Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143286.roa
File: AS143286.roa (raw, json)
Hash identifier: RoxCrfkWXjw7xKTGzXUvV5kOBRpIu8Ek4sAk63UstkI=
Subject key identifier: 7D:15:22:6B:AC:56:0E:18:46:D4:67:16:81:7D:4C:1F:E0:81:1F:99
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4A870B502C2209CA261A7ECC011CC6B7D552A34A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143286.roa
Signing time: Fri 22 May 2026 06:46:24 +0000
ROA not before: Fri 22 May 2026 06:41:24 +0000
ROA not after: Fri 21 May 2027 06:46:24 +0000
asID: 143286
IP address blocks: 240a:a27c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:87:0b:50:2c:22:09:ca:26:1a:7e:cc:01:1c:c6:b7:d5:52:a3:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:24 2026 GMT
Not After : May 21 06:46:24 2027 GMT
Subject: CN=7D15226BAC560E1846D46716817D4C1FE0811F99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c7:31:34:78:9e:d4:e1:57:eb:08:3a:d0:45:
4c:10:3a:d4:0f:21:b3:70:63:10:90:8f:d6:7e:88:
8a:cd:ef:bc:4f:f7:ee:2b:c3:50:d8:2b:e3:c8:0c:
83:e3:86:30:86:53:e0:fd:27:d5:70:f4:50:a1:9b:
82:66:09:3a:58:61:3c:c7:23:ff:34:88:5d:12:6e:
f7:b6:b0:9f:da:93:06:6a:ff:f8:70:c3:62:8d:25:
b7:21:0f:b6:ef:6b:4b:04:70:7b:f7:04:fb:6c:3f:
b2:f7:41:f9:99:b8:35:d3:db:82:ee:65:06:0a:24:
bd:c8:00:62:3d:fd:05:71:81:16:da:db:3a:e5:f1:
80:4b:be:75:9b:5f:3f:b2:41:15:d9:9c:12:ac:07:
58:cb:61:13:a6:03:a6:47:26:6a:37:41:70:92:3e:
21:58:bf:41:ca:a9:a5:e9:4c:05:41:b9:bd:86:91:
15:41:89:16:cd:c1:ce:8c:55:9b:09:eb:0d:69:5b:
12:44:e4:f9:7f:8c:ff:65:da:ae:21:cd:88:e3:65:
79:78:31:92:c8:c6:7e:6b:1d:0a:b6:0e:a1:f7:27:
65:73:53:5d:22:7f:85:08:90:9e:1e:bf:6a:38:24:
f8:31:17:62:e7:d8:98:69:36:25:21:a2:3d:56:7d:
cc:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:15:22:6B:AC:56:0E:18:46:D4:67:16:81:7D:4C:1F:E0:81:1F:99
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143286.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a27c::/32
Signature Algorithm: sha256WithRSAEncryption
57:f8:90:21:13:6c:fa:0a:d1:a1:b9:f3:c0:e1:b7:a4:04:21:
b1:1f:f9:19:e0:d7:3b:e5:2f:63:76:ee:e5:40:95:d7:55:62:
1d:48:9b:fe:1c:63:85:b0:68:46:38:21:40:38:9e:67:76:b2:
28:41:3f:39:db:53:41:20:14:54:58:48:4f:ac:0f:db:b4:d1:
f3:4d:0b:39:83:55:d4:2a:14:65:f9:44:64:46:e8:95:36:fb:
8f:76:70:d1:a4:43:a6:4a:7e:3e:c4:df:87:17:83:25:c1:27:
1b:87:29:81:bf:89:ae:ab:15:de:b4:fc:6f:68:1f:97:ed:dc:
03:1f:3c:7b:c0:91:69:99:15:73:32:f1:59:fd:84:78:09:db:
98:d4:1c:4e:f3:2a:60:94:73:b6:9c:c2:97:3d:56:fa:42:0e:
a8:2c:76:7e:63:db:e5:d0:d8:80:7b:4a:3c:94:66:5e:ce:fd:
76:e3:61:0d:d2:2b:b1:55:16:0e:d6:fe:dc:7f:c8:35:0b:8a:
d8:2f:d4:f1:04:43:44:d7:4f:77:01:a9:b0:62:84:8f:2d:d3:
5d:c8:a1:54:f6:d0:5f:13:b0:01:2e:23:f6:7f:5f:c8:d6:20:
0d:68:3b:b1:28:49:4f:bd:bf:20:0f:fa:28:da:32:ce:ca:43:
06:34:22:16
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUSocLUCwiCcomGn7MARzGt9VSo0owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjQxMjRaFw0yNzA1MjEwNjQ2MjRaMDMxMTAvBgNV
BAMTKDdEMTUyMjZCQUM1NjBFMTg0NkQ0NjcxNjgxN0Q0QzFGRTA4MTFGOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOxzE0eJ7U4VfrCDrQRUwQOtQP
IbNwYxCQj9Z+iIrN77xP9+4rw1DYK+PIDIPjhjCGU+D9J9Vw9FChm4JmCTpYYTzH
I/80iF0Sbve2sJ/akwZq//hww2KNJbchD7bva0sEcHv3BPtsP7L3QfmZuDXT24Lu
ZQYKJL3IAGI9/QVxgRba2zrl8YBLvnWbXz+yQRXZnBKsB1jLYROmA6ZHJmo3QXCS
PiFYv0HKqaXpTAVBub2GkRVBiRbNwc6MVZsJ6w1pWxJE5Pl/jP9l2q4hzYjjZXl4
MZLIxn5rHQq2DqH3J2VzU10if4UIkJ4ev2o4JPgxF2Ln2JhpNiUhoj1WfczdAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUfRUia6xWDhhG1GcWgX1MH+CBH5kwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzMjg2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqifDANBgkqhkiG9w0BAQsFAAOCAQEAV/iQ
IRNs+grRobnzwOG3pAQhsR/5GeDXO+UvY3bu5UCV11ViHUib/hxjhbBoRjghQDie
Z3ayKEE/OdtTQSAUVFhIT6wP27TR800LOYNV1CoUZflEZEbolTb7j3Zw0aRDpkp+
PsTfhxeDJcEnG4cpgb+JrqsV3rT8b2gfl+3cAx88e8CRaZkVczLxWf2EeAnbmNQc
TvMqYJRztpzClz1W+kIOqCx2fmPb5dDYgHtKPJRmXs79duNhDdIrsVUWDtb+3H/I
NQuK2C/U8QRDRNdPdwGpsGKEjy3TXcihVPbQXxOwAS4j9n9fyNYgDWg7sShJT72/
IA/6KNoyzspDBjQiFg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:34 2026 by rpki-client