Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143139.roa
File: AS143139.roa (raw, json)
Hash identifier: 8RMEFbCiNQe+00/PDAauN/rtERgt/VQayxnuOkkuTgw=
Subject key identifier: 52:41:8A:BE:37:7A:9B:59:E3:59:61:7B:19:F4:8D:0D:5F:5D:89:D4
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4BF597A13379C76EED78D392A7C8AD677891E522
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143139.roa
Signing time: Fri 22 May 2026 07:24:56 +0000
ROA not before: Fri 22 May 2026 07:19:56 +0000
ROA not after: Fri 21 May 2027 07:24:56 +0000
asID: 143139
IP address blocks: 240a:a1e9::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:f5:97:a1:33:79:c7:6e:ed:78:d3:92:a7:c8:ad:67:78:91:e5:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:56 2026 GMT
Not After : May 21 07:24:56 2027 GMT
Subject: CN=52418ABE377A9B59E359617B19F48D0D5F5D89D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:65:27:13:3b:0a:60:d6:e1:0b:26:75:b6:83:
36:a6:b0:92:45:50:68:0a:07:90:24:51:dd:ba:49:
8b:17:3b:ae:a7:15:52:46:6d:f0:28:20:b8:89:66:
1a:94:89:2f:a1:92:66:6a:6b:7f:78:9f:7c:1e:17:
bb:1d:6c:33:fc:c6:bb:92:c2:0c:49:38:d7:c5:5e:
f9:8a:96:32:9f:c3:b6:ce:3b:76:35:b5:20:a5:cf:
67:ca:50:d5:29:13:f2:9b:d4:e5:65:92:fd:61:06:
1e:75:a7:f7:5a:61:38:a8:b1:77:41:54:f3:13:a4:
c9:24:0a:e2:cf:97:41:74:4c:36:55:53:8f:73:fd:
36:aa:f0:74:25:86:07:fa:e0:dc:e0:99:c6:24:58:
77:8b:4b:60:8f:2a:b1:00:ef:35:c8:1c:92:33:db:
0d:5b:fb:a8:26:0b:f0:0a:47:5b:30:af:33:a6:1a:
18:dc:57:77:7a:f8:19:c4:68:58:62:6c:92:2e:bd:
ca:4f:6d:92:59:4d:c6:71:cd:bf:5e:50:7a:71:a6:
fa:11:59:3c:a2:48:a0:10:18:2d:f8:6c:87:8e:39:
fd:63:be:96:a7:b0:c0:0f:52:dd:b1:53:78:c5:1d:
a9:b4:28:4a:68:65:46:aa:21:46:e4:37:d5:52:4d:
39:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:41:8A:BE:37:7A:9B:59:E3:59:61:7B:19:F4:8D:0D:5F:5D:89:D4
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a1e9::/32
Signature Algorithm: sha256WithRSAEncryption
14:d2:92:d5:0a:c2:dc:34:97:ae:1f:8f:44:b1:87:ac:59:2c:
01:1e:46:0d:14:f7:a1:d3:65:88:c6:df:3b:70:2b:42:f2:d4:
a3:a4:e3:4d:41:fb:3f:f2:05:80:6b:ab:a8:d7:ef:9d:79:ad:
b6:6c:8a:f5:cf:2a:6c:ec:d7:24:08:ba:4f:a7:46:6c:51:79:
65:7e:a4:09:20:55:fc:28:21:9d:33:02:40:34:cb:f7:42:6b:
bf:ed:b0:34:fe:e2:ba:2e:82:cb:71:f1:db:31:1b:1e:75:1a:
bc:96:80:08:05:84:dc:26:73:f5:69:9c:10:93:f4:8c:70:c7:
1d:c5:21:69:ec:3e:13:96:cf:c3:91:12:56:42:c7:88:aa:f6:
6e:55:21:0f:57:ed:4f:ef:51:7d:10:0d:1a:04:b5:22:06:ee:
6a:ba:a5:7b:a4:f4:3d:d9:2a:b2:00:30:17:b2:76:f3:1a:d2:
24:84:80:6a:4d:ae:ba:d0:a2:67:18:92:d6:bf:60:05:86:38:
3c:01:b2:d0:f8:17:00:0d:30:55:65:5d:b4:7b:04:00:e6:10:
2d:39:94:22:ac:cd:2e:ee:56:09:ac:09:3c:fa:bc:2c:19:a7:
7d:0a:81:3a:af:fe:8b:f5:a1:12:22:73:31:75:fd:03:74:f6:
d5:3f:e8:bf
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUS/WXoTN5x27teNOSp8itZ3iR5SIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzE5NTZaFw0yNzA1MjEwNzI0NTZaMDMxMTAvBgNV
BAMTKDUyNDE4QUJFMzc3QTlCNTlFMzU5NjE3QjE5RjQ4RDBENUY1RDg5RDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrZScTOwpg1uELJnW2gzamsJJF
UGgKB5AkUd26SYsXO66nFVJGbfAoILiJZhqUiS+hkmZqa394n3weF7sdbDP8xruS
wgxJONfFXvmKljKfw7bOO3Y1tSClz2fKUNUpE/Kb1OVlkv1hBh51p/daYTiosXdB
VPMTpMkkCuLPl0F0TDZVU49z/Taq8HQlhgf64NzgmcYkWHeLS2CPKrEA7zXIHJIz
2w1b+6gmC/AKR1swrzOmGhjcV3d6+BnEaFhibJIuvcpPbZJZTcZxzb9eUHpxpvoR
WTyiSKAQGC34bIeOOf1jvpansMAPUt2xU3jFHam0KEpoZUaqIUbkN9VSTTmzAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUUkGKvjd6m1njWWF7GfSNDV9didQwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzMTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqh6TANBgkqhkiG9w0BAQsFAAOCAQEAFNKS
1QrC3DSXrh+PRLGHrFksAR5GDRT3odNliMbfO3ArQvLUo6TjTUH7P/IFgGurqNfv
nXmttmyK9c8qbOzXJAi6T6dGbFF5ZX6kCSBV/CghnTMCQDTL90Jrv+2wNP7iui6C
y3Hx2zEbHnUavJaACAWE3CZz9WmcEJP0jHDHHcUhaew+E5bPw5ESVkLHiKr2blUh
D1ftT+9RfRANGgS1Igbuarqle6T0PdkqsgAwF7J28xrSJISAak2uutCiZxiS1r9g
BYY4PAGy0PgXAA0wVWVdtHsEAOYQLTmUIqzNLu5WCawJPPq8LBmnfQqBOq/+i/Wh
EiJzMXX9A3T21T/ovw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:50:01 2026 by rpki-client