Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143345.roa
File: AS143345.roa (raw, json)
Hash identifier: 9LrDkcO5l0N2YCPBAjdYavlFs2IOD98jBeBHrxnCSvg=
Subject key identifier: BC:CD:DD:BC:ED:80:E8:1C:14:83:13:EC:B9:ED:CE:5E:D4:92:11:DE
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 061FFF0EC145DFB44D23E94EEFF3E848F104DB02
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143345.roa
Signing time: Fri 22 May 2026 04:26:41 +0000
ROA not before: Fri 22 May 2026 04:21:41 +0000
ROA not after: Fri 21 May 2027 04:26:41 +0000
asID: 143345
IP address blocks: 240a:a2b7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:1f:ff:0e:c1:45:df:b4:4d:23:e9:4e:ef:f3:e8:48:f1:04:db:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:21:41 2026 GMT
Not After : May 21 04:26:41 2027 GMT
Subject: CN=BCCDDDBCED80E81C148313ECB9EDCE5ED49211DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d4:2c:5d:63:58:57:00:b5:bb:42:a0:1c:fd:
44:cf:be:37:1b:67:ff:9b:33:1b:7a:31:f1:79:eb:
16:4e:e8:fb:c0:2e:f2:5f:48:ad:34:49:7a:e6:bb:
01:68:e7:a8:6e:7c:85:99:82:5c:a7:61:24:ee:79:
80:ad:a5:57:23:80:f1:ef:ec:bd:da:9e:e0:34:7e:
67:34:a0:19:9d:7a:fc:85:7a:4f:66:aa:f8:76:de:
6e:84:ce:69:8a:ea:ac:98:6d:5a:b8:88:76:0c:54:
af:a1:a9:0f:d6:37:c9:8e:95:ce:d1:40:20:47:a0:
90:6f:a7:d3:c2:d7:d0:58:b2:6e:02:e5:b0:64:16:
25:27:f2:c2:1f:50:91:f1:5a:4b:86:92:c5:37:1e:
6d:b2:3f:9f:cd:5a:48:1e:59:1c:6a:c5:51:ef:a1:
7f:07:dc:90:e0:d3:ce:5f:12:28:75:60:19:c6:7a:
6e:2a:1c:93:a9:78:25:af:36:65:ca:e7:d6:13:3a:
d2:c4:af:51:a8:cc:56:d7:2e:0e:06:18:41:18:7f:
e5:6e:32:08:72:4b:be:9d:1e:d5:53:07:03:0e:9e:
cd:13:29:6f:e2:c2:70:08:27:ac:e4:05:60:96:d0:
c2:1b:82:80:80:85:c7:8d:c2:55:25:7c:be:31:6e:
d5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:CD:DD:BC:ED:80:E8:1C:14:83:13:EC:B9:ED:CE:5E:D4:92:11:DE
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143345.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a2b7::/32
Signature Algorithm: sha256WithRSAEncryption
4f:82:11:99:88:9a:b0:82:94:be:b8:7e:93:89:0d:7a:63:65:
55:d5:a1:a7:1f:d8:8a:74:95:a7:44:f2:63:0a:00:61:aa:76:
c5:58:55:17:19:57:9c:a0:12:93:d3:da:89:33:45:2b:a7:17:
8f:bf:a3:ca:ac:cc:16:c6:be:e6:16:e0:2b:09:2a:e6:49:f2:
c4:de:8f:04:40:52:e5:18:65:e0:ff:83:2f:3e:00:3e:86:8c:
c8:a3:03:0e:b6:8a:a5:06:f3:3b:4b:f0:1c:92:9e:b6:9e:46:
f5:46:ce:1c:06:c6:69:e2:0a:02:be:c1:f6:2b:b5:c4:a8:5e:
e7:76:fb:6b:7c:6c:fe:f0:05:f4:21:45:42:48:65:b5:e9:63:
fd:1b:88:86:97:67:ad:58:43:ae:eb:60:5e:25:bf:6e:79:7e:
b6:9f:04:97:b8:3a:fa:0e:3e:be:c4:61:10:6e:38:fa:34:8c:
2d:9c:5b:26:92:bd:cb:3c:3d:71:9a:84:b2:57:b8:a9:b8:87:
90:74:ab:c4:2b:61:02:c8:00:24:5c:62:99:46:a9:00:e9:a7:
dc:46:89:6e:e3:13:52:a7:89:2b:a2:80:72:fb:c0:e6:d7:5a:
6b:41:ca:33:7d:bb:dd:d5:4e:d1:86:58:81:bc:33:a2:4a:41:
de:8b:d1:52
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUBh//DsFF37RNI+lO7/PoSPEE2wIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNDIxNDFaFw0yNzA1MjEwNDI2NDFaMDMxMTAvBgNV
BAMTKEJDQ0REREJDRUQ4MEU4MUMxNDgzMTNFQ0I5RURDRTVFRDQ5MjExREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX1CxdY1hXALW7QqAc/UTPvjcb
Z/+bMxt6MfF56xZO6PvALvJfSK00SXrmuwFo56hufIWZglynYSTueYCtpVcjgPHv
7L3anuA0fmc0oBmdevyFek9mqvh23m6EzmmK6qyYbVq4iHYMVK+hqQ/WN8mOlc7R
QCBHoJBvp9PC19BYsm4C5bBkFiUn8sIfUJHxWkuGksU3Hm2yP5/NWkgeWRxqxVHv
oX8H3JDg085fEih1YBnGem4qHJOpeCWvNmXK59YTOtLEr1GozFbXLg4GGEEYf+Vu
MghyS76dHtVTBwMOns0TKW/iwnAIJ6zkBWCW0MIbgoCAhceNwlUlfL4xbtWvAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUvM3dvO2A6BwUgxPsue3OXtSSEd4wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzMzQ1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqitzANBgkqhkiG9w0BAQsFAAOCAQEAT4IR
mYiasIKUvrh+k4kNemNlVdWhpx/YinSVp0TyYwoAYap2xVhVFxlXnKASk9PaiTNF
K6cXj7+jyqzMFsa+5hbgKwkq5knyxN6PBEBS5Rhl4P+DLz4APoaMyKMDDraKpQbz
O0vwHJKetp5G9UbOHAbGaeIKAr7B9iu1xKhe53b7a3xs/vAF9CFFQkhltelj/RuI
hpdnrVhDrutgXiW/bnl+tp8El7g6+g4+vsRhEG44+jSMLZxbJpK9yzw9cZqEsle4
qbiHkHSrxCthAsgAJFximUapAOmn3EaJbuMTUqeJK6KAcvvA5tdaa0HKM3273dVO
0YZYgbwzokpB3ovRUg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:43 2026 by rpki-client