Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143233.roa
File: AS143233.roa (raw, json)
Hash identifier: Nj4JC0mCiLiyZCSridnrG8JWwETPjRHrZ0fq6wVNgPA=
Subject key identifier: AB:F0:02:D7:B9:E4:95:51:FE:F6:C7:E8:CF:BE:56:AF:DD:51:18:51
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2A5A01BFFA947B9C444539DA680689B15DF8D8A3
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143233.roa
Signing time: Tue 26 May 2026 06:30:53 +0000
ROA not before: Tue 26 May 2026 06:25:53 +0000
ROA not after: Tue 25 May 2027 06:30:53 +0000
asID: 143233
IP address blocks: 240a:a247::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:5a:01:bf:fa:94:7b:9c:44:45:39:da:68:06:89:b1:5d:f8:d8:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:25:53 2026 GMT
Not After : May 25 06:30:53 2027 GMT
Subject: CN=ABF002D7B9E49551FEF6C7E8CFBE56AFDD511851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:69:05:07:4f:87:c7:93:93:22:fa:92:b5:aa:
7e:98:05:48:9d:a9:90:6d:d4:57:ff:58:a6:19:0a:
ae:53:8c:0b:ce:a8:fe:21:ed:e0:67:67:0e:f1:7b:
59:c1:ad:b9:0d:f0:9e:2e:ed:76:87:47:f2:fc:71:
4e:ee:e5:73:41:a1:e7:cb:a0:23:b4:4f:d8:e4:20:
60:37:08:f2:c5:26:87:b9:ad:08:da:3a:26:60:e7:
b8:41:2d:b9:8c:ff:e6:9c:18:b4:b2:e4:23:d6:0b:
e0:dd:28:73:31:e1:8e:26:da:8c:ee:79:95:e3:f5:
30:d7:30:55:f9:df:71:21:f2:34:b3:d7:dc:53:65:
9a:e1:d0:c4:ef:49:2c:97:26:ca:87:b1:12:a5:44:
f0:d5:b7:df:7c:01:04:ca:23:48:39:9d:c0:20:e9:
bb:2f:eb:94:81:48:63:3d:96:fc:cd:d6:ba:94:f1:
8d:97:2a:5f:f3:f9:de:d3:fd:3c:c9:88:53:f1:67:
c4:9d:b4:ca:10:a5:7b:40:24:24:f5:7d:fc:88:c2:
92:76:01:31:2c:15:e6:2b:f6:ac:94:37:cb:0b:b5:
18:9a:c3:1a:e4:75:be:22:a8:13:75:2b:54:8e:d2:
a2:36:84:e7:1f:86:8b:6c:da:39:f3:d3:0f:b8:2e:
d1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F0:02:D7:B9:E4:95:51:FE:F6:C7:E8:CF:BE:56:AF:DD:51:18:51
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a247::/32
Signature Algorithm: sha256WithRSAEncryption
27:f9:ee:b0:b6:44:db:bb:76:6b:25:84:0d:94:6b:b3:3a:1d:
65:e9:53:e0:e0:83:b8:f3:93:d4:d7:6b:c4:68:22:99:28:37:
46:5e:92:91:8e:75:50:81:62:d1:21:20:da:f4:79:0b:fa:96:
45:44:3c:af:62:21:a0:95:75:be:13:22:25:7e:1f:e2:0d:a4:
ab:80:36:93:28:70:d2:4b:e3:86:0d:53:e2:89:53:64:7a:95:
2b:f2:17:b6:26:0c:72:03:ba:e7:02:31:47:14:36:65:3e:a2:
6f:3e:74:0a:54:06:10:e9:60:23:be:ab:7d:cc:83:82:f5:e6:
a4:02:25:1d:27:85:5e:4d:99:09:fb:aa:51:ec:51:ec:ad:6c:
35:04:ea:12:de:7a:35:03:c0:58:5e:c9:f5:e5:fa:a9:62:b7:
62:35:59:cd:26:92:e9:97:29:63:b8:13:26:89:66:01:0d:f2:
5d:bc:30:e7:3e:a6:cd:5e:0f:6a:56:de:68:ea:1c:1c:9b:9c:
07:b0:ab:ac:73:ed:a4:99:4f:69:0d:4d:16:dd:53:8f:39:06:
3e:e6:77:ab:2d:60:4a:15:8b:84:0b:df:65:7a:cb:93:29:a8:
db:7d:0f:f6:14:2f:81:ee:57:3a:ad:00:12:9d:9d:cd:ec:db:
27:d6:9a:33
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUKloBv/qUe5xERTnaaAaJsV342KMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwNjI1NTNaFw0yNzA1MjUwNjMwNTNaMDMxMTAvBgNV
BAMTKEFCRjAwMkQ3QjlFNDk1NTFGRUY2QzdFOENGQkU1NkFGREQ1MTE4NTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9aQUHT4fHk5Mi+pK1qn6YBUid
qZBt1Ff/WKYZCq5TjAvOqP4h7eBnZw7xe1nBrbkN8J4u7XaHR/L8cU7u5XNBoefL
oCO0T9jkIGA3CPLFJoe5rQjaOiZg57hBLbmM/+acGLSy5CPWC+DdKHMx4Y4m2ozu
eZXj9TDXMFX533Eh8jSz19xTZZrh0MTvSSyXJsqHsRKlRPDVt998AQTKI0g5ncAg
6bsv65SBSGM9lvzN1rqU8Y2XKl/z+d7T/TzJiFPxZ8SdtMoQpXtAJCT1ffyIwpJ2
ATEsFeYr9qyUN8sLtRiawxrkdb4iqBN1K1SO0qI2hOcfhots2jnz0w+4LtEFAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUq/AC17nklVH+9sfoz75Wr91RGFEwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqiRzANBgkqhkiG9w0BAQsFAAOCAQEAJ/nu
sLZE27t2ayWEDZRrszodZelT4OCDuPOT1NdrxGgimSg3Rl6SkY51UIFi0SEg2vR5
C/qWRUQ8r2IhoJV1vhMiJX4f4g2kq4A2kyhw0kvjhg1T4olTZHqVK/IXtiYMcgO6
5wIxRxQ2ZT6ibz50ClQGEOlgI76rfcyDgvXmpAIlHSeFXk2ZCfuqUexR7K1sNQTq
Et56NQPAWF7J9eX6qWK3YjVZzSaS6ZcpY7gTJolmAQ3yXbww5z6mzV4PalbeaOoc
HJucB7CrrHPtpJlPaQ1NFt1TjzkGPuZ3qy1gShWLhAvfZXrLkymo230P9hQvge5X
Oq0AEp2dzezbJ9aaMw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:53 2026 by rpki-client