Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143130.roa
File: AS143130.roa (raw, json)
Hash identifier: zD81LK56p8nyUQ0xzowbUo2FhI9VluFdkhjIMxKtejI=
Subject key identifier: D7:AB:90:68:AE:48:F8:02:4F:8E:87:B0:F7:C4:88:6F:96:26:5B:10
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 556A064F4F7DD66C58B9DBF6EE21D2E1E43D8841
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143130.roa
Signing time: Fri 22 May 2026 04:08:31 +0000
ROA not before: Fri 22 May 2026 04:03:31 +0000
ROA not after: Fri 21 May 2027 04:08:31 +0000
asID: 143130
IP address blocks: 240a:a1e0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:6a:06:4f:4f:7d:d6:6c:58:b9:db:f6:ee:21:d2:e1:e4:3d:88:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:31 2026 GMT
Not After : May 21 04:08:31 2027 GMT
Subject: CN=D7AB9068AE48F8024F8E87B0F7C4886F96265B10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:46:68:f5:61:34:60:78:fe:21:83:63:a4:94:
8e:92:f7:9c:be:46:b0:0b:f9:de:70:b4:ea:6c:e8:
5f:02:bd:99:cf:a5:3d:45:13:83:4f:71:a3:41:72:
fe:ae:2c:95:08:de:53:c3:c3:bb:e7:83:42:a4:b4:
66:5c:f8:99:95:2b:d4:8e:5a:b1:ae:30:81:21:d5:
0a:5e:1f:91:e0:85:86:a4:3e:db:45:af:b5:9d:9b:
aa:a3:f2:e1:18:d3:89:13:a1:72:50:5a:43:c2:4a:
0e:b0:5c:6a:3b:b1:02:42:73:f9:74:af:13:4d:2e:
a8:83:97:a0:4b:91:b5:b8:d9:88:3a:75:71:85:e0:
2e:57:dc:54:39:ee:d4:58:ed:ce:d4:26:80:84:f7:
d4:2c:d2:0e:a9:40:63:f9:5c:ad:43:b5:81:2f:5e:
2c:0b:23:b9:97:79:8b:0b:e2:ab:43:a6:b3:b6:1d:
e4:11:f4:8f:ba:49:b7:35:91:f5:07:29:c2:39:e7:
38:f7:bd:fd:a3:ad:0e:ed:ce:ff:93:76:4b:f8:0b:
d0:fd:44:79:27:31:aa:7c:73:c4:70:6b:1e:ac:d1:
cf:ba:96:9d:d3:14:04:ff:fa:12:07:2f:08:bd:45:
43:5e:6d:52:17:c1:53:a0:b4:19:3d:cb:15:de:fc:
c6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:AB:90:68:AE:48:F8:02:4F:8E:87:B0:F7:C4:88:6F:96:26:5B:10
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a1e0::/32
Signature Algorithm: sha256WithRSAEncryption
01:c1:14:cd:94:44:04:a6:5e:0e:a2:11:e0:24:95:8d:a4:f2:
36:be:af:19:60:4c:c9:e9:e3:d0:ab:86:47:41:10:da:30:ae:
9e:6b:60:c2:cf:13:8e:94:56:e1:be:16:b0:19:a3:fc:5a:af:
cf:07:50:3f:6a:f7:0e:65:a0:73:ea:b8:18:b4:7f:93:59:ea:
be:ea:fa:8b:b6:0a:b6:aa:54:74:f4:65:91:2b:ab:05:08:db:
65:92:f1:b1:4d:90:40:91:bc:da:eb:81:e7:00:90:b6:48:d0:
98:7b:d6:b1:ea:b2:d9:fa:e6:f9:a7:af:d5:06:6d:e4:64:c7:
c5:f1:dd:c5:70:b6:83:21:cc:13:67:3d:b2:4a:a8:9a:22:87:
3f:16:19:6d:1a:78:fe:f0:f3:47:9d:25:2f:99:16:b7:9e:d3:
a9:b6:f0:c5:8b:61:e9:fe:42:10:96:78:83:cb:fc:6c:c9:3e:
62:af:92:b0:fa:56:60:c0:b9:56:73:ff:fe:96:69:33:5c:73:
54:7b:f1:a1:0e:6a:5d:ad:95:71:5e:e2:c6:a7:93:4a:60:f5:
1a:ea:d3:e0:eb:95:fe:24:75:c3:ac:d3:1a:9b:f2:fd:eb:35:
c3:72:e7:15:e1:7b:75:b5:3f:74:45:63:d1:7a:3a:49:ec:68:
78:cc:43:a9
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUVWoGT0991mxYudv27iHS4eQ9iEEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNDAzMzFaFw0yNzA1MjEwNDA4MzFaMDMxMTAvBgNV
BAMTKEQ3QUI5MDY4QUU0OEY4MDI0RjhFODdCMEY3QzQ4ODZGOTYyNjVCMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Rmj1YTRgeP4hg2OklI6S95y+
RrAL+d5wtOps6F8CvZnPpT1FE4NPcaNBcv6uLJUI3lPDw7vng0KktGZc+JmVK9SO
WrGuMIEh1QpeH5HghYakPttFr7Wdm6qj8uEY04kToXJQWkPCSg6wXGo7sQJCc/l0
rxNNLqiDl6BLkbW42Yg6dXGF4C5X3FQ57tRY7c7UJoCE99Qs0g6pQGP5XK1DtYEv
XiwLI7mXeYsL4qtDprO2HeQR9I+6Sbc1kfUHKcI55zj3vf2jrQ7tzv+Tdkv4C9D9
RHknMap8c8Rwax6s0c+6lp3TFAT/+hIHLwi9RUNebVIXwVOgtBk9yxXe/MaTAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU16uQaK5I+AJPjoew98SIb5YmWxAwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqh4DANBgkqhkiG9w0BAQsFAAOCAQEAAcEU
zZREBKZeDqIR4CSVjaTyNr6vGWBMyenj0KuGR0EQ2jCunmtgws8TjpRW4b4WsBmj
/FqvzwdQP2r3DmWgc+q4GLR/k1nqvur6i7YKtqpUdPRlkSurBQjbZZLxsU2QQJG8
2uuB5wCQtkjQmHvWseqy2frm+aev1QZt5GTHxfHdxXC2gyHME2c9skqomiKHPxYZ
bRp4/vDzR50lL5kWt57TqbbwxYth6f5CEJZ4g8v8bMk+Yq+SsPpWYMC5VnP//pZp
M1xzVHvxoQ5qXa2VcV7ixqeTSmD1GurT4OuV/iR1w6zTGpvy/es1w3LnFeF7dbU/
dEVj0Xo6SexoeMxDqQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:31 2026 by rpki-client