Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143295.roa
File: AS143295.roa (raw, json)
Hash identifier: pqDwqOA3uxDKaqDBjA4WX3pHvyLQEoPuqOQyPd9e798=
Subject key identifier: 2E:73:0B:DA:11:AE:3D:0D:08:55:AC:F2:04:67:21:15:60:83:38:40
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5AB32ABE40668B2400EE07CAAA845CB7B6485D76
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143295.roa
Signing time: Fri 22 May 2026 02:48:03 +0000
ROA not before: Fri 22 May 2026 02:43:03 +0000
ROA not after: Fri 21 May 2027 02:48:03 +0000
asID: 143295
IP address blocks: 240a:a285::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:b3:2a:be:40:66:8b:24:00:ee:07:ca:aa:84:5c:b7:b6:48:5d:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:43:03 2026 GMT
Not After : May 21 02:48:03 2027 GMT
Subject: CN=2E730BDA11AE3D0D0855ACF20467211560833840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3d:67:72:bf:18:ad:68:a8:90:bd:a7:1b:b6:
5a:c5:e6:1a:17:5a:20:10:66:63:77:73:f1:3d:b1:
97:fd:40:a9:c2:8e:20:ed:b4:ec:6f:98:9b:87:eb:
04:a6:62:a6:4e:6d:c8:2b:55:18:31:90:d8:3c:36:
86:15:2b:3e:ea:85:ed:8d:9b:56:fc:e3:d7:f7:16:
88:36:2d:fc:df:40:4d:75:65:51:7c:44:b1:27:b6:
86:e4:8f:64:52:8b:5a:e3:05:c8:17:bc:18:0f:2d:
48:d2:97:30:b9:cb:87:fa:4f:57:79:fa:87:39:61:
14:d3:cc:ff:0e:4d:53:96:0a:c3:03:68:51:f7:5e:
31:5b:1e:ae:2c:47:24:76:6b:0a:ff:59:b8:80:45:
c7:ec:28:e9:0b:b1:0f:6f:5b:58:82:36:a8:f5:61:
6a:f4:0e:c9:df:5f:10:e6:7d:00:07:54:93:66:f1:
28:ea:b3:7c:c3:7e:b2:30:3c:55:53:08:2f:a6:91:
0a:31:22:13:26:d1:bc:10:ae:d0:a1:16:21:f3:f8:
f3:93:66:d3:c7:9f:01:71:b3:a3:45:24:ab:49:33:
63:c4:a7:a5:80:0c:e5:6d:23:5e:5b:16:a1:58:df:
83:ac:e6:3e:c7:94:a8:01:aa:16:1f:3f:c3:da:10:
3a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:73:0B:DA:11:AE:3D:0D:08:55:AC:F2:04:67:21:15:60:83:38:40
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143295.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a285::/32
Signature Algorithm: sha256WithRSAEncryption
33:d9:2f:f9:cf:33:ea:06:35:f7:9d:87:aa:85:0b:55:00:eb:
f7:20:a6:1a:14:e8:f4:d2:27:34:91:3b:b6:0d:56:e2:ff:7a:
6f:32:ba:a3:c1:32:bb:bb:3d:53:60:a8:67:0a:fc:33:dc:cd:
d5:19:fb:19:41:14:4e:29:50:2f:cf:5d:65:f5:df:28:17:b1:
50:5a:08:3d:c0:4a:d9:76:53:54:a6:91:00:5f:b9:15:48:f8:
a7:d1:15:5d:dd:d0:af:68:19:fe:18:32:21:bb:b3:34:22:dc:
39:38:53:a4:87:40:c6:0a:86:4b:e8:a7:c0:96:af:0f:15:eb:
e6:05:56:3a:e2:93:4c:54:98:67:7a:3f:73:d4:ef:e9:6b:01:
c4:20:74:d0:42:7e:5d:92:14:66:69:35:fc:10:d1:bb:82:9f:
f3:27:7e:96:aa:07:43:55:6c:0b:10:fe:95:7f:a5:f7:05:ce:
98:cb:c6:c2:dd:69:89:48:75:2e:5f:f2:64:e2:ab:3b:58:06:
c2:9e:70:3c:dd:59:8d:74:80:98:c2:7c:28:15:a1:0c:01:b0:
77:47:64:d1:d5:29:7c:1b:e8:26:21:4b:f0:03:74:59:f4:fc:
2b:e4:ec:f3:5a:32:67:e1:63:97:25:9c:35:2c:d8:73:cf:b4:
dc:17:36:13
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUWrMqvkBmiyQA7gfKqoRct7ZIXXYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwMjQzMDNaFw0yNzA1MjEwMjQ4MDNaMDMxMTAvBgNV
BAMTKDJFNzMwQkRBMTFBRTNEMEQwODU1QUNGMjA0NjcyMTE1NjA4MzM4NDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgPWdyvxitaKiQvacbtlrF5hoX
WiAQZmN3c/E9sZf9QKnCjiDttOxvmJuH6wSmYqZObcgrVRgxkNg8NoYVKz7qhe2N
m1b849f3Fog2LfzfQE11ZVF8RLEntobkj2RSi1rjBcgXvBgPLUjSlzC5y4f6T1d5
+oc5YRTTzP8OTVOWCsMDaFH3XjFbHq4sRyR2awr/WbiARcfsKOkLsQ9vW1iCNqj1
YWr0DsnfXxDmfQAHVJNm8Sjqs3zDfrIwPFVTCC+mkQoxIhMm0bwQrtChFiHz+POT
ZtPHnwFxs6NFJKtJM2PEp6WADOVtI15bFqFY34Os5j7HlKgBqhYfP8PaEDoJAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQULnML2hGuPQ0IVazyBGchFWCDOEAwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzMjk1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqihTANBgkqhkiG9w0BAQsFAAOCAQEAM9kv
+c8z6gY1952HqoULVQDr9yCmGhTo9NInNJE7tg1W4v96bzK6o8Eyu7s9U2CoZwr8
M9zN1Rn7GUEUTilQL89dZfXfKBexUFoIPcBK2XZTVKaRAF+5FUj4p9EVXd3Qr2gZ
/hgyIbuzNCLcOThTpIdAxgqGS+inwJavDxXr5gVWOuKTTFSYZ3o/c9Tv6WsBxCB0
0EJ+XZIUZmk1/BDRu4Kf8yd+lqoHQ1VsCxD+lX+l9wXOmMvGwt1piUh1Ll/yZOKr
O1gGwp5wPN1ZjXSAmMJ8KBWhDAGwd0dk0dUpfBvoJiFL8AN0WfT8K+Ts81oyZ+Fj
lyWcNSzYc8+03Bc2Ew==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:56 2026 by rpki-client