Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143147.roa
File: AS143147.roa (raw, json)
Hash identifier: If662dVeqKht21D+fY68+ggoN25XkQpAewjpUFsGWV0=
Subject key identifier: 9F:23:61:43:76:32:53:8E:56:FD:58:98:C4:B9:D8:78:62:EA:55:97
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 140E204B634AE533B7808DC9D78509BCAEC7BA63
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143147.roa
Signing time: Fri 22 May 2026 07:08:56 +0000
ROA not before: Fri 22 May 2026 07:03:56 +0000
ROA not after: Fri 21 May 2027 07:08:56 +0000
asID: 143147
IP address blocks: 240a:a1f1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:0e:20:4b:63:4a:e5:33:b7:80:8d:c9:d7:85:09:bc:ae:c7:ba:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:03:56 2026 GMT
Not After : May 21 07:08:56 2027 GMT
Subject: CN=9F2361437632538E56FD5898C4B9D87862EA5597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:28:e4:79:1c:88:9f:6c:ff:9a:1b:dd:b3:96:
40:69:dd:31:56:40:14:d7:af:c9:0f:e1:4c:1b:fc:
13:c0:ed:3f:f5:c6:5a:49:67:90:10:2a:30:3d:bf:
d9:52:bd:3f:c3:00:7f:c2:68:4d:a5:66:66:c2:1e:
2a:f6:4c:87:47:5a:6f:78:7b:35:4c:b4:91:e9:4b:
fc:4f:b3:14:1b:71:f8:a5:92:b6:b3:97:19:4c:71:
9d:9e:d4:9b:5f:fa:58:9f:a0:8d:4c:53:b1:39:67:
03:68:b9:cb:b4:7c:b4:f4:6d:c7:c0:5b:67:a5:3b:
e5:5f:66:55:79:2c:f3:83:24:83:a4:a0:20:2e:82:
12:44:f5:50:bb:bc:94:49:ad:0b:fd:06:d9:75:f1:
c3:da:a9:6d:e2:23:78:fb:9f:73:c4:84:78:5e:10:
02:7a:2f:b1:5b:b5:da:47:6a:db:68:ce:92:88:d0:
d8:43:9d:18:43:ce:cb:4a:cf:3e:11:ab:0e:3f:6c:
2b:fe:e0:aa:3b:ef:7d:a4:4a:60:49:d7:bb:c4:85:
45:39:9b:3a:c1:47:54:12:70:89:1f:0f:2c:76:c7:
32:41:49:c2:76:03:96:54:9a:6e:95:a8:17:d9:3d:
6f:29:4d:5b:d5:bb:37:59:5f:56:d7:6c:85:91:51:
56:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:23:61:43:76:32:53:8E:56:FD:58:98:C4:B9:D8:78:62:EA:55:97
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143147.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a1f1::/32
Signature Algorithm: sha256WithRSAEncryption
74:1f:d7:28:61:d7:99:8f:84:ae:e1:c8:63:6e:b0:f9:6a:43:
38:3f:f2:33:74:cf:5a:29:6e:7a:7d:6a:69:b3:5f:15:2c:6a:
1b:95:98:4e:23:f6:a7:35:e8:e2:35:4a:03:3e:98:fc:c2:05:
bb:34:1f:30:68:4e:cd:0f:1b:29:e1:4d:01:3d:d1:89:93:a2:
20:99:db:7a:98:3e:e7:17:77:dc:26:b7:5e:6e:96:79:74:1f:
15:e9:7d:2a:16:03:52:b6:c9:07:c3:a5:fd:66:c0:cc:b7:4b:
08:43:d4:07:eb:5c:b6:46:be:f4:c1:fc:16:18:98:6d:81:d2:
cc:e2:d5:dd:a7:cd:b9:3a:d1:20:14:f1:f4:4d:32:3b:a4:f5:
36:e7:4c:bd:ff:4d:eb:46:7b:77:41:24:d4:0f:9a:22:10:b2:
84:fa:48:f7:ff:dd:1c:42:32:2f:73:7e:39:06:8b:15:86:b5:
53:15:87:9f:19:b7:0c:d0:f6:a0:0f:a1:7a:db:90:db:a1:32:
68:e4:09:8f:d9:d6:2d:7e:19:40:62:b2:a1:9f:11:17:93:ec:
b4:62:17:6b:46:24:8a:f3:2e:40:f7:5a:0c:50:86:a7:1b:87:
91:3e:7a:d2:cd:16:0a:f4:7a:01:1a:77:34:2d:90:25:5e:85:
f4:bc:36:f2
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUFA4gS2NK5TO3gI3J14UJvK7HumMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzAzNTZaFw0yNzA1MjEwNzA4NTZaMDMxMTAvBgNV
BAMTKDlGMjM2MTQzNzYzMjUzOEU1NkZENTg5OEM0QjlEODc4NjJFQTU1OTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDKOR5HIifbP+aG92zlkBp3TFW
QBTXr8kP4Uwb/BPA7T/1xlpJZ5AQKjA9v9lSvT/DAH/CaE2lZmbCHir2TIdHWm94
ezVMtJHpS/xPsxQbcfilkrazlxlMcZ2e1Jtf+lifoI1MU7E5ZwNoucu0fLT0bcfA
W2elO+VfZlV5LPODJIOkoCAughJE9VC7vJRJrQv9Btl18cPaqW3iI3j7n3PEhHhe
EAJ6L7FbtdpHattozpKI0NhDnRhDzstKzz4Rqw4/bCv+4Ko7732kSmBJ17vEhUU5
mzrBR1QScIkfDyx2xzJBScJ2A5ZUmm6VqBfZPW8pTVvVuzdZX1bXbIWRUVbJAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUnyNhQ3YyU45W/ViYxLnYeGLqVZcwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzMTQ3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqh8TANBgkqhkiG9w0BAQsFAAOCAQEAdB/X
KGHXmY+EruHIY26w+WpDOD/yM3TPWiluen1qabNfFSxqG5WYTiP2pzXo4jVKAz6Y
/MIFuzQfMGhOzQ8bKeFNAT3RiZOiIJnbepg+5xd33Ca3Xm6WeXQfFel9KhYDUrbJ
B8Ol/WbAzLdLCEPUB+tctka+9MH8FhiYbYHSzOLV3afNuTrRIBTx9E0yO6T1NudM
vf9N60Z7d0Ek1A+aIhCyhPpI9//dHEIyL3N+OQaLFYa1UxWHnxm3DND2oA+hetuQ
26EyaOQJj9nWLX4ZQGKyoZ8RF5PstGIXa0YkivMuQPdaDFCGpxuHkT560s0WCvR6
ARp3NC2QJV6F9Lw28g==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:08 2026 by rpki-client