Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143132.roa
File: AS143132.roa (raw, json)
Hash identifier: uxy7nYTs5AJwi4vTfYxOtEwuZ827dOAeEny3PJxEWTM=
Subject key identifier: EF:F1:7C:57:D3:09:87:EE:19:4C:D9:D1:E8:63:4A:0D:C5:A2:56:87
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 70E3197B0D4A4EBABB4EF2D124BA0B68AEF5410E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143132.roa
Signing time: Fri 22 May 2026 07:08:52 +0000
ROA not before: Fri 22 May 2026 07:03:52 +0000
ROA not after: Fri 21 May 2027 07:08:52 +0000
asID: 143132
IP address blocks: 240a:a1e2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:e3:19:7b:0d:4a:4e:ba:bb:4e:f2:d1:24:ba:0b:68:ae:f5:41:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:03:52 2026 GMT
Not After : May 21 07:08:52 2027 GMT
Subject: CN=EFF17C57D30987EE194CD9D1E8634A0DC5A25687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:98:12:16:9c:1c:d2:ff:d6:09:98:52:ba:90:
b4:02:13:37:b3:5e:3e:a2:10:e3:8b:fb:f0:d8:46:
06:b6:6a:c7:d8:1f:f3:65:49:52:88:f5:99:98:94:
7c:14:29:6a:77:f7:da:4a:ef:40:c9:cb:98:de:13:
74:15:f2:4b:5b:9f:de:e1:15:30:6a:c4:ca:e5:e6:
1e:00:ef:22:15:50:bf:7c:60:88:df:2f:ce:81:de:
84:c8:ba:a1:49:0d:d3:25:d9:ea:48:d3:2b:5f:88:
a6:d7:a3:32:d5:19:0b:cb:ca:65:ff:dc:0c:e2:61:
41:ee:0a:e5:35:3c:ce:81:69:a8:99:0d:de:1c:ff:
5d:83:d8:b8:94:b6:0c:f0:a4:a6:8d:d2:c4:8b:46:
ae:81:46:94:32:e4:a7:17:c9:b3:3d:a5:b6:94:c9:
33:7e:d5:e8:7a:ba:36:e2:02:75:a3:3b:9b:c9:47:
33:13:2a:28:fb:f7:50:15:dc:e5:44:fa:f6:48:e4:
a6:35:5d:24:a9:73:9f:e8:0d:8b:26:0c:f9:dd:8e:
81:90:88:2e:7c:b6:d7:3d:0f:4f:a6:30:c5:41:4c:
d5:a7:51:4a:aa:ee:45:46:f2:65:14:cc:60:84:e7:
1b:9f:00:f4:a7:d8:0c:33:28:b8:65:bc:6a:21:9f:
bf:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F1:7C:57:D3:09:87:EE:19:4C:D9:D1:E8:63:4A:0D:C5:A2:56:87
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a1e2::/32
Signature Algorithm: sha256WithRSAEncryption
26:b3:20:c7:c7:ee:d8:58:56:a0:1b:ed:de:ac:ef:fa:5e:16:
db:11:b6:84:7c:be:76:96:d7:13:ae:03:93:4d:cf:f6:8d:b1:
aa:ad:5f:af:17:1d:f8:ec:3f:fc:a3:1c:8c:32:d2:db:1f:b8:
44:9a:28:38:80:d8:41:2b:0f:f7:84:09:85:81:d7:a2:bd:f0:
a1:1b:7f:e2:5d:55:9b:1a:a6:e7:ac:39:8e:ad:07:b6:aa:88:
fb:bc:19:e8:d3:7e:68:74:d4:86:e1:f9:b2:7c:37:cc:99:22:
36:71:17:68:2c:c2:fb:f1:d4:1e:3c:8e:1f:df:82:40:e2:b3:
03:6c:33:36:58:94:0b:5f:07:7c:90:96:b6:4e:00:a8:a7:84:
2c:96:03:6b:9e:73:97:28:80:23:83:33:16:48:0c:78:64:7c:
12:cf:e0:26:26:5c:70:90:54:47:43:e4:7c:e0:7d:7b:8d:a1:
09:59:f3:93:29:f9:f1:14:a1:78:f0:2d:9d:6c:7d:99:49:52:
8d:82:86:46:54:09:b2:40:63:fc:5e:8c:0c:30:06:81:a1:41:
87:80:a2:a6:2e:41:8d:d5:fc:86:82:07:e1:b9:f4:77:b6:88:
4e:11:c4:8c:93:77:13:0d:5a:39:75:4a:0b:f5:d4:8a:d5:88:
16:00:c8:a2
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUcOMZew1KTrq7TvLRJLoLaK71QQ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzAzNTJaFw0yNzA1MjEwNzA4NTJaMDMxMTAvBgNV
BAMTKEVGRjE3QzU3RDMwOTg3RUUxOTRDRDlEMUU4NjM0QTBEQzVBMjU2ODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtmBIWnBzS/9YJmFK6kLQCEzez
Xj6iEOOL+/DYRga2asfYH/NlSVKI9ZmYlHwUKWp399pK70DJy5jeE3QV8ktbn97h
FTBqxMrl5h4A7yIVUL98YIjfL86B3oTIuqFJDdMl2epI0ytfiKbXozLVGQvLymX/
3AziYUHuCuU1PM6BaaiZDd4c/12D2LiUtgzwpKaN0sSLRq6BRpQy5KcXybM9pbaU
yTN+1eh6ujbiAnWjO5vJRzMTKij791AV3OVE+vZI5KY1XSSpc5/oDYsmDPndjoGQ
iC58ttc9D0+mMMVBTNWnUUqq7kVG8mUUzGCE5xufAPSn2AwzKLhlvGohn7/BAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU7/F8V9MJh+4ZTNnR6GNKDcWiVocwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzMTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqh4jANBgkqhkiG9w0BAQsFAAOCAQEAJrMg
x8fu2FhWoBvt3qzv+l4W2xG2hHy+dpbXE64Dk03P9o2xqq1frxcd+Ow//KMcjDLS
2x+4RJooOIDYQSsP94QJhYHXor3woRt/4l1Vmxqm56w5jq0HtqqI+7wZ6NN+aHTU
huH5snw3zJkiNnEXaCzC+/HUHjyOH9+CQOKzA2wzNliUC18HfJCWtk4AqKeELJYD
a55zlyiAI4MzFkgMeGR8Es/gJiZccJBUR0PkfOB9e42hCVnzkyn58RShePAtnWx9
mUlSjYKGRlQJskBj/F6MDDAGgaFBh4Cipi5BjdX8hoIH4bn0d7aIThHEjJN3Ew1a
OXVKC/XUitWIFgDIog==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:59 2026 by rpki-client