Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143143.roa
File: AS143143.roa (raw, json)
Hash identifier: 7Trmxh1TnwsReJhDe1nXmrWnNWFGP+D1GFh3hDwyu2c=
Subject key identifier: 3D:D6:2C:5C:21:AD:59:25:BA:1F:4D:34:51:A9:E9:AE:24:D1:57:F8
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1C4DEE2ED1BA2BB12E9DF44849B95506BB8A12AD
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143143.roa
Signing time: Mon 25 May 2026 06:28:15 +0000
ROA not before: Mon 25 May 2026 06:23:15 +0000
ROA not after: Mon 24 May 2027 06:28:15 +0000
asID: 143143
IP address blocks: 240a:a1ed::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:4d:ee:2e:d1:ba:2b:b1:2e:9d:f4:48:49:b9:55:06:bb:8a:12:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:15 2026 GMT
Not After : May 24 06:28:15 2027 GMT
Subject: CN=3DD62C5C21AD5925BA1F4D3451A9E9AE24D157F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e7:5e:c3:1b:5d:c8:fd:03:f4:d6:72:55:16:
37:9b:3d:f4:22:fd:41:62:40:7f:a0:24:ef:d0:b8:
97:0a:ae:a7:21:a0:31:30:36:f4:1a:7b:c7:1a:58:
08:ea:d8:08:07:ba:25:af:db:a7:1a:a9:bf:cd:c2:
40:a0:06:47:65:e0:78:5e:2b:3a:a6:c6:ba:4f:a3:
61:54:7e:e8:d2:b9:a3:b3:0b:f7:e3:a5:e6:15:5e:
a6:6d:94:1f:1b:2a:91:75:03:cf:ca:96:09:db:99:
1e:8d:4e:86:8a:62:63:dc:2d:86:1b:ca:fd:91:38:
d7:35:99:f6:3e:73:ad:02:bd:37:52:b0:42:6f:ae:
1d:90:3d:13:b6:9e:01:10:e6:76:38:a7:6c:94:28:
40:21:1c:a4:6c:13:8b:3d:16:59:6a:a0:a6:58:6b:
d2:b7:ee:c9:60:df:a4:92:00:2c:1b:85:82:9b:1e:
23:59:ab:a3:e1:ff:02:7b:97:9a:90:00:a9:42:d8:
21:04:bc:85:a4:1c:89:a2:6b:9d:a4:a5:6d:5e:85:
f7:38:0e:7b:c3:3f:62:3e:8d:b5:11:03:c9:76:61:
01:c1:9f:3b:fd:28:a4:88:fd:c4:36:51:f4:63:83:
e2:af:54:f9:67:dc:90:11:cf:da:58:1c:8d:0f:be:
1e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D6:2C:5C:21:AD:59:25:BA:1F:4D:34:51:A9:E9:AE:24:D1:57:F8
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143143.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a1ed::/32
Signature Algorithm: sha256WithRSAEncryption
73:f6:d2:c5:9d:5c:8e:68:7a:c5:e6:1a:ff:5c:f1:8f:28:16:
ac:41:21:4d:82:9a:09:a6:b2:53:5d:b2:d4:19:33:cc:3d:c0:
45:77:25:c8:48:65:a0:bf:9d:04:64:55:ea:0b:72:5e:01:b9:
21:f1:37:3e:c9:d2:ea:2c:62:87:e6:0f:79:ea:2b:9c:48:d2:
ca:fb:4c:d6:3d:f1:01:03:01:af:9a:56:88:ae:e5:a1:b5:3d:
33:cc:38:55:1f:9c:e1:1d:58:62:a5:79:a7:76:10:fd:6a:4b:
12:a4:28:fa:86:a1:f1:72:93:a3:b2:f1:b5:f2:ee:6d:50:2c:
7d:f8:b8:ba:7d:52:fc:e8:f2:c2:2e:51:7a:31:e3:b4:a2:e8:
6f:dc:d6:06:f8:c2:6f:bc:c4:e6:0d:61:19:ae:98:96:14:72:
61:5b:13:93:b4:45:1b:7c:72:8e:5e:11:4e:31:00:cd:c3:b9:
c4:76:e4:80:ed:ce:d2:a1:04:2a:03:97:f8:33:17:f4:e3:cc:
b0:56:5e:f1:ed:75:77:68:8c:e3:d3:18:db:71:43:d7:62:b6:
bf:82:b7:fc:9b:d1:db:e2:43:05:e5:f5:a4:17:51:95:9c:36:
12:1a:64:47:7d:9e:ec:96:83:c9:d9:56:66:30:86:39:80:9e:
a4:4a:90:d6
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUHE3uLtG6K7EunfRISblVBruKEq0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwNjIzMTVaFw0yNzA1MjQwNjI4MTVaMDMxMTAvBgNV
BAMTKDNERDYyQzVDMjFBRDU5MjVCQTFGNEQzNDUxQTlFOUFFMjREMTU3RjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO517DG13I/QP01nJVFjebPfQi
/UFiQH+gJO/QuJcKrqchoDEwNvQae8caWAjq2AgHuiWv26caqb/NwkCgBkdl4Hhe
KzqmxrpPo2FUfujSuaOzC/fjpeYVXqZtlB8bKpF1A8/KlgnbmR6NToaKYmPcLYYb
yv2RONc1mfY+c60CvTdSsEJvrh2QPRO2ngEQ5nY4p2yUKEAhHKRsE4s9FllqoKZY
a9K37slg36SSACwbhYKbHiNZq6Ph/wJ7l5qQAKlC2CEEvIWkHImia52kpW1ehfc4
DnvDP2I+jbURA8l2YQHBnzv9KKSI/cQ2UfRjg+KvVPln3JARz9pYHI0Pvh7vAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUPdYsXCGtWSW6H000UanpriTRV/gwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzMTQzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqh7TANBgkqhkiG9w0BAQsFAAOCAQEAc/bS
xZ1cjmh6xeYa/1zxjygWrEEhTYKaCaayU12y1BkzzD3ARXclyEhloL+dBGRV6gty
XgG5IfE3PsnS6ixih+YPeeornEjSyvtM1j3xAQMBr5pWiK7lobU9M8w4VR+c4R1Y
YqV5p3YQ/WpLEqQo+oah8XKTo7LxtfLubVAsffi4un1S/Ojywi5RejHjtKLob9zW
BvjCb7zE5g1hGa6YlhRyYVsTk7RFG3xyjl4RTjEAzcO5xHbkgO3O0qEEKgOX+DMX
9OPMsFZe8e11d2iM49MY23FD12K2v4K3/JvR2+JDBeX1pBdRlZw2EhpkR32e7JaD
ydlWZjCGOYCepEqQ1g==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:03 2026 by rpki-client