Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143209.roa
File: AS143209.roa (raw, json)
Hash identifier: bvjvJke2sxxZNMpifSNd6kyhoQxNn4fuEwQKKA2unZc=
Subject key identifier: A0:5E:D9:0D:6B:F4:2E:CF:85:2E:CC:5B:C4:C3:A9:09:63:2C:BC:83
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4F015B155FA9113723DB1FAB517808CD6CE734DD
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143209.roa
Signing time: Fri 22 May 2026 04:07:58 +0000
ROA not before: Fri 22 May 2026 04:02:58 +0000
ROA not after: Fri 21 May 2027 04:07:58 +0000
asID: 143209
IP address blocks: 240a:a22f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:01:5b:15:5f:a9:11:37:23:db:1f:ab:51:78:08:cd:6c:e7:34:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:02:58 2026 GMT
Not After : May 21 04:07:58 2027 GMT
Subject: CN=A05ED90D6BF42ECF852ECC5BC4C3A909632CBC83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f2:71:97:f5:e1:13:c1:22:b4:7e:b6:55:b0:
ce:24:fe:73:26:3a:1a:3d:93:63:da:6a:5c:3d:b6:
52:cc:e1:15:4d:43:53:e1:f1:16:13:5a:ea:d1:ee:
3b:72:81:ad:4e:5d:10:db:7c:62:f3:37:4b:e8:e9:
ac:4d:1f:1f:f0:31:9b:d2:f2:57:68:2c:3d:d4:0d:
42:16:91:51:9d:57:9d:5d:02:51:07:b0:d9:b2:f2:
7f:10:95:c3:a5:4f:53:35:bf:5c:e9:69:95:b7:ac:
47:fa:e1:9f:c8:b8:5d:30:d1:a8:ad:6c:e3:7d:b0:
c7:a1:d9:38:9e:69:d0:83:73:0f:1d:eb:4b:86:3c:
88:48:0a:04:79:76:11:60:31:d7:e6:07:6e:3d:c4:
44:53:67:7b:cf:f0:ce:e3:64:5d:e5:d4:24:d5:c4:
97:e4:06:ce:86:01:d2:85:87:8f:fc:2d:b7:af:7f:
f2:44:e1:7c:7b:b9:25:2e:42:5c:1b:3e:39:32:03:
27:b8:52:c2:2c:98:12:b8:22:54:0f:64:e1:35:71:
ab:ff:ac:ad:5e:00:31:50:d4:ab:23:8c:86:f3:27:
10:5b:67:ec:fd:e9:3d:57:8f:34:6b:7f:14:5b:42:
08:da:c4:b2:0d:d8:df:a7:25:91:dd:20:0d:64:54:
35:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:5E:D9:0D:6B:F4:2E:CF:85:2E:CC:5B:C4:C3:A9:09:63:2C:BC:83
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143209.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a22f::/32
Signature Algorithm: sha256WithRSAEncryption
33:7d:ed:3b:2e:70:71:20:b8:38:61:bf:ce:1c:39:55:09:98:
e7:16:f7:04:8f:8e:cb:96:50:3d:6b:9e:64:6c:12:f4:67:0c:
24:40:0a:e9:72:85:9c:41:c6:23:ce:f8:8e:96:fe:96:05:f6:
8f:8e:0e:d6:e7:0f:b0:d7:77:3e:d0:74:78:79:c0:68:55:ca:
2c:de:40:89:3f:ca:c5:a0:65:ca:46:03:b4:c6:23:9c:2c:b3:
2f:d0:44:40:f2:de:47:97:94:c9:a5:92:aa:19:2e:8c:dd:76:
2c:8b:39:7d:2e:41:db:f5:68:58:c5:cb:86:9e:ce:d3:b7:6e:
ed:65:f5:c1:68:3a:a3:f8:4f:7c:38:9d:09:ae:ad:c0:2e:86:
bf:13:ed:4e:a8:b9:5b:50:f5:bc:40:58:86:3d:c5:33:9b:91:
35:01:bb:21:09:58:9e:dd:e3:f6:d3:8e:28:45:2e:95:88:dc:
42:da:70:de:7d:fa:f7:e0:94:cc:c2:f2:b8:61:79:44:4b:d4:
d6:2f:70:d1:8a:e5:78:90:81:9a:a0:b2:79:77:74:7c:bc:78:
4d:74:dd:90:2e:4e:76:d2:52:b6:76:a0:56:86:f9:ef:ad:83:
24:37:10:1c:5f:ef:e8:cd:63:b6:05:44:a1:45:1f:ea:fa:87:
35:15:dd:7e
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUTwFbFV+pETcj2x+rUXgIzWznNN0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNDAyNThaFw0yNzA1MjEwNDA3NThaMDMxMTAvBgNV
BAMTKEEwNUVEOTBENkJGNDJFQ0Y4NTJFQ0M1QkM0QzNBOTA5NjMyQ0JDODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc8nGX9eETwSK0frZVsM4k/nMm
Oho9k2Paalw9tlLM4RVNQ1Ph8RYTWurR7jtyga1OXRDbfGLzN0vo6axNHx/wMZvS
8ldoLD3UDUIWkVGdV51dAlEHsNmy8n8QlcOlT1M1v1zpaZW3rEf64Z/IuF0w0ait
bON9sMeh2TieadCDcw8d60uGPIhICgR5dhFgMdfmB249xERTZ3vP8M7jZF3l1CTV
xJfkBs6GAdKFh4/8Lbevf/JE4Xx7uSUuQlwbPjkyAye4UsIsmBK4IlQPZOE1cav/
rK1eADFQ1KsjjIbzJxBbZ+z96T1XjzRrfxRbQgjaxLIN2N+nJZHdIA1kVDV/AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUoF7ZDWv0Ls+FLsxbxMOpCWMsvIMwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzMjA5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqiLzANBgkqhkiG9w0BAQsFAAOCAQEAM33t
Oy5wcSC4OGG/zhw5VQmY5xb3BI+Oy5ZQPWueZGwS9GcMJEAK6XKFnEHGI874jpb+
lgX2j44O1ucPsNd3PtB0eHnAaFXKLN5AiT/KxaBlykYDtMYjnCyzL9BEQPLeR5eU
yaWSqhkujN12LIs5fS5B2/VoWMXLhp7O07du7WX1wWg6o/hPfDidCa6twC6GvxPt
Tqi5W1D1vEBYhj3FM5uRNQG7IQlYnt3j9tOOKEUulYjcQtpw3n369+CUzMLyuGF5
REvU1i9w0YrleJCBmqCyeXd0fLx4TXTdkC5OdtJStnagVob5762DJDcQHF/v6M1j
tgVEoUUf6vqHNRXdfg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:19 2026 by rpki-client