Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143377.roa
File: AS143377.roa (raw, json)
Hash identifier: wzKmnnABdUePnBXU16VEMVQj/G7fvBk/m1iZQTJIO5A=
Subject key identifier: D7:DD:62:57:12:A4:35:73:C8:28:AB:20:8C:9E:1F:63:10:48:C7:74
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 779409590AC17950A8F1268BF99FD5473B795103
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143377.roa
Signing time: Mon 25 May 2026 01:51:30 +0000
ROA not before: Mon 25 May 2026 01:46:30 +0000
ROA not after: Mon 24 May 2027 01:51:30 +0000
asID: 143377
IP address blocks: 240a:a2d7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:94:09:59:0a:c1:79:50:a8:f1:26:8b:f9:9f:d5:47:3b:79:51:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:30 2026 GMT
Not After : May 24 01:51:30 2027 GMT
Subject: CN=D7DD625712A43573C828AB208C9E1F631048C774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:04:32:2e:78:7a:7f:3f:e1:d9:c5:5f:ca:3a:
f0:6e:89:0f:92:cd:e1:aa:f5:b8:61:bc:4b:77:91:
15:34:b3:a1:49:9b:03:c8:ba:89:38:f2:f4:97:e1:
41:a2:da:80:95:fe:63:7d:7b:bb:a8:4b:90:33:98:
66:78:1c:22:87:6d:01:f4:c0:60:6d:83:2d:44:e8:
56:22:7c:98:c6:31:bd:16:29:19:7e:5f:78:ba:26:
91:5d:61:2e:da:27:c4:f5:ec:7c:ff:2c:22:3d:31:
d1:de:22:7f:40:73:7b:7e:fb:74:79:67:b7:c2:8d:
13:4a:85:f2:69:5f:ef:56:69:85:e8:ea:76:65:20:
6b:58:13:3e:1f:e2:1f:f6:6f:dc:34:55:a7:d1:d7:
26:72:0e:19:01:06:92:80:e1:d4:62:fe:a6:4c:c0:
bd:d5:e6:25:20:a0:c2:c6:23:02:83:a0:ae:cb:e2:
64:3b:a8:ce:9b:f5:dd:9a:f5:ff:71:c7:4e:6c:ef:
ee:84:6c:a7:36:bf:b2:04:a5:6c:ae:c7:4b:d9:87:
80:99:7a:7a:dc:ab:f8:8a:4c:cf:8b:1f:1f:cf:07:
f8:1e:5e:da:5e:4e:10:0f:3a:e6:07:7a:91:9c:d6:
14:2b:38:e2:7b:48:f2:00:0a:43:d9:76:40:c8:77:
e6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:DD:62:57:12:A4:35:73:C8:28:AB:20:8C:9E:1F:63:10:48:C7:74
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143377.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a2d7::/32
Signature Algorithm: sha256WithRSAEncryption
73:be:36:27:22:d1:9f:64:ce:10:e7:56:20:ea:8d:dc:f5:3f:
27:67:ad:cc:6a:c2:ec:bf:f3:a5:d4:0d:25:03:b3:fc:e1:6a:
a2:00:a4:4d:71:19:0d:83:a3:6f:11:9b:16:2d:5b:2b:7a:56:
55:1d:bb:72:dd:b7:c6:0b:86:95:5c:6c:22:4d:af:27:a1:d1:
9c:00:6a:12:fc:6e:8d:1b:f0:e6:41:30:1e:66:aa:8f:93:32:
2e:3b:9a:26:9d:88:24:d2:02:f0:82:90:6d:b8:f9:ca:66:66:
d0:fe:db:c6:3b:42:f5:5c:96:77:69:11:16:76:e8:93:f5:95:
31:59:c0:89:6d:93:9c:ae:f1:06:5c:62:e5:6f:75:07:73:13:
d7:3e:65:ff:a4:1f:34:d8:01:d0:b7:a2:de:5b:05:c8:7e:82:
a9:4c:f0:13:c2:ea:2b:12:53:d1:93:ab:c4:60:29:aa:d4:7b:
f0:b0:bd:63:2a:65:c0:f6:b9:6e:dc:bc:0a:e7:96:0b:5d:57:
ac:94:18:09:be:04:fa:67:32:59:dd:4e:8b:97:27:1d:53:22:
3d:c2:bc:7f:eb:81:1d:1f:5d:95:6c:17:58:c3:04:55:a4:d8:
41:95:9c:ad:15:47:36:9d:a3:0e:a6:6f:ca:1b:31:34:07:a2:
fe:1d:44:b7
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUd5QJWQrBeVCo8SaL+Z/VRzt5UQMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTQ2MzBaFw0yNzA1MjQwMTUxMzBaMDMxMTAvBgNV
BAMTKEQ3REQ2MjU3MTJBNDM1NzNDODI4QUIyMDhDOUUxRjYzMTA0OEM3NzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsBDIueHp/P+HZxV/KOvBuiQ+S
zeGq9bhhvEt3kRU0s6FJmwPIuok48vSX4UGi2oCV/mN9e7uoS5AzmGZ4HCKHbQH0
wGBtgy1E6FYifJjGMb0WKRl+X3i6JpFdYS7aJ8T17Hz/LCI9MdHeIn9Ac3t++3R5
Z7fCjRNKhfJpX+9WaYXo6nZlIGtYEz4f4h/2b9w0VafR1yZyDhkBBpKA4dRi/qZM
wL3V5iUgoMLGIwKDoK7L4mQ7qM6b9d2a9f9xx05s7+6EbKc2v7IEpWyux0vZh4CZ
enrcq/iKTM+LHx/PB/geXtpeThAPOuYHepGc1hQrOOJ7SPIACkPZdkDId+adAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU191iVxKkNXPIKKsgjJ4fYxBIx3QwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzMzc3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqi1zANBgkqhkiG9w0BAQsFAAOCAQEAc742
JyLRn2TOEOdWIOqN3PU/J2etzGrC7L/zpdQNJQOz/OFqogCkTXEZDYOjbxGbFi1b
K3pWVR27ct23xguGlVxsIk2vJ6HRnABqEvxujRvw5kEwHmaqj5MyLjuaJp2IJNIC
8IKQbbj5ymZm0P7bxjtC9VyWd2kRFnbok/WVMVnAiW2TnK7xBlxi5W91B3MT1z5l
/6QfNNgB0Lei3lsFyH6CqUzwE8LqKxJT0ZOrxGApqtR78LC9YyplwPa5bty8CueW
C11XrJQYCb4E+mcyWd1Oi5cnHVMiPcK8f+uBHR9dlWwXWMMEVaTYQZWcrRVHNp2j
DqZvyhsxNAei/h1Etw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:45 2026 by rpki-client