Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143124.roa
File: AS143124.roa (raw, json)
Hash identifier: XXQJA5Q4w/pvTwBRoUymAX/+VUHWdgdbckZ+kzbaNXo=
Subject key identifier: 64:A3:FA:24:82:63:6C:5D:07:72:77:B5:55:D6:61:F6:1D:F9:91:97
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 42108133F7C570B8791B42B4990D5C41097FAC16
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143124.roa
Signing time: Mon 25 May 2026 01:51:02 +0000
ROA not before: Mon 25 May 2026 01:46:02 +0000
ROA not after: Mon 24 May 2027 01:51:02 +0000
asID: 143124
IP address blocks: 240a:a1da::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:10:81:33:f7:c5:70:b8:79:1b:42:b4:99:0d:5c:41:09:7f:ac:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:02 2026 GMT
Not After : May 24 01:51:02 2027 GMT
Subject: CN=64A3FA2482636C5D077277B555D661F61DF99197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:6d:ce:24:d1:d5:08:79:de:18:d2:1f:d7:ac:
6e:04:a6:1d:1a:ff:48:41:34:51:e4:75:7a:59:f8:
78:55:c5:c0:de:e9:5f:c8:37:5a:f1:a9:3c:a2:01:
44:6e:9f:53:3b:66:6d:9c:53:ff:64:c8:f4:ff:f5:
34:06:ea:b2:f2:22:bd:0e:10:0e:26:40:20:cc:93:
ba:3c:88:4d:65:e7:5e:61:df:e0:2e:83:70:ef:e5:
ce:6a:d7:70:27:cd:94:05:37:3d:3e:4b:f7:5d:c2:
8f:37:94:bd:54:7c:69:9c:88:ae:f9:2e:f5:19:49:
23:46:10:be:c2:cd:77:45:ff:3e:34:ff:bc:59:6d:
02:cc:e2:3b:56:c3:5e:dd:f3:77:0d:9f:a6:da:0c:
1d:c3:93:fa:92:bb:f1:fa:f4:df:1d:f5:ca:3a:99:
b8:c9:76:d4:26:25:11:75:6b:86:f3:9a:19:76:e8:
65:f4:1b:fc:83:9d:6c:83:09:89:ea:3c:7a:50:c0:
30:32:4f:a7:14:1e:c2:e8:74:a2:c9:59:66:08:80:
cb:1e:5e:39:4b:53:bd:44:df:03:c6:86:25:f0:0e:
81:78:b1:ab:10:3f:bd:e5:cc:ff:5f:32:99:9f:99:
4b:68:61:55:37:ef:74:b5:3a:ca:be:69:0b:f9:63:
82:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A3:FA:24:82:63:6C:5D:07:72:77:B5:55:D6:61:F6:1D:F9:91:97
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143124.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a1da::/32
Signature Algorithm: sha256WithRSAEncryption
12:3f:40:f8:fa:c1:f9:07:12:9c:da:d5:67:ad:c9:17:18:b0:
cb:f2:94:5b:e9:c6:5e:a5:e4:94:04:49:3d:f5:09:49:5e:ac:
8d:72:2e:9f:e2:a9:ff:69:8b:75:69:d3:38:6a:37:7b:4c:44:
6b:f0:a7:ff:51:0d:ad:2d:91:59:a0:65:e8:62:33:c0:2f:45:
f2:07:64:e1:18:ff:f0:31:40:6d:18:93:63:3a:7a:31:5a:9c:
71:54:36:f0:8b:42:e5:b6:fc:53:1f:f1:4d:74:93:c6:c6:1b:
80:98:25:f1:48:27:cb:df:41:0a:e1:49:03:6d:c2:19:7b:db:
0d:cc:6d:14:ed:84:8e:5f:26:06:22:9b:b5:f7:0d:3d:af:c7:
cd:ac:a0:00:8a:d7:f8:6e:9b:68:31:00:62:45:4c:9e:b6:e6:
11:85:9a:a3:0d:9a:86:4b:1e:0b:b4:fe:b3:55:c6:b0:9e:12:
93:94:4d:6e:85:b6:81:35:3e:16:ff:94:08:73:29:ed:9d:fb:
e2:bd:8e:96:4c:09:0f:5c:01:8d:ab:ba:b8:c5:5d:1e:e2:91:
00:b5:69:9a:b6:52:12:a4:d0:fc:71:7d:d1:fe:77:ba:d9:3e:
54:29:dc:ee:12:d1:d0:ed:3d:df:68:f9:ca:40:41:bd:a2:c3:
a3:5c:e5:dd
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUQhCBM/fFcLh5G0K0mQ1cQQl/rBYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTQ2MDJaFw0yNzA1MjQwMTUxMDJaMDMxMTAvBgNV
BAMTKDY0QTNGQTI0ODI2MzZDNUQwNzcyNzdCNTU1RDY2MUY2MURGOTkxOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdbc4k0dUIed4Y0h/XrG4Eph0a
/0hBNFHkdXpZ+HhVxcDe6V/IN1rxqTyiAURun1M7Zm2cU/9kyPT/9TQG6rLyIr0O
EA4mQCDMk7o8iE1l515h3+Aug3Dv5c5q13AnzZQFNz0+S/ddwo83lL1UfGmciK75
LvUZSSNGEL7CzXdF/z40/7xZbQLM4jtWw17d83cNn6baDB3Dk/qSu/H69N8d9co6
mbjJdtQmJRF1a4bzmhl26GX0G/yDnWyDCYnqPHpQwDAyT6cUHsLodKLJWWYIgMse
XjlLU71E3wPGhiXwDoF4sasQP73lzP9fMpmfmUtoYVU373S1Osq+aQv5Y4LlAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUZKP6JIJjbF0Hcne1VdZh9h35kZcwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzMTI0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqh2jANBgkqhkiG9w0BAQsFAAOCAQEAEj9A
+PrB+QcSnNrVZ63JFxiwy/KUW+nGXqXklARJPfUJSV6sjXIun+Kp/2mLdWnTOGo3
e0xEa/Cn/1ENrS2RWaBl6GIzwC9F8gdk4Rj/8DFAbRiTYzp6MVqccVQ28ItC5bb8
Ux/xTXSTxsYbgJgl8Ugny99BCuFJA23CGXvbDcxtFO2Ejl8mBiKbtfcNPa/Hzayg
AIrX+G6baDEAYkVMnrbmEYWaow2ahkseC7T+s1XGsJ4Sk5RNboW2gTU+Fv+UCHMp
7Z374r2OlkwJD1wBjau6uMVdHuKRALVpmrZSEqTQ/HF90f53utk+VCnc7hLR0O09
32j5ykBBvaLDo1zl3Q==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:56 2026 by rpki-client