Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143253.roa
File: AS143253.roa (raw, json)
Hash identifier: Y1FsbqRhvXcCLVE1M1o35itGzYhXCmCUoDJgkmr1gME=
Subject key identifier: A7:AB:7F:1B:1C:B4:E8:B0:67:98:75:46:EC:03:BA:28:BB:BC:D6:BD
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0D10D277321E8908814A19ABF5B33068634EBBDB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143253.roa
Signing time: Fri 22 May 2026 06:05:15 +0000
ROA not before: Fri 22 May 2026 06:00:15 +0000
ROA not after: Fri 21 May 2027 06:05:15 +0000
asID: 143253
IP address blocks: 240a:a25b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:10:d2:77:32:1e:89:08:81:4a:19:ab:f5:b3:30:68:63:4e:bb:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:15 2026 GMT
Not After : May 21 06:05:15 2027 GMT
Subject: CN=A7AB7F1B1CB4E8B067987546EC03BA28BBBCD6BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6a:0f:f2:9c:5c:6a:08:4a:14:ca:9d:a2:33:
e6:ad:29:1f:9f:cd:c8:85:96:bb:5d:c4:27:cf:ca:
a9:db:9c:7f:98:47:32:7c:13:72:00:92:bf:ee:78:
7d:b6:37:58:50:3d:bd:d4:d1:b0:87:3f:1c:a2:8a:
d6:e3:09:06:87:2b:c0:2f:d1:a6:06:0d:c2:2a:c6:
a8:b7:28:b5:b7:df:26:32:ac:6d:41:89:3b:81:35:
35:0b:b1:e4:c4:1f:a2:c5:ab:c0:16:4d:24:14:db:
d7:13:1d:22:be:dc:eb:b9:35:a0:bb:69:33:c5:42:
b1:d6:bc:7f:99:0f:fe:03:e6:73:4a:a6:29:14:7d:
42:10:7d:fc:74:f3:78:8e:f3:4c:74:37:7f:6f:60:
a9:d2:a2:cb:9f:3f:35:3a:d7:ee:8c:ff:b1:cb:d7:
80:28:8e:ce:4f:fd:7c:0f:aa:72:fd:c0:4f:f9:63:
7f:a9:6b:cc:27:96:00:f7:4a:4f:aa:22:f2:0f:44:
52:a8:1f:1e:e3:53:3d:c2:1e:08:48:73:6c:97:80:
79:7a:c2:10:72:ce:a3:d1:09:98:1c:ab:50:7f:c7:
c8:fd:20:cb:3c:c6:34:66:3d:ce:97:7a:97:f1:47:
3c:52:88:fd:a2:b1:f9:1b:30:bd:4c:af:c7:25:46:
4a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:AB:7F:1B:1C:B4:E8:B0:67:98:75:46:EC:03:BA:28:BB:BC:D6:BD
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143253.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a25b::/32
Signature Algorithm: sha256WithRSAEncryption
93:fd:a6:4f:96:b4:e1:05:53:df:15:3d:c5:a1:4f:28:86:23:
8a:75:ab:88:6b:d5:2c:70:e3:fa:38:f3:49:5b:24:24:1e:c3:
21:f5:f7:11:21:15:3a:b9:b6:70:c1:6a:df:cd:f1:f6:2a:0f:
4d:28:e7:5c:76:fb:e9:9a:04:ff:25:85:3d:b4:79:ac:34:e4:
7d:6a:5e:6f:d1:a9:5c:1d:05:f6:d4:ce:91:d4:da:52:2b:b5:
83:99:47:30:b7:22:24:0b:28:63:8d:d3:09:f0:4d:1e:bf:4c:
96:f3:34:69:57:47:7d:35:4a:0a:5a:b4:b0:60:56:d6:96:8a:
c7:7c:d6:74:42:bd:99:52:1f:c5:69:d8:07:75:37:22:48:05:
90:94:2f:9f:f4:91:85:a4:7f:28:73:41:ca:66:69:60:41:c0:
67:f6:76:76:e8:be:bd:8e:74:87:1b:9b:46:97:ef:8c:d4:6c:
f0:aa:55:8b:af:f7:81:d3:1a:62:7c:39:a1:c2:5b:ca:64:0f:
19:77:83:3a:70:9d:14:3d:6c:ad:38:55:7e:e6:79:73:c3:be:
cb:4e:9c:49:14:c5:8e:85:03:1b:9d:ec:bd:63:da:6e:0a:74:
ec:94:43:92:e0:05:11:21:59:81:2e:8f:34:75:24:61:1f:db:
d9:58:61:21
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUDRDSdzIeiQiBShmr9bMwaGNOu9swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjAwMTVaFw0yNzA1MjEwNjA1MTVaMDMxMTAvBgNV
BAMTKEE3QUI3RjFCMUNCNEU4QjA2Nzk4NzU0NkVDMDNCQTI4QkJCQ0Q2QkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNag/ynFxqCEoUyp2iM+atKR+f
zciFlrtdxCfPyqnbnH+YRzJ8E3IAkr/ueH22N1hQPb3U0bCHPxyiitbjCQaHK8Av
0aYGDcIqxqi3KLW33yYyrG1BiTuBNTULseTEH6LFq8AWTSQU29cTHSK+3Ou5NaC7
aTPFQrHWvH+ZD/4D5nNKpikUfUIQffx083iO80x0N39vYKnSosufPzU61+6M/7HL
14Aojs5P/XwPqnL9wE/5Y3+pa8wnlgD3Sk+qIvIPRFKoHx7jUz3CHghIc2yXgHl6
whByzqPRCZgcq1B/x8j9IMs8xjRmPc6XepfxRzxSiP2isfkbML1Mr8clRko1AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUp6t/Gxy06LBnmHVG7AO6KLu81r0wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzMjUzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqiWzANBgkqhkiG9w0BAQsFAAOCAQEAk/2m
T5a04QVT3xU9xaFPKIYjinWriGvVLHDj+jjzSVskJB7DIfX3ESEVOrm2cMFq383x
9ioPTSjnXHb76ZoE/yWFPbR5rDTkfWpeb9GpXB0F9tTOkdTaUiu1g5lHMLciJAso
Y43TCfBNHr9MlvM0aVdHfTVKClq0sGBW1paKx3zWdEK9mVIfxWnYB3U3IkgFkJQv
n/SRhaR/KHNBymZpYEHAZ/Z2dui+vY50hxubRpfvjNRs8KpVi6/3gdMaYnw5ocJb
ymQPGXeDOnCdFD1srThVfuZ5c8O+y06cSRTFjoUDG53svWPabgp07JRDkuAFESFZ
gS6PNHUkYR/b2VhhIQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:57 2026 by rpki-client