Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143131.roa
File: AS143131.roa (raw, json)
Hash identifier: PCjWEmUVavcrlbnIBedfkcuGqpg5jHpBvNdlusbgbHg=
Subject key identifier: 26:9A:CC:7F:EB:88:E6:E5:66:6A:06:F6:AC:E6:74:9F:7E:3A:0E:08
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2BD2DBF71E7BD3590382385F35D91A182DDDF91A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143131.roa
Signing time: Tue 26 May 2026 01:13:07 +0000
ROA not before: Tue 26 May 2026 01:08:07 +0000
ROA not after: Tue 25 May 2027 01:13:07 +0000
asID: 143131
IP address blocks: 240a:a1e1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:d2:db:f7:1e:7b:d3:59:03:82:38:5f:35:d9:1a:18:2d:dd:f9:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:07 2026 GMT
Not After : May 25 01:13:07 2027 GMT
Subject: CN=269ACC7FEB88E6E5666A06F6ACE6749F7E3A0E08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f9:51:fa:f4:aa:b3:fa:12:03:62:b1:2f:c2:
4d:71:56:34:6d:aa:f2:5a:cc:11:08:a4:af:3f:f4:
85:b9:3a:63:c8:33:57:5f:d8:64:22:6f:02:3b:15:
b2:4b:93:99:16:5c:5f:f1:d9:88:3d:8d:8b:d8:1f:
43:f6:2a:d0:e6:b7:6f:ca:1e:ba:05:81:c9:35:92:
71:66:6a:36:7e:0c:cf:43:3c:2e:f9:05:45:6d:57:
85:10:34:7d:03:ee:ed:e0:00:19:10:11:69:a3:b0:
08:5e:39:28:bd:43:f9:97:d9:8a:b1:bf:6f:f8:3d:
83:43:19:e9:37:c4:ac:29:08:55:5b:80:2f:9e:e2:
5d:e2:55:7c:df:c9:87:a4:2e:50:32:4c:3d:3e:b7:
a5:61:d9:a5:45:4f:8a:fd:93:b4:23:99:f8:f8:ad:
d4:1a:15:53:95:bb:03:dc:9b:7c:6c:22:38:df:5f:
34:10:20:52:a5:c3:ec:94:04:5f:98:13:67:87:34:
1f:2e:cd:06:89:8d:c1:06:66:d7:d6:86:11:51:c2:
af:4c:47:37:1b:0b:53:09:d8:8c:7b:32:71:a8:2b:
42:17:cb:f5:10:ee:db:f9:6d:9d:28:62:88:d8:de:
fa:38:84:ce:69:99:e9:d8:48:73:2e:00:c6:a3:51:
0b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:9A:CC:7F:EB:88:E6:E5:66:6A:06:F6:AC:E6:74:9F:7E:3A:0E:08
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a1e1::/32
Signature Algorithm: sha256WithRSAEncryption
30:db:1c:ed:0f:aa:82:49:3a:90:b5:4e:dc:dc:0e:24:20:45:
62:24:3a:95:48:60:72:ca:f5:06:e9:ce:d7:b2:aa:05:c4:8f:
43:03:ea:bd:5c:ea:a2:c4:62:7a:74:25:05:1f:50:08:55:da:
de:27:c6:96:2a:89:78:7a:73:e4:d5:06:16:5b:a3:f7:44:1c:
21:5b:36:31:a9:3d:3c:ce:2c:6e:1e:71:ff:ba:7f:14:c5:f5:
ce:c6:9e:95:8b:4a:e2:8e:65:71:7f:3b:d5:e4:98:3e:e5:7e:
aa:2e:ab:e3:01:5f:4a:be:dc:eb:10:0f:55:61:87:2c:ec:d9:
ca:73:da:c8:76:48:52:d9:1d:3b:5c:82:fa:54:b3:a4:f2:2e:
95:ad:04:84:f9:ac:2e:09:f2:69:ca:ff:7e:2a:a5:ac:e0:6d:
ca:6e:5d:a2:d6:2d:3e:6a:a7:14:4f:8e:01:d1:6d:b7:03:77:
f8:c2:d6:16:16:98:7b:73:c2:88:e0:f0:07:f0:c2:f2:f5:06:
0f:05:88:28:cb:5b:4a:ec:38:80:31:8a:4d:59:8f:c1:0c:e1:
35:c3:0f:fe:5a:d2:16:78:74:30:80:c8:70:0a:1d:39:90:c3:
aa:bb:55:23:55:f3:7a:72:33:93:89:ca:ea:39:dc:8d:ad:d0:
c1:cd:8a:6a
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUK9Lb9x5701kDgjhfNdkaGC3d+RowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMTA4MDdaFw0yNzA1MjUwMTEzMDdaMDMxMTAvBgNV
BAMTKDI2OUFDQzdGRUI4OEU2RTU2NjZBMDZGNkFDRTY3NDlGN0UzQTBFMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr+VH69Kqz+hIDYrEvwk1xVjRt
qvJazBEIpK8/9IW5OmPIM1df2GQibwI7FbJLk5kWXF/x2Yg9jYvYH0P2KtDmt2/K
HroFgck1knFmajZ+DM9DPC75BUVtV4UQNH0D7u3gABkQEWmjsAheOSi9Q/mX2Yqx
v2/4PYNDGek3xKwpCFVbgC+e4l3iVXzfyYekLlAyTD0+t6Vh2aVFT4r9k7Qjmfj4
rdQaFVOVuwPcm3xsIjjfXzQQIFKlw+yUBF+YE2eHNB8uzQaJjcEGZtfWhhFRwq9M
RzcbC1MJ2Ix7MnGoK0IXy/UQ7tv5bZ0oYojY3vo4hM5pmenYSHMuAMajUQtfAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUJprMf+uI5uVmagb2rOZ0n346DggwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqh4TANBgkqhkiG9w0BAQsFAAOCAQEAMNsc
7Q+qgkk6kLVO3NwOJCBFYiQ6lUhgcsr1BunO17KqBcSPQwPqvVzqosRienQlBR9Q
CFXa3ifGliqJeHpz5NUGFluj90QcIVs2Mak9PM4sbh5x/7p/FMX1zsaelYtK4o5l
cX871eSYPuV+qi6r4wFfSr7c6xAPVWGHLOzZynPayHZIUtkdO1yC+lSzpPIula0E
hPmsLgnyacr/fiqlrOBtym5dotYtPmqnFE+OAdFttwN3+MLWFhaYe3PCiODwB/DC
8vUGDwWIKMtbSuw4gDGKTVmPwQzhNcMP/lrSFnh0MIDIcAodOZDDqrtVI1XzenIz
k4nK6jncja3Qwc2Kag==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:49 2026 by rpki-client