Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143368.roa
File: AS143368.roa (raw, json)
Hash identifier: EF5o/DRyI9HjHdsGKEWNm6pwNgC9rg0MyhW7eiqSshQ=
Subject key identifier: 63:8C:49:18:31:B8:5B:7C:0D:08:B6:21:5D:80:8C:F6:19:10:5F:F9
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 329D6CACC3180229A9A3D82310A784A3D7D24156
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143368.roa
Signing time: Tue 26 May 2026 03:16:45 +0000
ROA not before: Tue 26 May 2026 03:11:45 +0000
ROA not after: Tue 25 May 2027 03:16:45 +0000
asID: 143368
IP address blocks: 240a:a2ce::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:9d:6c:ac:c3:18:02:29:a9:a3:d8:23:10:a7:84:a3:d7:d2:41:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:11:45 2026 GMT
Not After : May 25 03:16:45 2027 GMT
Subject: CN=638C491831B85B7C0D08B6215D808CF619105FF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:bb:d6:cb:fd:2b:37:43:b7:a6:ee:a9:0f:5a:
b5:71:0b:0c:b8:2d:64:ff:ec:e4:bd:bb:ad:1c:21:
f0:99:32:52:87:51:8c:13:a4:e6:bc:0c:ed:23:39:
9d:50:fe:66:64:c4:c5:24:88:a7:73:82:23:e7:9e:
88:03:ea:fd:f5:3f:6a:b4:5a:08:34:45:4c:47:a6:
43:4e:79:31:ee:0f:a6:ce:c3:b7:0e:24:07:ef:8c:
1e:19:d2:a1:56:71:82:a1:32:38:26:e1:50:de:58:
e3:b9:75:9f:b7:97:d7:21:5e:a5:dc:e6:3b:83:ef:
4a:63:d2:ed:07:e0:40:dd:d0:ee:92:8b:eb:0b:7f:
19:0c:9c:c2:0b:67:fe:b9:22:e5:5c:96:36:e5:aa:
99:f4:f5:d3:51:c8:a9:ee:58:67:1e:66:a7:c9:72:
e1:9b:f7:7a:79:5a:13:41:49:bd:92:57:09:e3:7e:
d5:28:fc:ed:ae:3d:91:47:1b:f1:6b:52:6a:7a:17:
99:a7:b4:be:58:f4:49:c0:a8:b6:3f:e1:b9:16:02:
e1:c5:54:ab:d2:93:e3:d5:94:1c:f3:5e:bf:f2:6c:
bd:f5:6e:c4:c0:8d:36:80:a3:d4:c6:ff:79:91:2a:
fd:01:3f:50:fa:31:d4:44:11:42:4d:2d:83:c1:be:
c6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:8C:49:18:31:B8:5B:7C:0D:08:B6:21:5D:80:8C:F6:19:10:5F:F9
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143368.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a2ce::/32
Signature Algorithm: sha256WithRSAEncryption
6a:6d:fc:4c:2c:5b:c6:f5:cd:ea:9b:e1:36:35:59:ac:fd:8d:
3c:f3:c3:8e:ca:12:b8:27:91:0a:c6:95:fe:f6:37:a8:7d:62:
14:91:c6:e6:d0:eb:00:69:71:b1:41:4e:3f:b8:f4:4d:1f:76:
22:22:6d:a4:96:7d:24:83:d5:34:de:fe:36:24:98:ae:0c:1c:
01:a1:7c:20:f6:4b:e4:59:29:59:a4:20:b8:14:4a:86:a6:6b:
b7:31:8d:e7:de:89:b6:56:27:c3:31:7b:7d:5a:04:75:60:63:
68:fd:98:34:7a:21:b1:9c:6b:75:b0:bf:df:9a:6a:b9:9e:f9:
e7:83:c5:15:be:b2:11:b1:e0:56:b2:1f:64:ee:cf:88:7d:d3:
4c:d0:5c:bc:48:49:81:77:12:27:77:22:d8:ee:97:0b:95:a9:
84:27:8c:04:60:39:ff:a7:3b:db:e9:2f:b7:ef:5c:af:08:d9:
7e:d0:ef:54:42:bc:2e:6a:39:92:89:92:d4:a3:4c:3f:29:15:
d1:f7:0a:07:dd:8e:7f:15:0a:98:88:73:df:78:f3:e0:86:12:
bd:ba:fb:87:f1:b1:65:56:c7:8e:60:0a:4c:1c:fa:b4:2a:40:
33:7e:0e:4a:8b:47:43:df:3b:0f:04:72:01:31:8e:5d:7b:42:
8d:a3:4c:79
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUMp1srMMYAimpo9gjEKeEo9fSQVYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMzExNDVaFw0yNzA1MjUwMzE2NDVaMDMxMTAvBgNV
BAMTKDYzOEM0OTE4MzFCODVCN0MwRDA4QjYyMTVEODA4Q0Y2MTkxMDVGRjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3u9bL/Ss3Q7em7qkPWrVxCwy4
LWT/7OS9u60cIfCZMlKHUYwTpOa8DO0jOZ1Q/mZkxMUkiKdzgiPnnogD6v31P2q0
Wgg0RUxHpkNOeTHuD6bOw7cOJAfvjB4Z0qFWcYKhMjgm4VDeWOO5dZ+3l9chXqXc
5juD70pj0u0H4EDd0O6Si+sLfxkMnMILZ/65IuVcljblqpn09dNRyKnuWGceZqfJ
cuGb93p5WhNBSb2SVwnjftUo/O2uPZFHG/FrUmp6F5mntL5Y9EnAqLY/4bkWAuHF
VKvSk+PVlBzzXr/ybL31bsTAjTaAo9TG/3mRKv0BP1D6MdREEUJNLYPBvsZJAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUY4xJGDG4W3wNCLYhXYCM9hkQX/kwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzMzY4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqizjANBgkqhkiG9w0BAQsFAAOCAQEAam38
TCxbxvXN6pvhNjVZrP2NPPPDjsoSuCeRCsaV/vY3qH1iFJHG5tDrAGlxsUFOP7j0
TR92IiJtpJZ9JIPVNN7+NiSYrgwcAaF8IPZL5FkpWaQguBRKhqZrtzGN596JtlYn
wzF7fVoEdWBjaP2YNHohsZxrdbC/35pquZ7554PFFb6yEbHgVrIfZO7PiH3TTNBc
vEhJgXcSJ3ci2O6XC5WphCeMBGA5/6c72+kvt+9crwjZftDvVEK8Lmo5komS1KNM
PykV0fcKB92OfxUKmIhz33jz4IYSvbr7h/GxZVbHjmAKTBz6tCpAM34OSotHQ987
DwRyATGOXXtCjaNMeQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:48 2026 by rpki-client