Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143101.roa
File: AS143101.roa (raw, json)
Hash identifier: k0iI43hjhfj5WUb2qBwpyj2JkmZbcXRm9faeBBIzZCg=
Subject key identifier: 39:4E:1A:14:77:32:54:49:FC:CD:06:57:88:9C:F9:EA:7A:37:F4:BE
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6A6E79A84BEFB6BDBD889AC05FBA37C33A171B1B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143101.roa
Signing time: Fri 22 May 2026 06:46:21 +0000
ROA not before: Fri 22 May 2026 06:41:21 +0000
ROA not after: Fri 21 May 2027 06:46:21 +0000
asID: 143101
IP address blocks: 240a:a1c3::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:6e:79:a8:4b:ef:b6:bd:bd:88:9a:c0:5f:ba:37:c3:3a:17:1b:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:21 2026 GMT
Not After : May 21 06:46:21 2027 GMT
Subject: CN=394E1A1477325449FCCD0657889CF9EA7A37F4BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f2:5d:21:3d:8b:f6:eb:d4:91:e8:42:0a:92:
4f:79:40:3e:a1:8f:58:c5:f8:12:69:35:75:77:28:
a2:6b:2e:14:a1:80:0c:e0:f7:46:c3:7f:f8:2c:2f:
1c:ee:63:c0:58:d7:05:41:ac:8a:4b:84:80:1b:c9:
00:22:5a:7b:23:17:cd:87:02:d9:c5:c5:0f:d6:77:
77:8f:22:04:2d:6d:8b:d9:ca:db:9b:58:a7:83:2d:
49:ab:b6:50:53:fd:df:97:c9:82:0d:21:6a:6d:ad:
95:a6:9c:c4:02:71:69:4c:b8:8a:56:77:41:a6:6f:
7f:e0:3e:a2:86:3d:62:f6:c3:44:2b:5a:be:10:9f:
f7:4c:47:f9:56:d0:d9:be:37:00:89:c7:ce:69:2c:
8a:ce:25:93:8d:a1:bf:6a:75:69:be:8e:b7:bb:83:
c2:26:f1:ea:b9:60:d6:2e:9b:de:cb:dc:53:95:47:
d7:8f:46:cc:cc:a6:7b:7d:7d:5d:1e:a4:7e:f3:64:
d8:cc:14:c5:94:ed:5e:ed:0c:f8:7c:16:49:70:46:
2d:12:22:6f:21:55:d5:0c:ea:70:2e:d2:3e:59:38:
bf:22:15:03:2c:fe:96:76:9d:38:25:73:78:ed:be:
dc:4b:79:42:1c:e8:d3:90:cd:06:3b:79:93:11:d3:
0b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:4E:1A:14:77:32:54:49:FC:CD:06:57:88:9C:F9:EA:7A:37:F4:BE
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143101.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a1c3::/32
Signature Algorithm: sha256WithRSAEncryption
15:2a:25:8e:51:d1:a7:c3:48:a5:46:b2:44:7f:44:cc:8f:7b:
58:d5:0a:e5:53:b6:d6:01:5a:e1:ce:53:9e:39:52:9c:06:24:
33:21:7d:e0:0d:3e:ff:a4:de:7a:d2:d7:28:aa:5f:40:76:7e:
52:35:ff:91:43:11:19:e5:fa:b8:56:6c:4e:a8:85:e3:80:42:
fd:4b:53:dc:6e:63:4c:db:e8:23:80:be:33:e8:8d:aa:4e:b1:
65:d5:78:f1:ae:93:79:81:20:89:3f:39:33:a2:78:6a:e6:e3:
4d:a5:7b:c1:39:31:8c:95:8b:80:19:63:b9:ee:82:ab:48:09:
78:71:cd:48:5b:27:c2:83:0e:08:7e:bd:05:eb:ac:90:58:98:
52:fb:89:78:00:b3:27:1c:53:d1:31:87:54:0f:2e:1b:ae:b2:
73:a6:ba:3d:6b:f8:9f:c2:d2:34:1e:be:30:e2:39:7b:c0:50:
88:de:2a:3e:07:eb:9a:51:eb:4c:f7:d4:e2:34:7c:3c:96:99:
58:a2:d4:ba:4a:fd:48:48:9b:40:61:3b:b9:d7:02:3b:70:52:
83:b0:10:c7:59:49:ad:d8:ec:fc:8d:ec:dd:c8:07:94:50:9b:
4e:2e:22:5f:c2:29:dd:77:15:71:30:1b:af:57:ab:7e:85:7e:
6f:03:6e:f1
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUam55qEvvtr29iJrAX7o3wzoXGxswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjQxMjFaFw0yNzA1MjEwNjQ2MjFaMDMxMTAvBgNV
BAMTKDM5NEUxQTE0NzczMjU0NDlGQ0NEMDY1Nzg4OUNGOUVBN0EzN0Y0QkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl8l0hPYv269SR6EIKkk95QD6h
j1jF+BJpNXV3KKJrLhShgAzg90bDf/gsLxzuY8BY1wVBrIpLhIAbyQAiWnsjF82H
AtnFxQ/Wd3ePIgQtbYvZytubWKeDLUmrtlBT/d+XyYINIWptrZWmnMQCcWlMuIpW
d0Gmb3/gPqKGPWL2w0QrWr4Qn/dMR/lW0Nm+NwCJx85pLIrOJZONob9qdWm+jre7
g8Im8eq5YNYum97L3FOVR9ePRszMpnt9fV0epH7zZNjMFMWU7V7tDPh8FklwRi0S
Im8hVdUM6nAu0j5ZOL8iFQMs/pZ2nTglc3jtvtxLeUIc6NOQzQY7eZMR0wsJAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUOU4aFHcyVEn8zQZXiJz56no39L4wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzMTAxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqhwzANBgkqhkiG9w0BAQsFAAOCAQEAFSol
jlHRp8NIpUayRH9EzI97WNUK5VO21gFa4c5TnjlSnAYkMyF94A0+/6TeetLXKKpf
QHZ+UjX/kUMRGeX6uFZsTqiF44BC/UtT3G5jTNvoI4C+M+iNqk6xZdV48a6TeYEg
iT85M6J4aubjTaV7wTkxjJWLgBljue6Cq0gJeHHNSFsnwoMOCH69BeuskFiYUvuJ
eACzJxxT0TGHVA8uG66yc6a6PWv4n8LSNB6+MOI5e8BQiN4qPgfrmlHrTPfU4jR8
PJaZWKLUukr9SEibQGE7udcCO3BSg7AQx1lJrdjs/I3s3cgHlFCbTi4iX8Ip3XcV
cTAbr1erfoV+bwNu8Q==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:27 2026 by rpki-client