Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143082.roa
File: AS143082.roa (raw, json)
Hash identifier: dX/mYmGQwaXzANLcscgX8p1OsBKKT7fKdpEIsoxA7Vw=
Subject key identifier: 7E:65:59:78:DB:02:0B:41:B6:6F:33:9A:64:7B:BD:A6:6D:C9:21:04
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7DE38420B4FAEA40564326706224DC271537AA77
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143082.roa
Signing time: Mon 25 May 2026 01:51:16 +0000
ROA not before: Mon 25 May 2026 01:46:16 +0000
ROA not after: Mon 24 May 2027 01:51:16 +0000
asID: 143082
IP address blocks: 240a:a1b0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:e3:84:20:b4:fa:ea:40:56:43:26:70:62:24:dc:27:15:37:aa:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:16 2026 GMT
Not After : May 24 01:51:16 2027 GMT
Subject: CN=7E655978DB020B41B66F339A647BBDA66DC92104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2c:28:7e:23:a6:b2:36:89:58:95:e3:10:66:
50:c2:cc:4d:39:eb:d1:23:2d:1b:6f:23:fb:38:ba:
1b:a7:d6:99:ee:7f:a5:94:57:cb:05:12:88:5a:3d:
e1:c8:2b:49:ad:74:4c:07:b3:96:d0:df:19:b5:53:
d5:ce:35:6d:17:52:b2:01:c3:d8:47:6f:8c:da:4e:
34:49:5c:ce:96:72:10:dd:af:30:3c:9f:d2:06:da:
40:dc:a8:b8:a8:e8:4c:31:6b:d1:57:d1:3a:d0:80:
92:f9:2d:78:07:9f:64:a9:33:51:86:91:de:5f:9d:
a5:f2:8b:98:5c:e1:26:ad:4e:fa:fa:86:e7:82:23:
ae:9a:6a:25:86:05:2d:ca:79:38:f8:1f:80:4d:06:
51:e8:f8:75:db:8d:c8:e9:e3:cb:cf:01:e0:5c:a3:
cf:ce:48:d9:77:f4:c5:42:6c:45:bd:ef:f7:79:47:
ff:db:10:bc:7d:0e:ba:70:bd:c8:69:76:0f:49:cc:
d5:1b:ef:b8:e0:c3:2d:b3:e3:de:fb:ba:15:9b:42:
74:df:53:b3:9f:5a:aa:81:27:d4:0e:9b:4a:62:4f:
8a:c6:9e:b4:9e:72:da:5b:60:61:4f:f8:25:33:b7:
7d:56:0b:6b:10:80:4c:ba:af:e8:8d:f7:ad:13:75:
69:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:65:59:78:DB:02:0B:41:B6:6F:33:9A:64:7B:BD:A6:6D:C9:21:04
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143082.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a1b0::/32
Signature Algorithm: sha256WithRSAEncryption
0c:2c:8c:91:ea:f2:4a:ba:10:08:8f:33:a2:f4:25:e3:a2:f2:
68:64:ee:c7:ec:1f:44:48:bc:d7:c2:2d:76:54:dd:4a:92:fe:
73:00:d2:ce:99:9f:06:b3:53:5a:06:f8:3d:cc:5a:82:60:2c:
3c:c9:d3:ca:4d:3d:1c:19:de:ba:ca:f9:1f:29:42:4a:48:6c:
02:4e:d7:3e:8b:43:c9:79:b1:62:48:06:c4:79:bd:e7:53:70:
5c:31:2e:c8:be:37:b4:f5:76:b7:f9:26:24:70:66:86:71:c0:
7a:f2:2e:0d:cd:c4:ee:1c:a2:64:3d:90:12:0e:38:f9:df:56:
6d:77:d1:2c:1a:a8:7b:b8:44:fb:e2:8f:4e:8b:3f:35:18:c2:
c7:52:0f:6c:bc:ba:4e:30:c8:ec:58:15:69:e9:b7:a1:77:6a:
44:7f:90:7a:f2:bf:15:10:7d:d2:65:e0:fd:e2:0d:6a:74:ad:
87:63:6f:b1:37:3a:02:9f:63:bf:8d:41:fe:1f:de:f0:6b:97:
15:ea:11:88:d9:d0:70:b1:f5:57:9c:11:55:7a:ce:62:ec:22:
fa:d0:2c:d0:7c:82:48:a9:91:d2:b1:66:7c:24:59:a8:fe:37:
36:ec:07:32:9e:cb:39:3e:06:87:c6:79:43:ae:c6:9b:5b:6e:
58:5a:ec:5b
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUfeOEILT66kBWQyZwYiTcJxU3qncwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTQ2MTZaFw0yNzA1MjQwMTUxMTZaMDMxMTAvBgNV
BAMTKDdFNjU1OTc4REIwMjBCNDFCNjZGMzM5QTY0N0JCREE2NkRDOTIxMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBLCh+I6ayNolYleMQZlDCzE05
69EjLRtvI/s4uhun1pnuf6WUV8sFEohaPeHIK0mtdEwHs5bQ3xm1U9XONW0XUrIB
w9hHb4zaTjRJXM6WchDdrzA8n9IG2kDcqLio6Ewxa9FX0TrQgJL5LXgHn2SpM1GG
kd5fnaXyi5hc4SatTvr6hueCI66aaiWGBS3KeTj4H4BNBlHo+HXbjcjp48vPAeBc
o8/OSNl39MVCbEW97/d5R//bELx9Drpwvchpdg9JzNUb77jgwy2z4977uhWbQnTf
U7OfWqqBJ9QOm0piT4rGnrSectpbYGFP+CUzt31WC2sQgEy6r+iN960TdWmDAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUfmVZeNsCC0G2bzOaZHu9pm3JIQQwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzMDgyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqhsDANBgkqhkiG9w0BAQsFAAOCAQEADCyM
kerySroQCI8zovQl46LyaGTux+wfREi818ItdlTdSpL+cwDSzpmfBrNTWgb4Pcxa
gmAsPMnTyk09HBneusr5HylCSkhsAk7XPotDyXmxYkgGxHm951NwXDEuyL43tPV2
t/kmJHBmhnHAevIuDc3E7hyiZD2QEg44+d9WbXfRLBqoe7hE++KPTos/NRjCx1IP
bLy6TjDI7FgVaem3oXdqRH+QevK/FRB90mXg/eINanSth2NvsTc6Ap9jv41B/h/e
8GuXFeoRiNnQcLH1V5wRVXrOYuwi+tAs0HyCSKmR0rFmfCRZqP43NuwHMp7LOT4G
h8Z5Q67Gm1tuWFrsWw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:15 2026 by rpki-client