Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143095.roa
File: AS143095.roa (raw, json)
Hash identifier: j7faCLfbKDq8/Q9oTTr4hG4IIRrI8t2uw6oU7F7PvtY=
Subject key identifier: 39:36:75:6F:15:9E:9E:1A:87:8F:DA:42:44:4E:CF:80:82:BD:62:EE
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 65F4589946E961BC5039FEEA68459BCE89355A52
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143095.roa
Signing time: Tue 26 May 2026 06:12:24 +0000
ROA not before: Tue 26 May 2026 06:07:24 +0000
ROA not after: Tue 25 May 2027 06:12:24 +0000
asID: 143095
IP address blocks: 240a:a1bd::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:f4:58:99:46:e9:61:bc:50:39:fe:ea:68:45:9b:ce:89:35:5a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:07:24 2026 GMT
Not After : May 25 06:12:24 2027 GMT
Subject: CN=3936756F159E9E1A878FDA42444ECF8082BD62EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1e:a2:a8:63:c0:10:6f:4d:cd:54:4c:99:70:
91:84:d2:1c:65:5e:27:ed:0c:7b:17:3d:87:c2:1d:
00:26:5c:72:7b:27:f3:e3:ae:bc:18:a6:2f:68:38:
24:b2:1f:6e:d9:22:61:d6:83:da:1d:c0:d3:4d:bc:
c3:6e:d0:be:5b:c3:0b:3f:05:2f:eb:dc:31:2f:2a:
52:07:bd:18:49:e7:ab:f0:ec:2c:4b:26:51:57:c4:
23:92:9c:e3:4a:41:bb:82:3b:fb:6a:23:c5:be:d0:
b1:4e:73:f0:87:8c:92:cd:de:bf:ea:58:cd:a3:80:
a7:f6:75:0e:a6:ef:99:3e:7a:70:1b:86:9d:01:c0:
a5:7c:68:04:73:7c:0a:b4:de:a4:79:6c:41:da:7f:
b1:94:40:a9:9b:fa:11:3c:b3:8e:6b:99:ba:87:4b:
30:25:a4:07:fc:01:90:b1:04:ca:19:87:8f:93:18:
d6:9b:f0:50:3b:28:a9:78:61:81:74:e8:1d:04:db:
c6:29:01:1f:19:83:b8:49:f1:51:fd:ce:ae:2c:19:
8b:9c:02:9b:15:81:a5:71:7d:f9:30:74:f7:e1:dc:
5c:be:f2:07:42:c9:33:1d:86:18:46:9a:92:d5:38:
90:dc:8c:e6:17:33:7d:e8:81:cb:4c:c6:8b:a7:4a:
8d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:36:75:6F:15:9E:9E:1A:87:8F:DA:42:44:4E:CF:80:82:BD:62:EE
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143095.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a1bd::/32
Signature Algorithm: sha256WithRSAEncryption
62:83:a0:30:dd:4c:29:87:9e:08:81:72:a7:bf:ca:28:cd:1a:
9a:9f:e4:03:31:ae:e9:a3:4a:89:bf:09:cf:a7:1c:2a:28:e9:
23:81:01:ac:69:d5:eb:88:30:56:d8:2e:85:29:f7:74:0a:89:
af:9f:b2:3f:f0:f1:7c:5c:18:21:5c:8f:80:e7:9c:a3:69:35:
c8:76:ba:e2:f1:92:e6:89:83:fa:e4:6a:30:13:00:43:3b:7b:
92:12:b9:3b:c5:7e:d5:bf:82:b9:21:5c:2f:c0:26:75:d0:50:
92:55:7b:0c:a5:d1:91:02:e3:03:e7:d5:74:34:ff:32:ba:9a:
e1:c4:24:9f:fa:c9:a0:20:32:dc:78:31:65:91:69:b3:14:ce:
8e:87:74:10:3e:03:74:09:40:30:3f:14:8e:d8:39:88:32:04:
3b:5c:f2:5f:a0:a5:70:f1:00:b2:4f:50:f8:19:a2:8a:17:b3:
61:c7:89:26:51:cc:66:0f:ee:cb:b4:1c:8b:f7:c0:02:39:aa:
f2:a6:f2:2c:12:65:c3:de:9a:16:e2:08:d4:b4:39:18:1a:6f:
20:86:33:bb:45:1f:a0:a6:03:f1:fe:4c:96:df:32:86:e9:dc:
84:d1:a5:f0:ee:8a:29:16:c5:f7:7a:ed:30:24:02:eb:c0:45:
f1:f1:b5:f2
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUZfRYmUbpYbxQOf7qaEWbzok1WlIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwNjA3MjRaFw0yNzA1MjUwNjEyMjRaMDMxMTAvBgNV
BAMTKDM5MzY3NTZGMTU5RTlFMUE4NzhGREE0MjQ0NEVDRjgwODJCRDYyRUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgHqKoY8AQb03NVEyZcJGE0hxl
XiftDHsXPYfCHQAmXHJ7J/PjrrwYpi9oOCSyH27ZImHWg9odwNNNvMNu0L5bwws/
BS/r3DEvKlIHvRhJ56vw7CxLJlFXxCOSnONKQbuCO/tqI8W+0LFOc/CHjJLN3r/q
WM2jgKf2dQ6m75k+enAbhp0BwKV8aARzfAq03qR5bEHaf7GUQKmb+hE8s45rmbqH
SzAlpAf8AZCxBMoZh4+TGNab8FA7KKl4YYF06B0E28YpAR8Zg7hJ8VH9zq4sGYuc
ApsVgaVxffkwdPfh3Fy+8gdCyTMdhhhGmpLVOJDcjOYXM33ogctMxounSo1LAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUOTZ1bxWenhqHj9pCRE7PgIK9Yu4wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzMDk1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqhvTANBgkqhkiG9w0BAQsFAAOCAQEAYoOg
MN1MKYeeCIFyp7/KKM0amp/kAzGu6aNKib8Jz6ccKijpI4EBrGnV64gwVtguhSn3
dAqJr5+yP/DxfFwYIVyPgOeco2k1yHa64vGS5omD+uRqMBMAQzt7khK5O8V+1b+C
uSFcL8AmddBQklV7DKXRkQLjA+fVdDT/Mrqa4cQkn/rJoCAy3HgxZZFpsxTOjod0
ED4DdAlAMD8Ujtg5iDIEO1zyX6ClcPEAsk9Q+BmiihezYceJJlHMZg/uy7Qci/fA
Ajmq8qbyLBJlw96aFuII1LQ5GBpvIIYzu0UfoKYD8f5Mlt8yhunchNGl8O6KKRbF
93rtMCQC68BF8fG18g==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:44 2026 by rpki-client