Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143255.roa
File: AS143255.roa (raw, json)
Hash identifier: 5JnGa4KtZ6rQfJuBMtx+qASQbqbmYUIxP/uUD8QLfv0=
Subject key identifier: F0:E4:41:B0:B4:34:EB:CC:25:CE:53:49:37:17:C2:E7:26:8D:C6:A7
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5A4F59820EB648BE17CD7EC5E352764561B4FEA2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143255.roa
Signing time: Tue 26 May 2026 02:34:56 +0000
ROA not before: Tue 26 May 2026 02:29:56 +0000
ROA not after: Tue 25 May 2027 02:34:56 +0000
asID: 143255
IP address blocks: 240a:a25d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:4f:59:82:0e:b6:48:be:17:cd:7e:c5:e3:52:76:45:61:b4:fe:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:29:56 2026 GMT
Not After : May 25 02:34:56 2027 GMT
Subject: CN=F0E441B0B434EBCC25CE53493717C2E7268DC6A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:74:99:cc:ce:86:8a:9c:ff:0a:56:0d:91:6a:
c2:10:69:5d:8d:1b:12:43:12:4a:c1:57:f2:8e:3d:
11:b6:e1:0f:60:8b:19:20:14:d7:5e:fe:b4:19:6f:
8c:ea:01:a0:7e:59:e5:f2:55:ce:5f:a2:8b:61:65:
0f:5e:f4:f2:6d:bf:d6:d2:b0:a3:24:0d:d2:1a:cf:
79:83:20:73:1a:94:69:d1:54:70:b3:9d:55:c7:97:
64:ea:bf:78:c8:b1:a8:13:a0:9b:51:30:fd:fe:7c:
a8:c9:fa:34:d2:33:87:fb:82:cf:81:c6:01:5c:b3:
16:2d:12:31:4c:c3:01:63:e9:71:5d:eb:27:91:43:
70:65:07:f5:a2:f8:b3:fc:9c:4b:70:aa:2b:15:db:
2d:f1:17:4b:3c:60:63:b5:64:1c:55:9d:cf:83:6e:
d2:2f:9d:c7:8f:30:df:ca:11:65:fb:e3:7a:35:d0:
3d:d0:e9:70:b0:5a:ad:db:7f:27:27:a4:0b:1a:08:
3c:a4:7f:4a:0e:2b:82:8e:31:37:c7:a6:e2:e2:0f:
09:70:c7:c4:fc:1c:f4:29:a8:ef:d1:c4:c3:0c:f4:
f1:3e:fe:10:58:67:5e:ae:55:6e:d6:10:af:f4:c8:
b8:94:e9:a6:58:bc:27:37:99:87:32:1d:24:40:07:
7e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E4:41:B0:B4:34:EB:CC:25:CE:53:49:37:17:C2:E7:26:8D:C6:A7
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143255.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a25d::/32
Signature Algorithm: sha256WithRSAEncryption
59:b7:27:01:71:d8:3c:36:87:7c:e9:42:14:26:f7:e9:93:33:
e4:e1:37:ea:e2:82:5d:68:6b:e5:7e:0a:3c:58:8d:55:03:98:
fe:b6:db:89:3c:6e:92:8b:28:f8:36:e3:c9:bf:07:f5:f0:ba:
3e:d5:2a:3e:17:f8:48:e7:1d:64:11:29:dd:02:dc:07:b2:f4:
7b:c7:fc:e5:eb:e6:a3:43:83:83:8a:49:3d:ed:2d:6f:4d:9a:
35:34:64:a5:92:dd:e9:75:bf:ec:ef:ca:b7:0e:34:9e:8f:9b:
2f:da:5b:03:e5:3d:f3:14:80:5d:87:ed:ba:ef:de:bd:9b:ff:
5b:7b:71:1c:54:ba:02:59:92:41:25:74:a1:2e:2a:e1:ef:ca:
14:67:d6:51:9c:41:4c:6f:d6:a3:aa:38:64:77:1b:90:b0:6d:
50:56:42:f1:8b:22:ba:40:c1:68:9e:2a:0d:00:f4:33:b8:2b:
06:0c:6b:4f:3e:e0:6a:4b:5b:89:08:8d:b9:21:f7:72:38:12:
18:5a:ea:56:83:1e:8c:64:d2:f0:1a:1c:6b:b5:3a:4e:89:a2:
3d:dc:5a:71:a5:b3:9f:5d:b4:ab:8d:b0:3f:35:c8:66:9e:c6:
1f:41:0b:fa:75:ce:1f:80:83:be:dd:fc:d9:a9:8c:6d:17:4b:
53:83:2f:7c
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUWk9Zgg62SL4XzX7F41J2RWG0/qIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMjI5NTZaFw0yNzA1MjUwMjM0NTZaMDMxMTAvBgNV
BAMTKEYwRTQ0MUIwQjQzNEVCQ0MyNUNFNTM0OTM3MTdDMkU3MjY4REM2QTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwdJnMzoaKnP8KVg2RasIQaV2N
GxJDEkrBV/KOPRG24Q9gixkgFNde/rQZb4zqAaB+WeXyVc5foothZQ9e9PJtv9bS
sKMkDdIaz3mDIHMalGnRVHCznVXHl2Tqv3jIsagToJtRMP3+fKjJ+jTSM4f7gs+B
xgFcsxYtEjFMwwFj6XFd6yeRQ3BlB/Wi+LP8nEtwqisV2y3xF0s8YGO1ZBxVnc+D
btIvncePMN/KEWX743o10D3Q6XCwWq3bfycnpAsaCDykf0oOK4KOMTfHpuLiDwlw
x8T8HPQpqO/RxMMM9PE+/hBYZ16uVW7WEK/0yLiU6aZYvCc3mYcyHSRAB37rAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU8ORBsLQ068wlzlNJNxfC5yaNxqcwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzMjU1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqiXTANBgkqhkiG9w0BAQsFAAOCAQEAWbcn
AXHYPDaHfOlCFCb36ZMz5OE36uKCXWhr5X4KPFiNVQOY/rbbiTxukoso+Dbjyb8H
9fC6PtUqPhf4SOcdZBEp3QLcB7L0e8f85evmo0ODg4pJPe0tb02aNTRkpZLd6XW/
7O/Ktw40no+bL9pbA+U98xSAXYftuu/evZv/W3txHFS6AlmSQSV0oS4q4e/KFGfW
UZxBTG/Wo6o4ZHcbkLBtUFZC8YsiukDBaJ4qDQD0M7grBgxrTz7gaktbiQiNuSH3
cjgSGFrqVoMejGTS8Boca7U6TomiPdxacaWzn120q42wPzXIZp7GH0EL+nXOH4CD
vt382amMbRdLU4MvfA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:35 2026 by rpki-client