Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143158.roa
File: AS143158.roa (raw, json)
Hash identifier: T8pExujb9fJJUT3+wWdf+2JDitmhvuajykZOEd8EE1g=
Subject key identifier: 4A:38:1F:2A:81:98:EB:B1:75:0F:98:F4:09:76:54:17:BB:DB:2B:4F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 26F795914AC0B08222C707CC8E74ADFD4EF5C819
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143158.roa
Signing time: Mon 25 May 2026 02:22:45 +0000
ROA not before: Mon 25 May 2026 02:17:45 +0000
ROA not after: Mon 24 May 2027 02:22:45 +0000
asID: 143158
IP address blocks: 240a:a1fc::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:f7:95:91:4a:c0:b0:82:22:c7:07:cc:8e:74:ad:fd:4e:f5:c8:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:45 2026 GMT
Not After : May 24 02:22:45 2027 GMT
Subject: CN=4A381F2A8198EBB1750F98F409765417BBDB2B4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:21:a5:db:84:0b:56:53:47:b2:86:94:ff:40:
e5:15:f8:ca:39:cd:cf:82:8f:76:ea:57:08:e9:57:
91:a0:68:a1:19:73:30:15:c7:81:24:8c:8b:4e:97:
c3:d7:3d:09:3d:fe:72:21:9b:20:44:87:1e:a3:7a:
17:b0:22:ad:b9:86:de:b0:eb:e2:4a:1a:9c:c2:49:
af:5c:bc:6a:14:bc:43:e3:61:8f:1d:51:c6:fd:05:
38:eb:26:84:8d:73:4e:2d:c3:1e:54:81:f4:85:52:
f9:a9:b2:ef:3e:9f:81:b3:ba:81:66:96:7a:e2:b7:
5f:96:a0:6a:0d:59:cf:36:00:57:07:14:3f:60:89:
eb:a1:91:b0:81:5a:38:6f:19:2c:b3:91:e3:18:4d:
6c:c5:82:b7:92:9d:2d:01:db:db:18:e2:b4:c9:20:
ca:8e:ee:e8:2b:df:d5:ed:05:08:64:6e:cb:d4:ce:
8b:21:52:a3:76:41:df:3d:6d:7f:8e:8a:8c:47:f8:
ca:ea:24:e6:43:9d:15:f3:8f:e1:0d:64:80:1d:88:
d9:2a:59:37:ed:1c:a2:85:96:c5:51:0c:e2:cc:3b:
20:c6:b1:45:1c:74:60:56:e2:bc:92:f6:40:05:b8:
21:c9:e3:ac:b0:c6:55:5b:02:9b:98:12:3f:a6:6c:
d2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:38:1F:2A:81:98:EB:B1:75:0F:98:F4:09:76:54:17:BB:DB:2B:4F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143158.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a1fc::/32
Signature Algorithm: sha256WithRSAEncryption
44:99:5f:77:44:34:f9:c6:d9:80:69:9f:b4:d3:7c:0c:b4:7d:
d2:2c:e6:0b:35:e1:8e:74:19:5e:45:ff:ba:04:6d:e8:10:43:
09:13:5d:d1:41:7c:72:c8:5e:86:85:c7:f7:fe:7a:ce:36:51:
94:71:ea:c9:a3:54:67:f2:87:fc:a5:13:9d:ef:63:ab:61:2e:
5c:76:74:43:d7:7a:d7:9d:88:2b:91:82:cc:0d:2e:bd:98:79:
1f:b3:7f:e8:0a:0e:e1:a9:4f:21:bc:94:1b:7e:8a:89:f5:f7:
af:9a:5d:03:46:bb:d7:d8:de:42:fa:4f:6b:95:56:4e:cd:cb:
cd:1e:a5:71:e0:3c:a1:a9:33:07:26:75:84:e8:76:4d:95:17:
25:b2:fd:9c:99:7b:cf:f9:7c:43:53:c5:8b:f3:6a:6b:08:6f:
8d:c6:e2:48:48:2e:3d:48:60:79:38:0c:96:d2:df:ce:12:d9:
b8:3e:6b:54:a2:e4:48:f4:a2:3e:ae:fe:07:71:8e:f0:30:78:
80:dc:26:e9:00:bc:39:e9:49:16:ba:01:7e:b9:5b:d0:b1:97:
2b:33:ad:80:1f:8e:da:79:66:c7:d7:81:41:a9:af:52:35:88:
d8:f2:9d:2d:bf:ef:52:0d:e4:30:43:bf:20:c7:fa:6d:fc:06:
bf:d3:f7:a1
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUJveVkUrAsIIixwfMjnSt/U71yBkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMjE3NDVaFw0yNzA1MjQwMjIyNDVaMDMxMTAvBgNV
BAMTKDRBMzgxRjJBODE5OEVCQjE3NTBGOThGNDA5NzY1NDE3QkJEQjJCNEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5IaXbhAtWU0eyhpT/QOUV+Mo5
zc+Cj3bqVwjpV5GgaKEZczAVx4EkjItOl8PXPQk9/nIhmyBEhx6jehewIq25ht6w
6+JKGpzCSa9cvGoUvEPjYY8dUcb9BTjrJoSNc04twx5UgfSFUvmpsu8+n4GzuoFm
lnrit1+WoGoNWc82AFcHFD9gieuhkbCBWjhvGSyzkeMYTWzFgreSnS0B29sY4rTJ
IMqO7ugr39XtBQhkbsvUzoshUqN2Qd89bX+OioxH+MrqJOZDnRXzj+ENZIAdiNkq
WTftHKKFlsVRDOLMOyDGsUUcdGBW4ryS9kAFuCHJ46ywxlVbApuYEj+mbNKjAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUSjgfKoGY67F1D5j0CXZUF7vbK08wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzMTU4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqh/DANBgkqhkiG9w0BAQsFAAOCAQEARJlf
d0Q0+cbZgGmftNN8DLR90izmCzXhjnQZXkX/ugRt6BBDCRNd0UF8cshehoXH9/56
zjZRlHHqyaNUZ/KH/KUTne9jq2EuXHZ0Q9d6152IK5GCzA0uvZh5H7N/6AoO4alP
IbyUG36KifX3r5pdA0a719jeQvpPa5VWTs3LzR6lceA8oakzByZ1hOh2TZUXJbL9
nJl7z/l8Q1PFi/NqawhvjcbiSEguPUhgeTgMltLfzhLZuD5rVKLkSPSiPq7+B3GO
8DB4gNwm6QC8OelJFroBfrlb0LGXKzOtgB+O2nlmx9eBQamvUjWI2PKdLb/vUg3k
MEO/IMf6bfwGv9P3oQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:30 2026 by rpki-client