Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143254.roa
File: AS143254.roa (raw, json)
Hash identifier: F5fjKoLqFmSyGfOoRAX3+O6rjd+/eeODbG+pZToizCk=
Subject key identifier: 0D:99:A1:98:89:5E:EB:98:00:06:70:6C:2C:1F:C2:B2:46:E9:1F:6F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 71BADF087444C5F05B60DB11CCA0C7D315588CB9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143254.roa
Signing time: Mon 25 May 2026 06:28:27 +0000
ROA not before: Mon 25 May 2026 06:23:27 +0000
ROA not after: Mon 24 May 2027 06:28:27 +0000
asID: 143254
IP address blocks: 240a:a25c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:ba:df:08:74:44:c5:f0:5b:60:db:11:cc:a0:c7:d3:15:58:8c:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:27 2026 GMT
Not After : May 24 06:28:27 2027 GMT
Subject: CN=0D99A198895EEB980006706C2C1FC2B246E91F6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:78:dd:d1:0d:6e:6d:31:01:88:be:39:97:12:
dc:35:3f:63:25:ce:a8:d3:c8:a9:bc:93:16:5a:5c:
66:c9:d4:38:a9:a1:0a:94:da:be:61:1b:0f:da:fb:
45:66:a9:f8:6c:24:d6:63:56:02:c9:72:99:3e:ab:
91:c7:a3:88:9e:61:3d:e7:41:7f:66:15:58:33:5e:
66:9e:49:02:d1:b9:ef:62:fd:e0:65:8b:05:ac:af:
69:08:d6:d8:fd:f2:1e:5e:ed:e7:5a:23:7a:82:6b:
af:fe:1b:75:71:82:fe:63:97:fb:d4:20:85:e8:f2:
30:5a:c9:5e:fb:8e:05:64:f5:3d:8f:39:b8:ee:a9:
7c:43:1e:14:5e:97:7d:23:0b:82:b3:56:e8:c9:53:
8a:f6:74:58:52:2b:d8:98:d6:04:8d:46:63:90:1b:
0a:24:9c:be:8f:5a:b4:9a:bf:f5:95:87:d9:ce:d1:
92:26:35:cd:09:53:0e:63:ac:a7:5b:f0:8a:2b:66:
96:f8:ab:0f:e0:da:a0:30:4b:10:14:2b:c2:59:99:
02:db:23:23:fe:86:2d:98:0d:3f:a4:b0:e2:75:78:
1d:e5:02:75:13:b4:fa:35:00:94:da:bc:48:28:67:
a5:29:94:63:29:f4:d4:7a:eb:4b:23:bf:e2:6a:39:
99:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:99:A1:98:89:5E:EB:98:00:06:70:6C:2C:1F:C2:B2:46:E9:1F:6F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143254.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a25c::/32
Signature Algorithm: sha256WithRSAEncryption
3a:6e:60:b3:66:47:41:03:9e:d5:6b:c1:7e:0f:d1:d9:04:f8:
04:83:57:b2:68:57:00:af:74:64:7a:ed:f9:b2:e6:78:5e:f4:
ad:40:05:0c:ad:cd:97:cd:12:04:24:9f:e3:99:3b:4a:b9:8c:
02:72:01:99:cb:5a:7b:15:46:be:a0:ca:59:34:c3:39:31:90:
f0:38:5d:3a:af:86:3b:3e:67:78:cd:0b:c3:40:0f:95:1f:73:
81:d8:77:38:37:05:6c:5b:63:db:7d:4e:5e:2b:c6:2e:af:ee:
ff:be:79:1d:36:ec:3a:67:22:89:d5:a0:27:a3:d7:b1:6a:5b:
a6:7a:71:c5:cc:a2:e3:14:34:e5:21:0f:13:a5:56:2e:82:03:
fa:03:41:0f:83:ac:9e:bf:56:61:ef:ef:c5:c0:a0:59:64:fc:
19:64:a0:14:0d:03:72:94:fd:d7:e4:83:ab:d5:0b:5e:60:3c:
22:15:80:ce:86:36:2d:c5:5f:a2:2a:c2:8c:e6:54:e1:c4:39:
17:e0:d5:5d:89:62:bb:10:92:2a:a4:65:7e:99:bb:6a:5b:7d:
99:a9:cd:99:99:8e:6e:d2:60:c2:3f:fe:a3:1b:81:c8:34:c7:
6e:6e:91:e8:8c:07:64:bf:44:36:b5:c8:43:8a:95:4a:06:28:
61:bd:d0:fa
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUcbrfCHRExfBbYNsRzKDH0xVYjLkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwNjIzMjdaFw0yNzA1MjQwNjI4MjdaMDMxMTAvBgNV
BAMTKDBEOTlBMTk4ODk1RUVCOTgwMDA2NzA2QzJDMUZDMkIyNDZFOTFGNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6eN3RDW5tMQGIvjmXEtw1P2Ml
zqjTyKm8kxZaXGbJ1DipoQqU2r5hGw/a+0VmqfhsJNZjVgLJcpk+q5HHo4ieYT3n
QX9mFVgzXmaeSQLRue9i/eBliwWsr2kI1tj98h5e7edaI3qCa6/+G3Vxgv5jl/vU
IIXo8jBayV77jgVk9T2PObjuqXxDHhRel30jC4KzVujJU4r2dFhSK9iY1gSNRmOQ
GwoknL6PWrSav/WVh9nO0ZImNc0JUw5jrKdb8IorZpb4qw/g2qAwSxAUK8JZmQLb
IyP+hi2YDT+ksOJ1eB3lAnUTtPo1AJTavEgoZ6UplGMp9NR660sjv+JqOZlhAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUDZmhmIle65gABnBsLB/CskbpH28wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzMjU0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqiXDANBgkqhkiG9w0BAQsFAAOCAQEAOm5g
s2ZHQQOe1WvBfg/R2QT4BINXsmhXAK90ZHrt+bLmeF70rUAFDK3Nl80SBCSf45k7
SrmMAnIBmctaexVGvqDKWTTDOTGQ8DhdOq+GOz5neM0Lw0APlR9zgdh3ODcFbFtj
231OXivGLq/u/755HTbsOmciidWgJ6PXsWpbpnpxxcyi4xQ05SEPE6VWLoID+gNB
D4Osnr9WYe/vxcCgWWT8GWSgFA0DcpT91+SDq9ULXmA8IhWAzoY2LcVfoirCjOZU
4cQ5F+DVXYliuxCSKqRlfpm7alt9manNmZmObtJgwj/+oxuByDTHbm6R6IwHZL9E
NrXIQ4qVSgYoYb3Q+g==
-----END CERTIFICATE-----
Generated at Wed Jun 17 11:24:36 2026 by rpki-client