Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143196.roa
File: AS143196.roa (raw, json)
Hash identifier: qi9kekkkjTISh/HZlu/8rIY2FlcpTUKHcrlEFEZgwxg=
Subject key identifier: 9C:C8:71:1E:CD:ED:D0:43:62:E7:9E:73:4D:64:E6:58:7A:5D:DC:40
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4D2D17C7BC079BCB50DD7131126C195BD1AAB79C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143196.roa
Signing time: Fri 22 May 2026 07:24:56 +0000
ROA not before: Fri 22 May 2026 07:19:56 +0000
ROA not after: Fri 21 May 2027 07:24:56 +0000
asID: 143196
IP address blocks: 240a:a222::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:2d:17:c7:bc:07:9b:cb:50:dd:71:31:12:6c:19:5b:d1:aa:b7:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:56 2026 GMT
Not After : May 21 07:24:56 2027 GMT
Subject: CN=9CC8711ECDEDD04362E79E734D64E6587A5DDC40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4e:4f:05:94:13:2f:f0:a6:6e:38:75:87:8f:
e9:e3:f5:be:34:14:f9:86:50:da:38:79:27:36:29:
d1:26:dd:e7:5c:53:cb:2e:e1:87:99:7f:7a:20:65:
75:e1:e9:c3:7b:ec:bd:37:c9:20:19:3d:c0:1d:d5:
49:a7:35:4f:dd:52:41:30:46:4d:fc:73:ca:1f:68:
59:be:1e:f3:f2:22:3f:46:ee:1f:4a:1c:1a:ec:5a:
8f:cb:b9:f9:ed:1f:63:cb:79:3c:7e:e1:33:40:88:
91:8e:a2:f5:c7:af:14:0c:4b:e0:31:1c:9b:54:92:
e6:b5:66:c8:18:59:37:e8:b0:43:03:e0:e5:80:83:
56:cb:bb:0a:ec:b1:cb:fb:4a:0d:bd:b4:e0:f5:6a:
3b:52:58:c5:4a:44:11:cb:4f:8b:bc:bf:72:71:6c:
71:f0:17:03:53:15:f7:53:3f:a5:6e:23:9e:0b:f4:
b6:b0:9f:c8:2c:e6:aa:36:ad:21:7d:f2:9c:72:fa:
2e:a0:2c:c1:89:31:f7:1f:37:0c:fe:52:28:04:c3:
45:4d:3e:48:19:0c:43:70:8b:53:ad:ab:7c:c7:36:
31:73:d8:65:f8:12:28:74:ad:83:ff:88:e7:1f:a9:
6d:89:a8:c1:6e:1b:9e:e9:3c:eb:49:6a:2f:a0:fa:
c2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C8:71:1E:CD:ED:D0:43:62:E7:9E:73:4D:64:E6:58:7A:5D:DC:40
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143196.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a222::/32
Signature Algorithm: sha256WithRSAEncryption
62:57:36:7c:3f:85:b6:55:7e:6f:30:98:28:a8:40:a4:b8:f7:
3d:20:22:57:9b:24:33:58:08:67:81:18:c2:a8:6d:01:8a:6f:
2f:64:af:29:66:9a:80:ad:f0:b8:c4:28:57:fd:f5:1d:c4:fa:
22:02:bc:a7:10:15:42:bc:8e:74:bd:35:0a:df:d8:77:77:ae:
91:9f:a8:87:30:d2:06:5c:6f:2d:79:d3:09:7f:90:1a:fa:ef:
4f:4b:64:dc:d5:0d:dc:fd:1b:8e:18:d4:e1:7a:4d:54:e7:b9:
89:29:a7:7f:92:55:07:dc:62:ea:b8:f8:fb:8c:be:79:1e:10:
89:3f:29:41:39:a0:ff:3d:d4:f2:80:c0:74:db:88:00:63:bd:
12:64:e1:b3:af:f0:58:d8:ac:45:22:de:13:dc:b2:54:12:d3:
ad:90:f4:ea:47:df:6c:c0:a4:aa:4a:d4:65:5e:c0:f2:b0:e5:
26:48:ba:0d:48:01:d5:2e:5f:cd:75:66:28:0d:84:f6:84:6f:
4f:9f:bd:45:12:9e:9c:71:69:ab:78:ff:e6:09:b7:5e:94:34:
ec:02:e0:0e:7a:81:ee:9e:3d:47:63:a6:29:c8:76:32:8b:81:
a3:4e:3f:60:de:f4:f3:c9:c0:10:79:2d:6b:8a:dd:d0:2b:e5:
19:2a:27:40
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUTS0Xx7wHm8tQ3XExEmwZW9Gqt5wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzE5NTZaFw0yNzA1MjEwNzI0NTZaMDMxMTAvBgNV
BAMTKDlDQzg3MTFFQ0RFREQwNDM2MkU3OUU3MzRENjRFNjU4N0E1RERDNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDTk8FlBMv8KZuOHWHj+nj9b40
FPmGUNo4eSc2KdEm3edcU8su4YeZf3ogZXXh6cN77L03ySAZPcAd1UmnNU/dUkEw
Rk38c8ofaFm+HvPyIj9G7h9KHBrsWo/LufntH2PLeTx+4TNAiJGOovXHrxQMS+Ax
HJtUkua1ZsgYWTfosEMD4OWAg1bLuwrsscv7Sg29tOD1ajtSWMVKRBHLT4u8v3Jx
bHHwFwNTFfdTP6VuI54L9Lawn8gs5qo2rSF98pxy+i6gLMGJMfcfNwz+UigEw0VN
PkgZDENwi1Otq3zHNjFz2GX4Eih0rYP/iOcfqW2JqMFuG57pPOtJai+g+sJFAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUnMhxHs3t0ENi555zTWTmWHpd3EAwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzMTk2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqiIjANBgkqhkiG9w0BAQsFAAOCAQEAYlc2
fD+FtlV+bzCYKKhApLj3PSAiV5skM1gIZ4EYwqhtAYpvL2SvKWaagK3wuMQoV/31
HcT6IgK8pxAVQryOdL01Ct/Yd3eukZ+ohzDSBlxvLXnTCX+QGvrvT0tk3NUN3P0b
jhjU4XpNVOe5iSmnf5JVB9xi6rj4+4y+eR4QiT8pQTmg/z3U8oDAdNuIAGO9EmTh
s6/wWNisRSLeE9yyVBLTrZD06kffbMCkqkrUZV7A8rDlJki6DUgB1S5fzXVmKA2E
9oRvT5+9RRKenHFpq3j/5gm3XpQ07ALgDnqB7p49R2OmKch2MouBo04/YN7088nA
EHkta4rd0CvlGSonQA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:40 2026 by rpki-client