Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143361.roa
File: AS143361.roa (raw, json)
Hash identifier: K0Y9QZLQXW6kZQjZFoObVxOoAibqnsPytWCw52ql5dk=
Subject key identifier: 2F:74:48:1C:01:9B:24:4A:48:86:54:7E:69:32:F1:08:BE:DE:53:1D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 571617B2AF900E757758EB390A8AD3C107D1B7A2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143361.roa
Signing time: Tue 26 May 2026 03:17:03 +0000
ROA not before: Tue 26 May 2026 03:12:03 +0000
ROA not after: Tue 25 May 2027 03:17:03 +0000
asID: 143361
IP address blocks: 240a:a2c7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:16:17:b2:af:90:0e:75:77:58:eb:39:0a:8a:d3:c1:07:d1:b7:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:12:03 2026 GMT
Not After : May 25 03:17:03 2027 GMT
Subject: CN=2F74481C019B244A4886547E6932F108BEDE531D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b7:1c:cd:73:a2:2a:e8:e8:68:ff:1d:75:48:
5a:ef:c8:fd:a9:04:f4:a6:b9:a7:ae:07:e5:4c:48:
d8:13:c3:6d:38:70:dc:2d:e5:e0:f1:a7:76:3c:e1:
20:79:97:3f:84:77:53:11:81:d9:ad:db:de:82:e9:
ab:0c:f0:d4:cf:a9:27:d9:44:2a:a7:ae:3e:ce:c2:
75:f0:13:2d:a6:97:99:50:b7:44:0a:ae:3c:bc:10:
7e:3a:10:84:a3:38:90:9d:5a:df:08:63:4c:a6:3d:
ed:f9:b2:4b:be:70:f4:e4:e4:07:30:bc:58:94:52:
28:6a:f0:94:28:a1:34:aa:5b:0e:38:80:86:69:f2:
ff:c9:2f:72:86:b1:40:8b:c0:03:00:29:05:df:51:
ca:b1:e6:8c:7a:0b:b9:d9:14:a5:97:ca:28:e1:d9:
54:58:81:c0:45:07:d9:a8:dc:e5:92:49:2a:ca:14:
b3:a1:e3:b4:a7:a7:dd:ef:8b:40:13:f8:46:9f:89:
d3:58:ac:76:b7:04:80:5a:ae:fb:16:6d:41:b7:6e:
21:a2:aa:29:ba:7d:87:c2:80:4a:74:d8:5f:aa:9d:
cf:a4:c7:c8:b1:8b:fb:26:18:59:00:92:79:f9:7c:
c7:6b:23:4a:f4:ff:89:59:8a:fe:11:10:f9:95:0e:
0c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:74:48:1C:01:9B:24:4A:48:86:54:7E:69:32:F1:08:BE:DE:53:1D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143361.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a2c7::/32
Signature Algorithm: sha256WithRSAEncryption
29:2c:1e:7d:62:ff:d9:9d:85:08:34:f2:01:0b:ea:d3:23:8b:
1a:5a:29:b7:50:85:eb:1f:ca:77:50:4b:f4:bd:82:0a:0a:8a:
e6:e7:d9:0c:37:bf:e8:88:70:ff:85:c6:53:85:5d:6c:6a:37:
97:94:b6:c2:04:0c:a4:ed:f7:d1:1b:04:df:32:65:6e:2a:dc:
a0:72:90:64:a7:3c:5b:73:7d:21:a8:76:71:e7:72:be:41:ce:
e4:23:b8:f3:60:80:c3:18:d1:31:f4:8e:4c:eb:fc:03:75:38:
a9:21:c3:1b:13:aa:bb:7e:9a:6c:a7:32:a5:3d:b9:29:b7:f1:
42:85:31:7a:cf:76:f9:1b:2d:58:0c:1b:dc:41:1f:60:1b:e6:
d9:a9:aa:d1:a9:02:db:b7:1e:01:e4:67:c2:f9:dc:79:4b:5c:
ba:90:b6:04:a9:b5:26:bd:eb:29:30:60:ef:f1:29:97:81:7f:
f8:0a:df:f4:c8:e9:8d:f0:92:9a:d8:38:33:99:3c:4e:17:00:
0f:6a:d8:9a:f6:7f:b2:73:9e:83:a4:fc:6f:bc:5a:eb:b8:4d:
c2:5e:6c:82:30:eb:88:8a:ae:94:f2:5d:b8:85:d3:64:99:bf:
67:22:cb:7b:de:e1:4a:24:1d:2a:6e:02:0b:e9:3c:3f:ef:5e:
20:4c:5a:ad
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUVxYXsq+QDnV3WOs5CorTwQfRt6IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMzEyMDNaFw0yNzA1MjUwMzE3MDNaMDMxMTAvBgNV
BAMTKDJGNzQ0ODFDMDE5QjI0NEE0ODg2NTQ3RTY5MzJGMTA4QkVERTUzMUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1txzNc6Iq6Oho/x11SFrvyP2p
BPSmuaeuB+VMSNgTw204cNwt5eDxp3Y84SB5lz+Ed1MRgdmt296C6asM8NTPqSfZ
RCqnrj7OwnXwEy2ml5lQt0QKrjy8EH46EISjOJCdWt8IY0ymPe35sku+cPTk5Acw
vFiUUihq8JQooTSqWw44gIZp8v/JL3KGsUCLwAMAKQXfUcqx5ox6C7nZFKWXyijh
2VRYgcBFB9mo3OWSSSrKFLOh47Snp93vi0AT+EafidNYrHa3BIBarvsWbUG3biGi
qim6fYfCgEp02F+qnc+kx8ixi/smGFkAknn5fMdrI0r0/4lZiv4REPmVDgwfAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUL3RIHAGbJEpIhlR+aTLxCL7eUx0wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzMzYxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqixzANBgkqhkiG9w0BAQsFAAOCAQEAKSwe
fWL/2Z2FCDTyAQvq0yOLGlopt1CF6x/Kd1BL9L2CCgqK5ufZDDe/6Ihw/4XGU4Vd
bGo3l5S2wgQMpO330RsE3zJlbircoHKQZKc8W3N9Iah2cedyvkHO5CO482CAwxjR
MfSOTOv8A3U4qSHDGxOqu36abKcypT25KbfxQoUxes92+RstWAwb3EEfYBvm2amq
0akC27ceAeRnwvnceUtcupC2BKm1Jr3rKTBg7/Epl4F/+Arf9MjpjfCSmtg4M5k8
ThcAD2rYmvZ/snOeg6T8b7xa67hNwl5sgjDriIqulPJduIXTZJm/ZyLLe97hSiQd
Km4CC+k8P+9eIExarQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:13 2026 by rpki-client