:d8:a5:50:43:e8:8b:cf:ac:a0:33:c8:14:8c:
ce:c4:11:fb:52:f0:02:b0:dc:73:49:60:de:86:de:
fe:34:2d:54:af:88:2c:01:63:ef:7d:c1:d8:af:26:
6a:b2:8f:36:4c:0c:1f:ac:1c:79:b5:48:d5:ab:61:
a4:c4:c0:72:d9:cf:bc:ea:49:ed:82:23:0a:43:f1:
b2:2d:f5:f8:e8:73:3d:34:d2:ab:c4:7b:ad:af:cf:
cb:81:dc:88:46:c8:46:26:d4:ee:e7:14:1d:81:e4:
64:64:f1:cd:a1:96:c2:81:ab:74:bb:b0:c0:ea:bb:
e4:5b:6f:8e:d4:c3:af:74:69:d8:ce:e9:67:24:7d:
82:c5:33:41:d8:31:bc:7f:5c:9a:65:f0:42:0e:80:
ce:53:61:ac:87:f5:76:38:1f:62:d5:f2:99:09:88:
9f:30:54:fc:b7:d6:c0:3b:da:4f:ca:b6:39:47:c2:
4b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C3:E2:69:B0:BB:81:73:04:70:F7:AD:0E:5E:76:49:1A:73:DF:D6
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143076.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a1aa::/32
Signature Algorithm: sha256WithRSAEncryption
3a:7a:cb:70:60:51:34:73:d2:e2:db:02:3a:5c:df:6d:ea:0f:
d4:e7:07:07:cb:5c:54:9d:e2:0a:1b:f9:5b:14:f0:cb:d4:be:
d8:d9:06:fc:7b:02:19:19:93:99:ca:c0:3f:04:0e:0f:5d:25:
b3:8f:c4:ac:68:c2:e0:d8:fa:44:7a:2c:50:fc:ac:7a:62:52:
87:cd:fd:56:bd:95:ac:6e:da:92:43:51:ad:84:c1:ea:1d:a6:
5d:e3:54:a3:18:60:da:67:37:d0:4b:ae:7c:83:4a:31:51:c6:
b9:eb:01:d0:ea:7d:d5:4d:df:22:5e:43:0e:86:d7:cc:74:37:
8d:95:64:fb:71:47:64:d9:23:e5:38:71:61:4b:5b:16:9f:dd:
c0:50:6b:d8:78:5c:e7:f8:b7:75:d3:5f:59:7f:00:b8:be:d4:
f6:d8:cb:90:17:4f:5a:db:e9:4f:ab:14:b3:8f:8e:bc:8f:ef:
6e:c0:c3:56:aa:7b:a0:30:08:ae:10:5c:a1:5b:96:26:69:4d:
75:7c:10:bb:fc:9a:21:06:01:cc:ed:52:e2:2c:2b:9a:0c:27:
f9:9a:9e:a9:a8:b2:d2:5c:64:52:8c:30:76:0d:5c:88:ca:dd:
dc:70:93:f6:bb:ac:77:cd:d2:99:30:71:35:d3:1c:b4:97:31:
9e:90:45:e3
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUY8zQTjXmeZVVZx8ObrhbghoyxPkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwMTQ1MDhaFw0yNzA1MjEwMTUwMDhaMDMxMTAvBgNV
BAMTKEZFQzNFMjY5QjBCQjgxNzMwNDcwRjdBRDBFNUU3NjQ5MUE3M0RGRDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFfVTZBYGNF7pGi2fcYmazmglx
X/WOFu4McDKIco+BsSuxIRV2sNG6y5vRiRDvw7XO5J07DkvZ4yEfO3aDjsULiYn6
yteic3qZ+JDd2KVQQ+iLz6ygM8gUjM7EEftS8AKw3HNJYN6G3v40LVSviCwBY+99
wdivJmqyjzZMDB+sHHm1SNWrYaTEwHLZz7zqSe2CIwpD8bIt9fjocz000qvEe62v
z8uB3IhGyEYm1O7nFB2B5GRk8c2hlsKBq3S7sMDqu+Rbb47Uw690adjO6WckfYLF
M0HYMbx/XJpl8EIOgM5TYayH9XY4H2LV8pkJiJ8wVPy31sA72k/KtjlHwksrAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU/sPiabC7gXMEcPetDl52SRpz39YwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzMDc2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqhqjANBgkqhkiG9w0BAQsFAAOCAQEAOnrL
cGBRNHPS4tsCOlzfbeoP1OcHB8tcVJ3iChv5WxTwy9S+2NkG/HsCGRmTmcrAPwQO
D10ls4/ErGjC4Nj6RHosUPysemJSh839Vr2VrG7akkNRrYTB6h2mXeNUoxhg2mc3
0EuufINKMVHGuesB0Op91U3fIl5DDobXzHQ3jZVk+3FHZNkj5ThxYUtbFp/dwFBr
2Hhc5/i3ddNfWX8AuL7U9tjLkBdPWtvpT6sUs4+OvI/vbsDDVqp7oDAIrhBcoVuW
JmlNdXwQu/yaIQYBzO1S4iwrmgwn+Zqeqaiy0lxkUowwdg1ciMrd3HCT9rusd83S
mTBxNdMctJcxnpBF4w==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:42 2026 by rpki-client