Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143271.roa
File: AS143271.roa (raw, json)
Hash identifier: uDa5dfbIUCoibTsGvkUVYqONpBN1gqlMJAQXW/Sz/30=
Subject key identifier: 4F:12:12:93:ED:B2:5E:D0:FC:A3:75:9A:90:07:C5:E9:FC:38:DC:57
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 41A473FF48C04B1462008929C0B78814450582C9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143271.roa
Signing time: Fri 22 May 2026 04:27:06 +0000
ROA not before: Fri 22 May 2026 04:22:06 +0000
ROA not after: Fri 21 May 2027 04:27:06 +0000
asID: 143271
IP address blocks: 240a:a26d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:a4:73:ff:48:c0:4b:14:62:00:89:29:c0:b7:88:14:45:05:82:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:22:06 2026 GMT
Not After : May 21 04:27:06 2027 GMT
Subject: CN=4F121293EDB25ED0FCA3759A9007C5E9FC38DC57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:06:5f:50:04:87:86:f5:24:d2:2f:ca:8d:9f:
66:05:35:3e:d5:44:2b:fc:4b:ee:b8:5f:15:62:c0:
05:bf:6c:d0:5e:82:78:9f:f1:da:21:e1:66:f1:59:
b7:fa:0f:69:c7:be:67:71:98:a0:54:3f:be:28:a5:
8f:d2:af:f9:dd:a6:11:2b:8f:28:32:b9:c7:7c:a0:
1f:95:63:b5:1a:93:39:45:da:83:de:35:df:46:18:
a0:f9:a7:f4:2d:fb:93:c3:01:96:91:6f:42:2f:10:
65:43:c1:89:55:4e:27:bf:fc:7e:a1:31:ad:9c:1f:
0d:18:7c:a9:19:ae:82:8e:3a:91:6d:a2:a0:6b:28:
49:c5:92:d7:d7:2d:8f:58:03:ca:6c:ee:d2:53:8c:
ed:43:dd:87:08:44:14:cc:4a:0d:c1:c5:71:ed:de:
3c:d2:74:ee:6b:7f:3d:23:f8:1a:72:cd:ca:1c:ce:
91:64:0a:27:2d:e6:0a:b6:2d:72:61:9e:fe:87:aa:
b9:27:cf:63:85:71:a8:c3:e3:24:4f:d4:51:91:c0:
f8:a1:d9:24:6d:7c:ac:ea:a7:e0:58:88:98:fa:0c:
0c:06:45:3c:7c:8f:b7:8e:1b:83:32:d3:fb:26:d2:
d9:8f:b9:33:89:ac:e6:a4:67:2a:d1:15:3f:b3:97:
1a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:12:12:93:ED:B2:5E:D0:FC:A3:75:9A:90:07:C5:E9:FC:38:DC:57
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143271.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a26d::/32
Signature Algorithm: sha256WithRSAEncryption
2c:2d:60:7e:c0:c6:2b:48:e7:90:87:7a:a9:09:3b:fb:4a:15:
5d:b5:64:78:ae:7a:d9:59:33:99:12:b2:72:bc:df:ad:8d:04:
a9:de:7e:bc:28:96:51:02:ed:8a:9c:b7:a1:74:ee:72:54:e6:
d5:59:cb:ed:58:e4:e6:59:2a:81:8a:b3:74:62:eb:cd:4b:d7:
0f:59:68:86:4a:7c:f7:87:54:da:d0:24:fd:c5:6c:ec:7f:53:
94:2a:bf:bd:84:96:d3:a4:d6:0f:0b:b4:48:d6:4d:07:fe:c1:
4f:fd:e2:b5:ab:ce:cd:46:d1:bf:f6:b9:11:c0:e3:8e:5b:6d:
b7:56:0a:37:23:90:e3:7e:60:71:f3:4d:1c:a8:93:8e:38:49:
84:59:73:70:b7:f9:7c:e3:7d:8a:ad:86:94:94:29:9c:d0:10:
73:d9:ea:af:f2:9b:33:14:40:aa:89:fa:d2:1a:ec:d7:00:6e:
3a:a0:8f:6c:ed:80:8c:4b:b8:d5:27:3b:3d:e2:c3:59:21:15:
34:46:df:ba:73:11:5b:a6:59:b3:e7:40:90:66:7a:a1:4b:56:
e4:05:69:e5:b2:6d:6d:3c:6f:e1:10:7b:dd:b4:f6:9d:7a:37:
eb:d1:e6:34:f3:31:e5:3c:9c:be:2e:c1:c0:9d:18:fb:95:35:
a6:5b:f8:90
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUQaRz/0jASxRiAIkpwLeIFEUFgskwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNDIyMDZaFw0yNzA1MjEwNDI3MDZaMDMxMTAvBgNV
BAMTKDRGMTIxMjkzRURCMjVFRDBGQ0EzNzU5QTkwMDdDNUU5RkMzOERDNTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpBl9QBIeG9STSL8qNn2YFNT7V
RCv8S+64XxViwAW/bNBegnif8doh4WbxWbf6D2nHvmdxmKBUP74opY/Sr/ndphEr
jygyucd8oB+VY7UakzlF2oPeNd9GGKD5p/Qt+5PDAZaRb0IvEGVDwYlVTie//H6h
Ma2cHw0YfKkZroKOOpFtoqBrKEnFktfXLY9YA8ps7tJTjO1D3YcIRBTMSg3BxXHt
3jzSdO5rfz0j+BpyzcoczpFkCict5gq2LXJhnv6Hqrknz2OFcajD4yRP1FGRwPih
2SRtfKzqp+BYiJj6DAwGRTx8j7eOG4My0/sm0tmPuTOJrOakZyrRFT+zlxqXAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUTxISk+2yXtD8o3WakAfF6fw43FcwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzMjcxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqibTANBgkqhkiG9w0BAQsFAAOCAQEALC1g
fsDGK0jnkId6qQk7+0oVXbVkeK562VkzmRKycrzfrY0Eqd5+vCiWUQLtipy3oXTu
clTm1VnL7Vjk5lkqgYqzdGLrzUvXD1lohkp894dU2tAk/cVs7H9TlCq/vYSW06TW
Dwu0SNZNB/7BT/3itavOzUbRv/a5EcDjjlttt1YKNyOQ435gcfNNHKiTjjhJhFlz
cLf5fON9iq2GlJQpnNAQc9nqr/KbMxRAqon60hrs1wBuOqCPbO2AjEu41Sc7PeLD
WSEVNEbfunMRW6ZZs+dAkGZ6oUtW5AVp5bJtbTxv4RB73bT2nXo369HmNPMx5Tyc
vi7BwJ0Y+5U1plv4kA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:32 2026 by rpki-client