Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143168.roa
File: AS143168.roa (raw, json)
Hash identifier: NGrR9VGv34GdWWSzxKvnc/UkMdLdSOYWjMO0GBXYJJQ=
Subject key identifier: DC:29:61:A6:83:7E:1C:C4:FA:0D:A2:D4:F7:38:15:17:BB:12:F1:E8
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0A6300EFD9DEECD4C91E490A73D0F51214176F25
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143168.roa
Signing time: Fri 22 May 2026 06:27:33 +0000
ROA not before: Fri 22 May 2026 06:22:33 +0000
ROA not after: Fri 21 May 2027 06:27:33 +0000
asID: 143168
IP address blocks: 240a:a206::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:63:00:ef:d9:de:ec:d4:c9:1e:49:0a:73:d0:f5:12:14:17:6f:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:22:33 2026 GMT
Not After : May 21 06:27:33 2027 GMT
Subject: CN=DC2961A6837E1CC4FA0DA2D4F7381517BB12F1E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a7:04:4a:ed:c4:d2:fa:71:50:9c:16:5a:f8:
7a:3b:01:10:76:a9:42:3b:30:a8:7b:91:26:f5:7c:
67:ca:64:61:1d:5c:59:f0:f2:09:55:0d:da:06:e3:
1f:4b:d9:0b:e7:89:56:01:41:e0:fa:0a:80:47:0a:
db:a6:5e:c8:14:5a:fc:9d:d1:c4:1c:41:cc:79:a5:
3a:5c:74:38:73:67:f3:09:9e:88:eb:ce:fd:99:7d:
fa:f3:a7:26:80:e4:d4:b6:90:cb:92:2d:25:ff:01:
b7:72:12:0e:78:78:61:0c:18:b0:cd:56:aa:c0:89:
5c:a1:a0:74:64:2d:8b:a1:ba:c4:3f:2a:40:98:66:
ad:93:28:c3:15:95:23:13:bd:cb:4b:9b:71:41:57:
36:80:23:c7:00:8f:e9:9b:5f:f6:38:0c:50:a1:ee:
7b:6b:48:4c:76:20:db:91:18:e1:e7:63:eb:41:c5:
b4:bf:99:b5:15:12:b0:be:48:53:45:24:b6:ac:20:
96:6b:56:4d:93:33:78:b5:47:3d:fc:0d:eb:0a:f2:
95:32:59:36:45:e8:ab:92:5f:ae:f2:08:37:b1:04:
e7:02:1c:5f:1d:e6:4f:b5:1d:f7:08:7d:6f:16:46:
21:d6:15:40:da:b3:7c:fa:8a:22:d9:92:08:d3:c1:
e9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:29:61:A6:83:7E:1C:C4:FA:0D:A2:D4:F7:38:15:17:BB:12:F1:E8
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143168.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a206::/32
Signature Algorithm: sha256WithRSAEncryption
75:bf:6b:4d:85:6e:72:1c:f7:4f:e4:37:1c:c5:f3:53:fd:25:
d0:e5:75:2d:43:5a:42:aa:78:f8:2d:3b:4e:b9:c6:35:3f:73:
42:8f:9e:a8:9b:44:a3:ba:9b:4e:15:49:bb:7e:4a:66:da:e7:
53:32:77:0c:26:3d:45:b6:f3:87:a4:56:99:b5:61:a0:b4:65:
fd:bc:fc:f6:49:54:10:98:db:35:74:c1:b8:4b:a3:53:eb:4c:
a7:38:e5:d7:14:06:f7:dc:6c:80:c1:6a:65:17:4a:2e:39:f6:
39:4a:e2:a9:34:94:d2:06:7f:4e:d5:e6:6d:4f:b5:0e:bc:ff:
b4:0a:58:96:27:fb:11:f3:a5:b8:9d:81:0d:13:d5:fe:88:53:
cf:8c:b4:d0:56:7c:78:98:6b:47:ae:f5:4f:75:e7:3a:9a:67:
59:1f:bd:71:9d:32:05:6a:83:9d:cd:7c:a5:8f:8c:92:c3:1a:
d6:7e:35:b2:54:6a:b6:00:8e:3f:0c:f2:85:c1:91:f8:bb:47:
36:c8:c5:d8:86:39:9b:86:e1:fa:39:fc:43:44:48:41:f1:65:
8c:49:46:16:2b:4c:25:67:89:77:00:86:97:07:fa:09:e9:17:
2c:7c:37:6f:c6:5d:72:35:10:28:7d:ae:00:52:46:5f:13:85:
f5:bc:9e:ff
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUCmMA79ne7NTJHkkKc9D1EhQXbyUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjIyMzNaFw0yNzA1MjEwNjI3MzNaMDMxMTAvBgNV
BAMTKERDMjk2MUE2ODM3RTFDQzRGQTBEQTJENEY3MzgxNTE3QkIxMkYxRTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQpwRK7cTS+nFQnBZa+Ho7ARB2
qUI7MKh7kSb1fGfKZGEdXFnw8glVDdoG4x9L2QvniVYBQeD6CoBHCtumXsgUWvyd
0cQcQcx5pTpcdDhzZ/MJnojrzv2ZffrzpyaA5NS2kMuSLSX/AbdyEg54eGEMGLDN
VqrAiVyhoHRkLYuhusQ/KkCYZq2TKMMVlSMTvctLm3FBVzaAI8cAj+mbX/Y4DFCh
7ntrSEx2INuRGOHnY+tBxbS/mbUVErC+SFNFJLasIJZrVk2TM3i1Rz38DesK8pUy
WTZF6KuSX67yCDexBOcCHF8d5k+1HfcIfW8WRiHWFUDas3z6iiLZkgjTwekfAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU3ClhpoN+HMT6DaLU9zgVF7sS8egwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzMTY4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqiBjANBgkqhkiG9w0BAQsFAAOCAQEAdb9r
TYVuchz3T+Q3HMXzU/0l0OV1LUNaQqp4+C07TrnGNT9zQo+eqJtEo7qbThVJu35K
ZtrnUzJ3DCY9Rbbzh6RWmbVhoLRl/bz89klUEJjbNXTBuEujU+tMpzjl1xQG99xs
gMFqZRdKLjn2OUriqTSU0gZ/TtXmbU+1Drz/tApYlif7EfOluJ2BDRPV/ohTz4y0
0FZ8eJhrR671T3XnOppnWR+9cZ0yBWqDnc18pY+MksMa1n41slRqtgCOPwzyhcGR
+LtHNsjF2IY5m4bh+jn8Q0RIQfFljElGFitMJWeJdwCGlwf6CekXLHw3b8ZdcjUQ
KH2uAFJGXxOF9bye/w==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:04 2026 by rpki-client