Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143234.roa
File: AS143234.roa (raw, json)
Hash identifier: CZxJ8C6Iok6yBuP4uI8coRQHC+GNM4ArOoGa96Qr7Gw=
Subject key identifier: 82:5B:45:DD:B7:3D:08:6F:71:61:05:CF:89:DA:FB:99:11:DD:93:D2
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0F9BEC930EF3C9C7D303CE7176C58721CFCC8582
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143234.roa
Signing time: Fri 22 May 2026 07:32:17 +0000
ROA not before: Fri 22 May 2026 07:27:17 +0000
ROA not after: Fri 21 May 2027 07:32:17 +0000
asID: 143234
IP address blocks: 240a:a248::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:9b:ec:93:0e:f3:c9:c7:d3:03:ce:71:76:c5:87:21:cf:cc:85:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:17 2026 GMT
Not After : May 21 07:32:17 2027 GMT
Subject: CN=825B45DDB73D086F716105CF89DAFB9911DD93D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cd:47:75:5e:d0:99:81:96:34:03:68:cc:8b:
00:c7:d0:5b:9c:0d:f0:3d:bd:8d:68:dd:50:69:18:
bd:54:65:7f:77:96:26:0a:3a:55:1f:a3:90:2e:41:
57:97:d1:5c:7a:41:21:af:ee:2e:e8:42:0e:71:eb:
d0:62:09:80:73:7c:51:e6:1b:cc:37:f7:db:1c:bc:
dd:b1:ec:35:ec:71:77:67:f9:c4:f3:50:9d:61:ad:
3d:4a:7a:5f:8d:b0:68:bf:83:04:22:4c:2f:03:dc:
b4:3b:c3:56:5f:d2:7b:16:fb:90:ce:7d:ac:80:37:
4e:56:5f:c3:63:3c:07:63:c1:c7:79:97:d1:7a:5d:
a1:8a:39:78:b2:8e:0a:81:58:78:bb:ae:b2:e5:47:
c5:78:9f:05:f4:fc:cd:05:ef:a4:fb:41:26:5a:c2:
74:fc:ff:a2:99:fe:51:82:fa:08:5c:ce:87:d9:a4:
a0:1c:84:75:7c:b6:45:00:71:53:00:aa:96:0f:5f:
c4:a9:06:e8:f7:0c:cc:2e:ba:73:78:d5:00:41:d5:
0b:23:ab:78:12:6f:52:e9:fa:51:6f:8d:7a:57:be:
f1:47:63:c8:cb:5a:e7:9a:6a:6b:2c:7f:56:6e:32:
47:a3:6a:2a:8a:a4:48:0a:8b:60:44:6b:40:1a:9f:
39:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:5B:45:DD:B7:3D:08:6F:71:61:05:CF:89:DA:FB:99:11:DD:93:D2
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a248::/32
Signature Algorithm: sha256WithRSAEncryption
4d:72:0e:5e:ad:e5:81:31:60:e2:31:52:8b:dc:4c:f2:c3:a6:
0e:09:43:e7:cd:d9:ee:8b:59:a4:5d:5c:b0:f0:2e:46:94:9f:
73:d0:b1:87:78:01:25:d7:0d:a8:78:9d:f4:16:e7:00:38:8c:
cd:c1:ca:31:1b:6e:e1:e7:08:c3:f6:1f:f1:36:86:91:46:8b:
93:06:0a:bc:9d:1d:d5:b3:e5:ad:ac:76:29:a7:5a:f3:60:e1:
62:12:28:b8:29:b9:6f:24:6d:71:96:e3:e4:1d:3d:a6:d5:e8:
63:54:c7:98:e3:b7:ae:93:57:41:67:68:8d:48:3f:a3:c8:a9:
55:9e:47:99:6b:9a:92:59:4f:3f:eb:2c:16:04:19:fe:60:b7:
5e:0c:3d:6f:0e:fe:b3:45:9b:d3:f5:8d:45:70:9c:01:0f:35:
a0:d1:f7:ee:24:c7:10:d9:06:d4:10:6f:f1:27:c5:ef:1c:8e:
ef:e1:49:ac:9a:87:a4:ba:75:c8:4c:3f:1f:b2:10:40:66:05:
8e:a9:9f:d3:82:42:99:62:3c:33:e9:22:18:21:bb:98:59:53:
0e:e7:09:58:7c:2d:b1:4e:38:bf:02:40:93:ad:e5:5a:69:9c:
6a:55:e7:75:77:6c:99:85:ff:93:69:0c:a6:0f:a5:11:39:5a:
f3:6f:a5:5b
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUD5vskw7zycfTA85xdsWHIc/MhYIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzI3MTdaFw0yNzA1MjEwNzMyMTdaMDMxMTAvBgNV
BAMTKDgyNUI0NUREQjczRDA4NkY3MTYxMDVDRjg5REFGQjk5MTFERDkzRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfzUd1XtCZgZY0A2jMiwDH0Fuc
DfA9vY1o3VBpGL1UZX93liYKOlUfo5AuQVeX0Vx6QSGv7i7oQg5x69BiCYBzfFHm
G8w399scvN2x7DXscXdn+cTzUJ1hrT1Kel+NsGi/gwQiTC8D3LQ7w1Zf0nsW+5DO
fayAN05WX8NjPAdjwcd5l9F6XaGKOXiyjgqBWHi7rrLlR8V4nwX0/M0F76T7QSZa
wnT8/6KZ/lGC+ghczofZpKAchHV8tkUAcVMAqpYPX8SpBuj3DMwuunN41QBB1Qsj
q3gSb1Lp+lFvjXpXvvFHY8jLWueaamssf1ZuMkejaiqKpEgKi2BEa0AanzkRAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUgltF3bc9CG9xYQXPidr7mRHdk9IwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqiSDANBgkqhkiG9w0BAQsFAAOCAQEATXIO
Xq3lgTFg4jFSi9xM8sOmDglD583Z7otZpF1csPAuRpSfc9Cxh3gBJdcNqHid9Bbn
ADiMzcHKMRtu4ecIw/Yf8TaGkUaLkwYKvJ0d1bPlrax2Kada82DhYhIouCm5byRt
cZbj5B09ptXoY1THmOO3rpNXQWdojUg/o8ipVZ5HmWuakllPP+ssFgQZ/mC3Xgw9
bw7+s0Wb0/WNRXCcAQ81oNH37iTHENkG1BBv8SfF7xyO7+FJrJqHpLp1yEw/H7IQ
QGYFjqmf04JCmWI8M+kiGCG7mFlTDucJWHwtsU44vwJAk63lWmmcalXndXdsmYX/
k2kMpg+lETla82+lWw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:59 2026 by rpki-client