Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143334.roa
File: AS143334.roa (raw, json)
Hash identifier: F0GzkggfzNRMxQD47fQ3N5NJKFznlwDaq16Z3TayCvo=
Subject key identifier: CD:13:2E:7D:AE:90:E9:29:62:FB:8D:F8:88:02:D1:B9:59:BB:18:53
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 27E425FD7DB434EB3A8A548B62DA461E63C4F965
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143334.roa
Signing time: Fri 22 May 2026 07:41:16 +0000
ROA not before: Fri 22 May 2026 07:36:16 +0000
ROA not after: Fri 21 May 2027 07:41:16 +0000
asID: 143334
IP address blocks: 240a:a2ac::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:e4:25:fd:7d:b4:34:eb:3a:8a:54:8b:62:da:46:1e:63:c4:f9:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:36:16 2026 GMT
Not After : May 21 07:41:16 2027 GMT
Subject: CN=CD132E7DAE90E92962FB8DF88802D1B959BB1853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:94:8b:06:93:0e:91:4b:d6:d4:17:63:ad:b9:
c3:09:3d:83:d4:df:95:db:70:91:d3:4b:ff:38:2b:
7b:6e:83:17:8a:dc:85:07:93:4c:ea:68:11:e1:f5:
dc:70:9a:2c:cf:75:47:d3:69:2d:50:bf:17:eb:15:
dc:e3:11:f0:6c:97:f5:28:69:f9:ca:bc:07:2c:de:
7d:b9:62:8d:11:40:32:91:b1:a2:87:92:f8:11:c5:
a4:18:b9:a3:7c:0c:3c:85:3c:d3:55:34:42:52:64:
77:ed:c6:06:f9:99:64:dc:3e:b2:c7:95:00:db:77:
1d:16:0d:b4:20:48:98:d2:d7:f5:ff:43:5a:09:7f:
1d:f0:37:60:a9:c8:1f:fa:75:8f:b6:d1:42:d1:da:
78:9a:67:93:a4:d4:53:75:61:ef:9c:91:68:0e:30:
39:aa:69:60:f6:0e:fb:41:8e:b9:11:73:c1:51:3e:
a4:be:0b:b5:71:36:2d:61:86:97:53:eb:ec:f3:f8:
a4:c2:79:34:77:b0:95:4c:85:2f:be:f1:93:50:0a:
7e:68:21:de:2d:cd:ae:07:6e:90:49:68:d2:d4:ce:
69:aa:29:4c:a4:f7:43:bb:65:8a:95:54:17:55:1c:
8f:03:0e:6e:5a:06:35:53:f3:69:40:2c:d9:d6:7f:
f6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:13:2E:7D:AE:90:E9:29:62:FB:8D:F8:88:02:D1:B9:59:BB:18:53
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a2ac::/32
Signature Algorithm: sha256WithRSAEncryption
8b:32:9c:65:ac:34:8f:d1:b1:b9:73:88:d1:cc:aa:6d:75:e7:
f7:af:a1:b1:96:06:74:9a:08:86:0f:f7:00:b9:da:27:48:7a:
1e:da:49:e9:05:27:fc:17:42:b0:ac:3e:23:15:08:f4:1e:da:
01:f3:a3:53:6c:b2:83:21:13:2a:cf:84:64:4a:c9:ea:8e:cd:
2f:e4:39:80:70:68:c2:6f:f1:aa:93:ef:b7:4f:34:bf:f4:8a:
42:a7:84:7d:f8:4f:c1:cc:2a:06:5a:b8:c4:99:da:53:29:4a:
ce:6a:5a:75:b3:d2:0b:3a:07:ea:d7:75:9d:ff:67:9b:36:ca:
eb:d7:49:37:86:0a:38:77:32:34:e1:01:d9:52:2d:4b:9f:53:
bf:f5:13:13:9a:a1:37:72:88:2f:d6:61:21:77:02:77:f1:48:
35:64:07:16:6f:73:28:5e:2b:c9:3d:b2:6a:44:b0:f8:1f:56:
05:83:27:b6:70:07:1e:82:c1:41:82:37:8e:68:85:fa:d8:5c:
d7:f3:fc:49:9f:bc:c9:8b:6c:33:e3:06:a2:12:7f:24:bb:68:
a9:c6:46:8e:06:df:a6:ac:51:04:da:74:c7:b2:71:72:17:0b:
c3:e5:49:88:78:b3:c4:ce:fd:9a:e8:e5:3d:67:14:a0:07:bd:
ba:11:79:32
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUJ+Ql/X20NOs6ilSLYtpGHmPE+WUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzM2MTZaFw0yNzA1MjEwNzQxMTZaMDMxMTAvBgNV
BAMTKENEMTMyRTdEQUU5MEU5Mjk2MkZCOERGODg4MDJEMUI5NTlCQjE4NTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4lIsGkw6RS9bUF2OtucMJPYPU
35XbcJHTS/84K3tugxeK3IUHk0zqaBHh9dxwmizPdUfTaS1QvxfrFdzjEfBsl/Uo
afnKvAcs3n25Yo0RQDKRsaKHkvgRxaQYuaN8DDyFPNNVNEJSZHftxgb5mWTcPrLH
lQDbdx0WDbQgSJjS1/X/Q1oJfx3wN2CpyB/6dY+20ULR2niaZ5Ok1FN1Ye+ckWgO
MDmqaWD2DvtBjrkRc8FRPqS+C7VxNi1hhpdT6+zz+KTCeTR3sJVMhS++8ZNQCn5o
Id4tza4HbpBJaNLUzmmqKUyk90O7ZYqVVBdVHI8DDm5aBjVT82lALNnWf/aHAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUzRMufa6Q6Sli+434iALRuVm7GFMwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqirDANBgkqhkiG9w0BAQsFAAOCAQEAizKc
Zaw0j9GxuXOI0cyqbXXn96+hsZYGdJoIhg/3ALnaJ0h6HtpJ6QUn/BdCsKw+IxUI
9B7aAfOjU2yygyETKs+EZErJ6o7NL+Q5gHBowm/xqpPvt080v/SKQqeEffhPwcwq
Blq4xJnaUylKzmpadbPSCzoH6td1nf9nmzbK69dJN4YKOHcyNOEB2VItS59Tv/UT
E5qhN3KIL9ZhIXcCd/FINWQHFm9zKF4ryT2yakSw+B9WBYMntnAHHoLBQYI3jmiF
+thc1/P8SZ+8yYtsM+MGohJ/JLtoqcZGjgbfpqxRBNp0x7JxchcLw+VJiHizxM79
mujlPWcUoAe9uhF5Mg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:35 2026 by rpki-client