Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143222.roa
File: AS143222.roa (raw, json)
Hash identifier: qbTY2zI6UelSYEGua2A1GwI6A+CdXxn6k01yHF0U2Es=
Subject key identifier: 32:32:EF:E9:05:AD:7E:07:C6:D4:82:05:A8:A8:21:25:43:79:65:12
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 327B740B550676490AD352A8E3AA197024929DEB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143222.roa
Signing time: Fri 22 May 2026 04:08:09 +0000
ROA not before: Fri 22 May 2026 04:03:09 +0000
ROA not after: Fri 21 May 2027 04:08:09 +0000
asID: 143222
IP address blocks: 240a:a23c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:7b:74:0b:55:06:76:49:0a:d3:52:a8:e3:aa:19:70:24:92:9d:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:09 2026 GMT
Not After : May 21 04:08:09 2027 GMT
Subject: CN=3232EFE905AD7E07C6D48205A8A8212543796512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c6:d3:de:64:1f:3d:70:dd:44:a4:f6:71:cc:
12:5e:df:37:a3:a6:86:64:03:56:3b:e0:b9:71:12:
5a:6c:26:87:22:ed:64:d2:3a:cc:74:29:0e:51:fb:
d8:5c:81:fe:f6:0a:55:a3:f2:cd:5f:cf:b6:5a:4f:
09:ef:bc:db:4f:ed:4e:22:97:e2:66:69:26:72:d1:
82:36:ff:00:1b:d7:2a:a7:11:f3:ad:1c:02:a0:04:
ef:4b:2a:dc:f9:21:1b:2a:34:eb:b0:51:f5:3d:37:
b6:c2:0f:08:84:ff:65:a9:ba:94:b5:0f:c1:ca:03:
a7:6d:4f:08:af:46:97:11:f6:f6:fb:fb:89:e1:49:
48:f2:8a:07:6a:fc:ca:d9:c6:b7:73:c7:a1:53:38:
bf:a4:af:29:11:00:1d:34:38:a8:f2:ec:af:e1:e4:
36:a5:a9:d5:36:51:89:5c:f1:0f:0c:28:57:d8:7a:
db:fb:c3:c4:29:c9:ee:25:33:e3:36:27:22:d0:ae:
1f:c0:f9:39:05:f6:39:58:7b:6b:0a:c1:ea:ba:77:
e4:22:1d:5f:2a:d6:c1:c7:1d:6d:ba:fe:b4:53:f3:
2a:e7:8c:e6:59:ab:d0:2d:cc:8c:37:23:4d:35:8d:
a1:85:9e:e6:46:54:e8:9d:6b:c5:e2:3d:58:d2:58:
41:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:32:EF:E9:05:AD:7E:07:C6:D4:82:05:A8:A8:21:25:43:79:65:12
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143222.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a23c::/32
Signature Algorithm: sha256WithRSAEncryption
a5:d7:6d:a6:6a:77:40:2e:cd:df:05:29:e0:ff:5c:d7:9f:ba:
0c:db:25:f0:6e:27:f6:61:30:df:c1:ed:2b:95:ea:70:28:e2:
e0:76:ed:f2:0e:34:3f:a3:a4:e6:ce:3a:f9:0c:4e:15:22:8c:
39:ef:56:21:57:d6:16:c8:13:5f:4e:e9:e8:18:d0:ec:e5:6f:
2a:f1:cc:cc:9a:af:d4:45:10:33:28:dd:bd:e0:f1:01:bc:ed:
16:5a:00:dd:60:d2:b0:8d:54:b8:64:6e:ba:1b:4d:06:0d:73:
21:32:e0:d0:d6:e4:9d:e3:e6:59:d3:48:7c:2e:de:05:f8:a7:
ba:2c:2b:53:9b:a0:19:b9:61:07:25:59:2f:51:28:22:cd:cf:
5d:59:da:cf:50:f1:a5:6a:38:77:76:66:6e:e8:e0:ab:53:df:
d1:d0:ae:20:0f:7f:c5:4b:a6:b0:89:f9:d1:a6:3c:b7:5a:6a:
3f:15:36:18:16:05:48:96:5c:ce:bd:54:5a:7c:fe:e0:46:a6:
55:8f:d8:1b:68:3d:df:da:ac:85:a1:de:5c:ce:f2:38:ac:71:
4f:2d:7b:a2:fa:c5:54:f2:d5:29:e7:31:36:f3:1f:52:74:06:
78:e9:96:0e:16:79:62:77:35:6a:de:ec:2b:26:01:c0:9e:3a:
0d:3b:5f:eb
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUMnt0C1UGdkkK01Ko46oZcCSSneswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNDAzMDlaFw0yNzA1MjEwNDA4MDlaMDMxMTAvBgNV
BAMTKDMyMzJFRkU5MDVBRDdFMDdDNkQ0ODIwNUE4QTgyMTI1NDM3OTY1MTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpxtPeZB89cN1EpPZxzBJe3zej
poZkA1Y74LlxElpsJoci7WTSOsx0KQ5R+9hcgf72ClWj8s1fz7ZaTwnvvNtP7U4i
l+JmaSZy0YI2/wAb1yqnEfOtHAKgBO9LKtz5IRsqNOuwUfU9N7bCDwiE/2WpupS1
D8HKA6dtTwivRpcR9vb7+4nhSUjyigdq/MrZxrdzx6FTOL+krykRAB00OKjy7K/h
5DalqdU2UYlc8Q8MKFfYetv7w8Qpye4lM+M2JyLQrh/A+TkF9jlYe2sKweq6d+Qi
HV8q1sHHHW26/rRT8yrnjOZZq9AtzIw3I001jaGFnuZGVOida8XiPVjSWEHjAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUMjLv6QWtfgfG1IIFqKghJUN5ZRIwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzMjIyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqiPDANBgkqhkiG9w0BAQsFAAOCAQEApddt
pmp3QC7N3wUp4P9c15+6DNsl8G4n9mEw38HtK5XqcCji4Hbt8g40P6Ok5s46+QxO
FSKMOe9WIVfWFsgTX07p6BjQ7OVvKvHMzJqv1EUQMyjdveDxAbztFloA3WDSsI1U
uGRuuhtNBg1zITLg0NbknePmWdNIfC7eBfinuiwrU5ugGblhByVZL1EoIs3PXVna
z1DxpWo4d3Zmbujgq1Pf0dCuIA9/xUumsIn50aY8t1pqPxU2GBYFSJZczr1UWnz+
4EamVY/YG2g939qshaHeXM7yOKxxTy17ovrFVPLVKecxNvMfUnQGeOmWDhZ5Ync1
at7sKyYBwJ46DTtf6w==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:03 2026 by rpki-client