Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143121.roa
File: AS143121.roa (raw, json)
Hash identifier: JEqigVTXGQpUL8jQKtLAj/oosRzLLIua8gTFYqttJLA=
Subject key identifier: 71:29:C0:C1:5A:F6:7A:0C:C4:85:E4:9D:3E:18:91:A1:90:EB:D3:84
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 68235DD0531519599960758FB234BADA6F66C6D1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143121.roa
Signing time: Tue 26 May 2026 03:17:18 +0000
ROA not before: Tue 26 May 2026 03:12:18 +0000
ROA not after: Tue 25 May 2027 03:17:18 +0000
asID: 143121
IP address blocks: 240a:a1d7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:23:5d:d0:53:15:19:59:99:60:75:8f:b2:34:ba:da:6f:66:c6:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:12:18 2026 GMT
Not After : May 25 03:17:18 2027 GMT
Subject: CN=7129C0C15AF67A0CC485E49D3E1891A190EBD384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:18:10:1f:29:85:8f:61:62:e5:75:7d:55:bf:
0a:80:53:1d:58:75:63:d3:66:bd:3b:4f:7f:1e:fd:
5b:37:74:76:12:65:59:08:c1:4d:93:e6:7b:3d:62:
e7:2f:4b:2a:a5:9e:c2:e0:8e:56:75:3f:62:88:93:
fe:bc:81:49:10:56:db:e5:f4:d8:99:37:a1:67:84:
2d:a8:3e:56:84:1c:c8:8c:57:88:c6:02:fb:57:68:
5e:63:a6:3a:b8:fe:91:c3:58:34:83:b2:69:49:44:
5e:3f:76:36:c7:45:7d:9e:fe:d3:7c:10:4b:77:c8:
0a:c8:d0:94:50:26:b9:91:75:26:7a:47:f1:ea:e6:
f7:19:7d:dc:f6:87:f0:fc:9a:e3:6d:74:7c:5e:9d:
44:45:67:32:88:1b:5d:aa:01:bd:8e:b0:93:4c:3c:
73:0e:1c:8d:23:cc:f3:88:f4:2a:f9:8e:2d:3f:97:
e9:0f:41:ea:42:c9:50:05:b5:ef:6a:fe:e0:46:52:
33:25:6d:1f:8a:08:18:d9:dc:22:a2:cb:12:af:b2:
03:c8:82:8a:31:a8:88:e5:bd:e8:2c:10:22:45:d8:
cd:b8:bd:d7:a3:64:e4:8c:d4:2e:cb:6d:76:9e:d4:
16:cf:53:b6:34:35:8f:e0:28:73:b9:b6:5c:77:bb:
8e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:29:C0:C1:5A:F6:7A:0C:C4:85:E4:9D:3E:18:91:A1:90:EB:D3:84
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143121.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a1d7::/32
Signature Algorithm: sha256WithRSAEncryption
58:e7:5c:71:35:c7:fb:ca:9f:ca:0a:e8:49:d9:85:ae:e7:e6:
2e:07:a1:57:b8:ae:23:af:ca:e2:fc:ac:42:b7:13:04:2e:d5:
8d:d7:e9:46:d3:d5:3d:1b:33:b0:fd:20:b4:b1:9a:34:5e:f8:
22:14:da:e8:46:7b:9f:1d:00:75:b4:57:8f:3b:e3:50:ed:f4:
e3:dd:d0:61:6b:3e:47:b0:31:fc:08:53:1d:44:18:5d:f6:c8:
0e:c0:f2:23:83:5e:2a:5f:b8:98:9b:cd:ce:04:23:5a:53:fc:
63:21:c9:2d:26:18:af:df:c0:85:7b:cf:bc:af:25:c8:7e:c0:
14:13:89:c2:b9:42:3c:11:08:fc:af:92:c1:87:69:71:38:00:
f9:84:85:d4:63:a2:55:29:e2:34:ac:46:a5:06:fc:2a:4d:0a:
71:cf:80:b4:3e:cf:4e:2e:28:72:ae:26:53:83:17:a2:bb:e0:
27:58:5a:ce:bf:39:de:21:7b:81:e0:15:58:01:8c:15:86:49:
f1:2b:3e:55:59:75:01:87:8a:de:b5:27:4a:aa:67:26:7a:dd:
99:9b:73:56:88:b8:2a:2e:d8:4b:5e:9b:6f:8c:d2:bc:ca:bc:
e1:0e:1b:ca:28:ce:95:88:b4:e4:4d:3e:c4:79:e0:9d:31:48:
0c:64:b0:d3
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUaCNd0FMVGVmZYHWPsjS62m9mxtEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMzEyMThaFw0yNzA1MjUwMzE3MThaMDMxMTAvBgNV
BAMTKDcxMjlDMEMxNUFGNjdBMENDNDg1RTQ5RDNFMTg5MUExOTBFQkQzODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJGBAfKYWPYWLldX1VvwqAUx1Y
dWPTZr07T38e/Vs3dHYSZVkIwU2T5ns9YucvSyqlnsLgjlZ1P2KIk/68gUkQVtvl
9NiZN6FnhC2oPlaEHMiMV4jGAvtXaF5jpjq4/pHDWDSDsmlJRF4/djbHRX2e/tN8
EEt3yArI0JRQJrmRdSZ6R/Hq5vcZfdz2h/D8muNtdHxenURFZzKIG12qAb2OsJNM
PHMOHI0jzPOI9Cr5ji0/l+kPQepCyVAFte9q/uBGUjMlbR+KCBjZ3CKiyxKvsgPI
gooxqIjlvegsECJF2M24vdejZOSM1C7LbXae1BbPU7Y0NY/gKHO5tlx3u45fAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUcSnAwVr2egzEheSdPhiRoZDr04QwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzMTIxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqh1zANBgkqhkiG9w0BAQsFAAOCAQEAWOdc
cTXH+8qfygroSdmFrufmLgehV7iuI6/K4vysQrcTBC7VjdfpRtPVPRszsP0gtLGa
NF74IhTa6EZ7nx0AdbRXjzvjUO30493QYWs+R7Ax/AhTHUQYXfbIDsDyI4NeKl+4
mJvNzgQjWlP8YyHJLSYYr9/AhXvPvK8lyH7AFBOJwrlCPBEI/K+SwYdpcTgA+YSF
1GOiVSniNKxGpQb8Kk0Kcc+AtD7PTi4ocq4mU4MXorvgJ1hazr853iF7geAVWAGM
FYZJ8Ss+VVl1AYeK3rUnSqpnJnrdmZtzVoi4Ki7YS16bb4zSvMq84Q4byijOlYi0
5E0+xHngnTFIDGSw0w==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:32 2026 by rpki-client