Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143247.roa
File: AS143247.roa (raw, json)
Hash identifier: ZF2oeKhisDyiY2cEQ9ebOoTbTwNwyPWI4pDfuhqqw/I=
Subject key identifier: 1A:2B:56:F2:E9:D2:3A:8A:98:28:92:EA:E8:77:99:B9:CD:07:A9:E3
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5113D0DC7076569226D996D781931A5E849C490C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143247.roa
Signing time: Mon 25 May 2026 06:28:31 +0000
ROA not before: Mon 25 May 2026 06:23:31 +0000
ROA not after: Mon 24 May 2027 06:28:31 +0000
asID: 143247
IP address blocks: 240a:a255::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:13:d0:dc:70:76:56:92:26:d9:96:d7:81:93:1a:5e:84:9c:49:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:31 2026 GMT
Not After : May 24 06:28:31 2027 GMT
Subject: CN=1A2B56F2E9D23A8A982892EAE87799B9CD07A9E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1f:da:ef:3b:ce:07:ea:7d:59:9e:ee:45:37:
a2:3a:85:f1:5a:e0:45:e5:06:f6:b9:e3:e0:93:e2:
9c:b1:90:ac:f2:65:f6:7b:1f:2f:15:23:72:95:ef:
ab:da:d3:56:42:7a:5b:ed:a8:55:15:3f:1a:a1:b3:
f8:bc:21:f1:57:37:9a:7b:6f:88:1a:90:38:b3:65:
6f:4b:7c:d7:72:29:fd:ec:ef:d3:c8:24:1a:72:34:
7b:ef:00:04:a4:14:3c:0a:ee:3b:44:ad:72:ca:e1:
e1:55:b5:07:df:bd:ea:a8:a1:54:76:51:75:48:31:
da:9c:f3:9b:6a:00:11:74:5c:5c:37:df:c2:1d:08:
73:61:1d:5c:c4:b6:79:b6:a0:b5:bd:3b:fc:55:46:
a6:7b:a6:89:1e:7f:24:de:d9:87:e5:55:36:f4:45:
53:cf:4b:58:f5:f9:0a:c9:ea:dc:66:45:74:50:38:
02:09:c2:94:8d:40:1c:e5:c7:b0:07:e3:bf:c1:a9:
80:87:3a:1a:2d:0a:9a:c0:08:d9:4e:95:6c:c2:36:
96:d0:bc:19:b3:7b:f5:6f:13:b5:71:d8:c0:36:39:
85:b5:ad:10:e2:5c:30:c7:2f:2f:e7:43:d9:be:58:
c5:78:0e:6c:c8:e2:f9:81:46:9f:6d:9d:75:16:c8:
39:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:2B:56:F2:E9:D2:3A:8A:98:28:92:EA:E8:77:99:B9:CD:07:A9:E3
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143247.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a255::/32
Signature Algorithm: sha256WithRSAEncryption
bb:a6:2b:47:38:ba:ef:d6:7c:41:e4:81:74:51:af:0b:73:0b:
30:b2:e1:6a:db:97:1a:f3:65:1b:3a:1b:44:35:54:07:bb:89:
04:5c:1c:3c:44:46:bc:6c:20:2c:a8:00:57:78:be:95:de:20:
e0:1c:b9:d7:9f:a5:5c:e8:d1:49:33:18:c5:47:0d:35:c0:80:
8f:16:cb:57:75:8f:57:7c:4d:ac:29:7e:1d:bb:cc:88:61:f1:
16:09:77:a9:00:a7:80:8b:aa:81:0a:38:ab:b1:00:d2:9a:23:
c0:c6:6e:ed:17:0e:3c:32:f3:46:be:59:dd:c4:50:0d:8d:02:
79:26:29:7d:27:09:f5:0b:87:5d:3f:a4:80:08:c7:f4:6f:43:
a4:b1:cb:4f:b6:a7:cd:2e:d2:18:c3:a6:12:f9:5a:c0:a2:62:
07:b9:5f:7a:78:91:32:ad:ef:96:f5:94:a9:f4:d4:df:fb:25:
4f:6f:87:58:96:c7:1b:ce:a2:c3:0e:ba:fe:6d:0c:08:d6:ec:
dd:73:35:20:b7:39:3d:3a:42:c1:6e:47:20:69:20:6b:9f:71:
ff:32:7b:34:01:01:c7:31:f7:f1:51:66:79:b6:5c:69:a0:28:
7f:65:e9:56:49:3f:53:2c:47:18:7e:21:06:ae:a1:f3:b7:6d:
b6:b1:61:1e
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUURPQ3HB2VpIm2ZbXgZMaXoScSQwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwNjIzMzFaFw0yNzA1MjQwNjI4MzFaMDMxMTAvBgNV
BAMTKDFBMkI1NkYyRTlEMjNBOEE5ODI4OTJFQUU4Nzc5OUI5Q0QwN0E5RTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYH9rvO84H6n1Znu5FN6I6hfFa
4EXlBva54+CT4pyxkKzyZfZ7Hy8VI3KV76va01ZCelvtqFUVPxqhs/i8IfFXN5p7
b4gakDizZW9LfNdyKf3s79PIJBpyNHvvAASkFDwK7jtErXLK4eFVtQffveqooVR2
UXVIMdqc85tqABF0XFw338IdCHNhHVzEtnm2oLW9O/xVRqZ7pokefyTe2YflVTb0
RVPPS1j1+QrJ6txmRXRQOAIJwpSNQBzlx7AH47/BqYCHOhotCprACNlOlWzCNpbQ
vBmze/VvE7Vx2MA2OYW1rRDiXDDHLy/nQ9m+WMV4DmzI4vmBRp9tnXUWyDmHAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUGitW8unSOoqYKJLq6HeZuc0HqeMwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzMjQ3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqiVTANBgkqhkiG9w0BAQsFAAOCAQEAu6Yr
Rzi679Z8QeSBdFGvC3MLMLLhatuXGvNlGzobRDVUB7uJBFwcPERGvGwgLKgAV3i+
ld4g4By515+lXOjRSTMYxUcNNcCAjxbLV3WPV3xNrCl+HbvMiGHxFgl3qQCngIuq
gQo4q7EA0pojwMZu7RcOPDLzRr5Z3cRQDY0CeSYpfScJ9QuHXT+kgAjH9G9DpLHL
T7anzS7SGMOmEvlawKJiB7lfeniRMq3vlvWUqfTU3/slT2+HWJbHG86iww66/m0M
CNbs3XM1ILc5PTpCwW5HIGkga59x/zJ7NAEBxzH38VFmebZcaaAof2XpVkk/UyxH
GH4hBq6h87dttrFhHg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:07 2026 by rpki-client