Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143316.roa
File: AS143316.roa (raw, json)
Hash identifier: bqieZfm0uYzmPvFXq+3JhddK+CfKjF4I+Eg87Ox8QQU=
Subject key identifier: 59:A0:7C:B3:E3:20:2C:F5:FF:85:9D:8B:01:87:F7:5F:B9:E5:E2:C2
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4E70D4D060FA948647ECB35851E6E47C5DB0E152
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143316.roa
Signing time: Fri 22 May 2026 06:27:57 +0000
ROA not before: Fri 22 May 2026 06:22:57 +0000
ROA not after: Fri 21 May 2027 06:27:57 +0000
asID: 143316
IP address blocks: 240a:a29a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:70:d4:d0:60:fa:94:86:47:ec:b3:58:51:e6:e4:7c:5d:b0:e1:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:22:57 2026 GMT
Not After : May 21 06:27:57 2027 GMT
Subject: CN=59A07CB3E3202CF5FF859D8B0187F75FB9E5E2C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d7:7b:8f:a4:13:1b:ac:7a:78:de:20:7a:e4:
c6:c5:f1:6d:bb:9e:9f:27:93:e7:17:6f:ac:02:eb:
c5:fe:ef:80:39:e6:5c:4f:e1:77:9b:71:51:45:fa:
7c:77:18:44:b2:fb:03:92:41:e0:83:f5:90:03:37:
57:d1:b8:c8:9c:01:9f:4a:d5:19:5c:e3:c3:1d:68:
c1:0e:bd:25:98:5b:1e:1d:30:c6:a2:f7:8d:80:0e:
4b:e8:ca:04:63:c2:bc:16:90:3d:19:e6:d0:dd:17:
8e:11:3a:bb:5b:2e:e2:ce:b5:5d:5c:41:07:a3:39:
ef:63:2a:4f:30:a4:bd:82:59:12:92:81:89:f5:0e:
2f:d4:91:b4:59:14:a4:d8:73:5e:85:1f:1e:69:42:
c3:34:49:b3:d4:cc:63:2e:66:c0:ac:bd:8b:9b:8f:
74:22:81:cb:7c:7e:63:1b:78:99:f5:95:54:93:3b:
74:ad:f2:65:98:e2:a3:84:2f:6b:f7:ea:1f:05:5f:
ed:8b:25:62:7e:a6:e1:85:77:c2:6b:17:04:f4:ea:
e6:80:25:73:37:5c:06:28:9c:f3:41:c7:2b:73:58:
33:54:0b:e5:27:ac:f0:d4:98:0a:41:50:95:cf:bd:
bd:0a:91:67:29:d3:4e:d5:d1:62:53:fa:82:db:e9:
e9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A0:7C:B3:E3:20:2C:F5:FF:85:9D:8B:01:87:F7:5F:B9:E5:E2:C2
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143316.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a29a::/32
Signature Algorithm: sha256WithRSAEncryption
64:0a:c0:2b:27:c8:75:ee:37:8d:fb:8e:08:ff:18:c5:a2:9d:
71:14:0b:0e:b3:9f:0f:52:1d:0b:bc:c9:6b:b1:a3:90:83:28:
60:81:0f:37:4b:d7:90:f5:0a:72:47:8a:0b:21:8b:e3:73:46:
94:95:ae:08:42:57:9a:d6:8d:31:18:9c:6e:92:20:8a:a8:a1:
cd:06:fa:6e:dc:6b:71:93:8a:6d:4f:c0:e9:5a:bf:cb:fc:93:
2a:3f:66:2e:7b:61:fa:b5:8e:70:9d:29:dd:37:43:e4:b5:a0:
54:88:95:9b:18:9b:7c:12:92:db:82:67:a0:a4:7d:3a:aa:b2:
8a:be:55:c2:30:65:33:e2:ce:27:08:bf:81:c3:cc:aa:b5:71:
a0:bb:13:9c:b4:5a:42:a2:7e:60:a6:b8:38:ae:64:6f:16:b3:
dc:ec:85:f6:f7:d5:ff:1e:e6:5e:4c:6e:75:c6:9b:77:5d:76:
0c:cc:7b:db:c6:1a:bd:44:6b:07:6c:ce:5d:14:ad:3e:63:e4:
6f:5d:70:3f:67:52:83:a2:14:98:1e:e9:28:c9:cf:91:b0:3a:
3a:18:2d:f4:c8:ed:2d:50:85:ea:cc:0d:91:26:cb:ab:79:b5:
21:08:36:c0:3c:b1:35:d2:d8:bf:7b:77:31:d5:4d:f1:5a:ce:
23:37:91:25
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUTnDU0GD6lIZH7LNYUebkfF2w4VIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjIyNTdaFw0yNzA1MjEwNjI3NTdaMDMxMTAvBgNV
BAMTKDU5QTA3Q0IzRTMyMDJDRjVGRjg1OUQ4QjAxODdGNzVGQjlFNUUyQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf13uPpBMbrHp43iB65MbF8W27
np8nk+cXb6wC68X+74A55lxP4XebcVFF+nx3GESy+wOSQeCD9ZADN1fRuMicAZ9K
1Rlc48MdaMEOvSWYWx4dMMai942ADkvoygRjwrwWkD0Z5tDdF44ROrtbLuLOtV1c
QQejOe9jKk8wpL2CWRKSgYn1Di/UkbRZFKTYc16FHx5pQsM0SbPUzGMuZsCsvYub
j3Qigct8fmMbeJn1lVSTO3St8mWY4qOEL2v36h8FX+2LJWJ+puGFd8JrFwT06uaA
JXM3XAYonPNBxytzWDNUC+UnrPDUmApBUJXPvb0KkWcp007V0WJT+oLb6emHAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUWaB8s+MgLPX/hZ2LAYf3X7nl4sIwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzMzE2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqimjANBgkqhkiG9w0BAQsFAAOCAQEAZArA
KyfIde43jfuOCP8YxaKdcRQLDrOfD1IdC7zJa7GjkIMoYIEPN0vXkPUKckeKCyGL
43NGlJWuCEJXmtaNMRicbpIgiqihzQb6btxrcZOKbU/A6Vq/y/yTKj9mLnth+rWO
cJ0p3TdD5LWgVIiVmxibfBKS24JnoKR9Oqqyir5VwjBlM+LOJwi/gcPMqrVxoLsT
nLRaQqJ+YKa4OK5kbxaz3OyF9vfV/x7mXkxudcabd112DMx728YavURrB2zOXRSt
PmPkb11wP2dSg6IUmB7pKMnPkbA6Ohgt9MjtLVCF6swNkSbLq3m1IQg2wDyxNdLY
v3t3MdVN8VrOIzeRJQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:12 2026 by rpki-client