Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143219.roa
File: AS143219.roa (raw, json)
Hash identifier: wh+jGxbPKOiWi1fnTnSi/AWXFkaK6WThailY8mbP5E8=
Subject key identifier: 3A:E6:38:F5:49:61:F6:D6:C6:AF:0D:B1:7C:81:A6:E0:50:70:82:9A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0148F80382F278DF5F4F1250E901C17E505A2BDC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143219.roa
Signing time: Fri 22 May 2026 04:08:25 +0000
ROA not before: Fri 22 May 2026 04:03:25 +0000
ROA not after: Fri 21 May 2027 04:08:25 +0000
asID: 143219
IP address blocks: 240a:a239::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:48:f8:03:82:f2:78:df:5f:4f:12:50:e9:01:c1:7e:50:5a:2b:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:25 2026 GMT
Not After : May 21 04:08:25 2027 GMT
Subject: CN=3AE638F54961F6D6C6AF0DB17C81A6E05070829A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:dc:2d:7e:bf:4c:eb:2b:62:39:d4:b6:50:e6:
e3:23:d1:68:e4:dc:c0:d1:53:25:d7:f9:9a:8a:4e:
58:ea:8b:71:9b:8f:e1:11:1a:eb:ad:c5:dd:a3:bc:
32:25:e8:c0:8a:d2:58:03:6e:bd:0c:ed:86:32:ab:
74:05:6e:56:e7:b9:8c:86:e4:e9:7a:71:10:c2:f7:
7e:49:8a:d8:7d:6a:cd:ec:5d:8e:87:ae:ec:31:98:
4a:91:aa:09:a1:32:75:be:3c:cb:67:f0:f6:97:ca:
47:d5:41:b1:3c:9f:23:c0:35:43:2c:d4:2d:e6:10:
d9:fc:4d:01:53:c0:bb:e9:0a:5c:14:b8:43:8c:a7:
b5:6b:8e:24:87:7f:9b:5e:2b:25:e8:87:b0:3c:44:
9c:37:ef:59:22:48:f7:44:a8:9d:b0:c9:17:9e:a4:
af:df:41:16:94:f0:43:79:0d:f9:ad:1d:50:da:42:
6a:51:b9:c9:5f:05:96:41:23:56:45:80:14:7b:83:
64:de:15:1f:f2:73:90:f5:55:b7:f3:a9:bb:ec:68:
c7:d4:7e:c9:2a:59:a3:3f:3e:6e:52:f3:71:5a:38:
c6:35:6e:70:39:65:17:93:00:fd:31:38:1b:09:b0:
3f:16:ee:31:13:c1:c9:38:88:ca:24:97:21:b8:08:
be:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E6:38:F5:49:61:F6:D6:C6:AF:0D:B1:7C:81:A6:E0:50:70:82:9A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143219.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a239::/32
Signature Algorithm: sha256WithRSAEncryption
49:6f:fc:3a:9d:e4:28:45:0d:b1:6f:35:b4:5f:a5:fb:89:25:
4e:f5:f2:4b:28:38:70:b9:95:7e:7e:5f:8a:e2:1c:8c:7b:e8:
1f:60:b0:f3:28:63:c5:de:6a:a2:f1:6d:48:6d:b0:e3:68:1c:
eb:23:65:d2:fb:ec:90:5f:41:23:78:9b:5d:75:0e:fa:ef:f9:
a9:39:a0:65:a2:49:1b:0a:14:9c:7f:7b:08:57:8c:0a:2d:fc:
c9:2d:25:1b:7f:82:a2:2d:3c:c5:c7:11:f6:0c:70:74:5e:3c:
6d:9e:48:51:81:ea:da:71:d9:28:53:15:96:98:03:7d:fd:0c:
ab:df:ff:77:b4:4a:5c:31:d3:eb:0a:91:78:37:b6:cf:60:67:
59:9d:a1:33:97:59:67:69:de:cd:f0:cb:45:f2:67:5c:a4:d8:
36:d1:b0:c1:33:ce:f0:23:88:22:e9:86:6b:32:a4:b6:9f:b4:
50:23:68:38:b4:4e:36:c2:4f:41:75:dd:24:90:39:be:8c:61:
6d:23:e8:5f:1e:fe:db:1e:c1:f4:6a:c5:c1:4d:5c:2a:1e:a8:
29:8a:3f:75:b1:f3:bc:81:1f:c3:4d:e3:00:c5:4a:81:03:ab:
bf:75:a1:c4:3e:73:ae:e4:fc:fd:9b:f0:bf:16:8e:2b:93:42:
d9:ea:e2:a8
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUAUj4A4LyeN9fTxJQ6QHBflBaK9wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNDAzMjVaFw0yNzA1MjEwNDA4MjVaMDMxMTAvBgNV
BAMTKDNBRTYzOEY1NDk2MUY2RDZDNkFGMERCMTdDODFBNkUwNTA3MDgyOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd3C1+v0zrK2I51LZQ5uMj0Wjk
3MDRUyXX+ZqKTljqi3Gbj+ERGuutxd2jvDIl6MCK0lgDbr0M7YYyq3QFblbnuYyG
5Ol6cRDC935Jith9as3sXY6HruwxmEqRqgmhMnW+PMtn8PaXykfVQbE8nyPANUMs
1C3mENn8TQFTwLvpClwUuEOMp7VrjiSHf5teKyXoh7A8RJw371kiSPdEqJ2wyRee
pK/fQRaU8EN5DfmtHVDaQmpRuclfBZZBI1ZFgBR7g2TeFR/yc5D1VbfzqbvsaMfU
fskqWaM/Pm5S83FaOMY1bnA5ZReTAP0xOBsJsD8W7jETwck4iMoklyG4CL43AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUOuY49Ulh9tbGrw2xfIGm4FBwgpowHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzMjE5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqiOTANBgkqhkiG9w0BAQsFAAOCAQEASW/8
Op3kKEUNsW81tF+l+4klTvXySyg4cLmVfn5fiuIcjHvoH2Cw8yhjxd5qovFtSG2w
42gc6yNl0vvskF9BI3ibXXUO+u/5qTmgZaJJGwoUnH97CFeMCi38yS0lG3+Coi08
xccR9gxwdF48bZ5IUYHq2nHZKFMVlpgDff0Mq9//d7RKXDHT6wqReDe2z2BnWZ2h
M5dZZ2nezfDLRfJnXKTYNtGwwTPO8COIIumGazKktp+0UCNoOLRONsJPQXXdJJA5
voxhbSPoXx7+2x7B9GrFwU1cKh6oKYo/dbHzvIEfw03jAMVKgQOrv3WhxD5zruT8
/ZvwvxaOK5NC2eriqA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:09 2026 by rpki-client