Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143135.roa
File: AS143135.roa (raw, json)
Hash identifier: Nrch5p6UUK0u2hOGrMU5qkBrm7ifmF20i/XiuBwoSa8=
Subject key identifier: 1E:F9:38:BF:09:15:3D:BE:C1:0C:5B:45:1C:2A:4C:23:A5:F6:30:E4
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6D8736528A3F5EDAF85058FCADC383005707631F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143135.roa
Signing time: Fri 22 May 2026 06:46:02 +0000
ROA not before: Fri 22 May 2026 06:41:02 +0000
ROA not after: Fri 21 May 2027 06:46:02 +0000
asID: 143135
IP address blocks: 240a:a1e5::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:87:36:52:8a:3f:5e:da:f8:50:58:fc:ad:c3:83:00:57:07:63:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:02 2026 GMT
Not After : May 21 06:46:02 2027 GMT
Subject: CN=1EF938BF09153DBEC10C5B451C2A4C23A5F630E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:86:66:6d:7c:0b:cb:50:06:71:22:d1:10:08:
05:d2:4d:13:bf:2b:e1:77:f2:a7:dc:aa:5d:96:2b:
e8:d8:34:47:bd:3d:8b:c8:03:9c:14:1f:92:b1:47:
7a:7c:da:3a:34:67:c4:50:08:8e:74:7a:a7:29:d9:
fb:c9:cf:fa:16:0a:44:c4:5e:17:52:9a:ce:85:94:
58:a4:75:93:d0:4b:16:e5:0b:91:2d:b4:e7:ff:a9:
50:a7:cd:a2:d4:d9:d4:3d:6f:ad:ce:8d:86:68:47:
6f:7f:0f:17:f5:48:37:f4:7b:30:ef:58:da:02:02:
49:f9:00:6a:f3:06:f5:a1:f0:29:34:35:7b:64:4f:
c1:fc:2c:00:5c:17:48:d1:31:e3:c4:fe:3c:99:2c:
72:fb:ec:af:94:8a:d4:d5:19:e1:92:ae:90:54:06:
cc:f7:b1:13:41:5c:63:8a:08:60:23:f4:9a:5d:53:
1d:9b:e1:04:af:0a:f3:c8:d0:67:b8:9c:99:c1:0a:
47:e0:04:b5:85:77:09:18:1a:99:29:5f:92:16:5f:
e8:e5:63:ef:fe:13:59:d3:d4:14:f1:67:ce:23:06:
34:3f:3f:70:98:19:3e:30:a8:9c:5a:e9:74:cf:9f:
46:54:d6:0f:d9:dc:e4:f6:31:1d:bb:de:a6:54:07:
e3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F9:38:BF:09:15:3D:BE:C1:0C:5B:45:1C:2A:4C:23:A5:F6:30:E4
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a1e5::/32
Signature Algorithm: sha256WithRSAEncryption
18:47:8e:ca:0c:33:d2:dc:ca:cb:e9:d8:39:50:14:bb:f6:16:
80:55:0f:5d:e0:a3:a5:6f:00:a2:e0:ee:2d:a1:3d:36:f7:0a:
05:aa:64:2d:96:2c:b1:8c:bc:60:a8:f1:f4:bb:96:2a:f3:db:
81:a6:a8:64:20:29:55:aa:31:ca:fe:7b:34:d8:c2:78:96:1c:
be:25:b6:6b:85:5c:77:db:5f:2e:58:6c:29:20:c1:93:8d:ea:
c6:48:7d:d4:be:20:f2:43:75:30:3c:8a:d0:30:ab:2f:08:84:
73:c3:de:5e:46:19:55:63:d0:87:61:69:86:3b:44:b5:b6:0c:
8d:7b:d4:d2:70:00:77:56:33:34:f4:7f:fe:f6:88:c2:fa:2f:
2b:03:49:fd:b9:bd:c0:13:03:cf:46:9f:68:12:b2:ef:91:db:
af:1a:4a:ba:98:d2:22:d1:9c:07:a4:76:d5:a4:92:a6:58:48:
d4:00:02:84:53:84:a3:87:62:49:f9:f2:92:d7:15:c8:00:dd:
33:03:4e:c0:d0:ca:6f:98:e1:00:2d:a1:35:65:0d:eb:b3:c1:
8a:b9:b2:76:13:47:66:41:93:b3:70:c6:b6:b1:21:8f:68:b9:
d1:e2:2d:1f:b7:b9:5b:de:57:72:c5:1a:85:dd:12:e4:bd:fd:
a9:0a:b4:a7
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUbYc2Uoo/Xtr4UFj8rcODAFcHYx8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjQxMDJaFw0yNzA1MjEwNjQ2MDJaMDMxMTAvBgNV
BAMTKDFFRjkzOEJGMDkxNTNEQkVDMTBDNUI0NTFDMkE0QzIzQTVGNjMwRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9hmZtfAvLUAZxItEQCAXSTRO/
K+F38qfcql2WK+jYNEe9PYvIA5wUH5KxR3p82jo0Z8RQCI50eqcp2fvJz/oWCkTE
XhdSms6FlFikdZPQSxblC5EttOf/qVCnzaLU2dQ9b63OjYZoR29/Dxf1SDf0ezDv
WNoCAkn5AGrzBvWh8Ck0NXtkT8H8LABcF0jRMePE/jyZLHL77K+UitTVGeGSrpBU
Bsz3sRNBXGOKCGAj9JpdUx2b4QSvCvPI0Ge4nJnBCkfgBLWFdwkYGpkpX5IWX+jl
Y+/+E1nT1BTxZ84jBjQ/P3CYGT4wqJxa6XTPn0ZU1g/Z3OT2MR273qZUB+PdAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUHvk4vwkVPb7BDFtFHCpMI6X2MOQwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqh5TANBgkqhkiG9w0BAQsFAAOCAQEAGEeO
ygwz0tzKy+nYOVAUu/YWgFUPXeCjpW8AouDuLaE9NvcKBapkLZYssYy8YKjx9LuW
KvPbgaaoZCApVaoxyv57NNjCeJYcviW2a4Vcd9tfLlhsKSDBk43qxkh91L4g8kN1
MDyK0DCrLwiEc8PeXkYZVWPQh2FphjtEtbYMjXvU0nAAd1YzNPR//vaIwvovKwNJ
/bm9wBMDz0afaBKy75HbrxpKupjSItGcB6R21aSSplhI1AAChFOEo4diSfnyktcV
yADdMwNOwNDKb5jhAC2hNWUN67PBirmydhNHZkGTs3DGtrEhj2i50eItH7e5W95X
csUahd0S5L39qQq0pw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:04 2026 by rpki-client