Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143378.roa
File: AS143378.roa (raw, json)
Hash identifier: mMGks42HuMSNySpnf0FkpUhdeohpXZnm5KKVJi4hn3k=
Subject key identifier: DD:48:E9:9D:DC:D8:F0:79:35:81:31:F9:59:98:10:A5:83:DE:A9:7F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 77B9FDD9F35E4BC2C96B566A416C8A1F47F53EB9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143378.roa
Signing time: Fri 22 May 2026 07:08:37 +0000
ROA not before: Fri 22 May 2026 07:03:37 +0000
ROA not after: Fri 21 May 2027 07:08:37 +0000
asID: 143378
IP address blocks: 240a:a2d8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:b9:fd:d9:f3:5e:4b:c2:c9:6b:56:6a:41:6c:8a:1f:47:f5:3e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:03:37 2026 GMT
Not After : May 21 07:08:37 2027 GMT
Subject: CN=DD48E99DDCD8F079358131F9599810A583DEA97F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a7:82:70:67:6c:b5:bb:fb:b5:d4:8a:8a:87:
2d:cc:e5:8d:9c:fb:cc:05:03:7b:84:9b:91:d8:d1:
39:ef:e6:63:9e:18:54:75:15:26:13:14:57:8a:4c:
1c:38:46:0a:ac:0c:e9:6a:6e:da:0c:c3:59:80:77:
56:d6:3d:57:75:54:30:88:52:23:aa:87:c5:6f:11:
fe:6f:9e:27:03:5b:9a:37:0a:42:80:4f:85:a7:de:
20:ed:36:43:0d:30:69:e3:6b:4b:79:6a:47:9f:5e:
be:e3:39:bc:8e:be:95:4d:2d:25:60:f7:bc:d8:81:
1e:62:a1:ce:e7:0a:ca:02:b8:45:62:55:c6:a6:16:
4b:6f:54:24:f7:fb:9b:2c:b2:95:68:3f:22:20:36:
b2:d6:af:2e:83:cd:43:79:8c:42:2a:31:d2:4b:7f:
cd:84:df:3f:74:d4:53:ad:ec:bf:19:cd:a9:8d:20:
c1:20:12:0f:75:3c:c2:a4:c7:8c:ac:6a:24:4d:48:
2d:4a:f9:59:66:9c:c1:75:f0:19:98:e8:19:50:4b:
8b:26:8c:bf:e4:28:c2:2e:58:ef:fb:4e:84:98:b2:
9a:65:f8:49:b5:f0:ee:a3:8f:33:c2:3a:86:eb:1c:
59:7c:e1:69:0b:e4:eb:37:a8:a0:a1:b4:5e:1e:48:
3c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:48:E9:9D:DC:D8:F0:79:35:81:31:F9:59:98:10:A5:83:DE:A9:7F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143378.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a2d8::/32
Signature Algorithm: sha256WithRSAEncryption
70:0f:e7:a1:30:c1:36:bd:df:e9:26:93:57:72:bf:e1:2a:12:
42:fd:df:73:22:b4:40:65:77:5a:49:14:3d:18:42:81:ca:57:
85:1a:fb:83:14:71:2a:42:9d:de:99:c6:51:64:61:8c:4d:17:
b6:c9:60:8a:ed:e2:fc:a5:58:dd:23:62:b5:b1:e5:e8:fa:e8:
c7:18:7d:34:00:61:84:1b:fc:dd:c1:02:02:d3:9d:f3:89:fb:
51:c5:d2:a1:6d:ab:15:63:84:ea:e0:c4:a7:3b:ed:21:64:23:
e9:9b:e8:d2:3c:5c:50:90:03:48:66:0d:4c:c7:bd:90:bc:b0:
ce:84:d1:7c:8b:e3:b7:04:f7:f1:de:f0:fa:c9:53:ce:55:d3:
c0:6e:dc:b0:70:24:e4:86:28:51:67:4b:4b:bb:bd:b2:5c:a8:
03:6c:09:b3:1f:d7:2a:9f:6c:05:fb:eb:88:8e:fe:f8:52:33:
b8:b3:69:4c:6c:6f:38:27:22:66:2c:7f:83:ed:bd:57:d8:13:
dd:ca:95:a8:fa:32:1a:3e:2d:2e:21:bf:e1:9e:40:72:f2:42:
d5:f5:41:ba:99:e9:11:5e:ad:81:b9:c4:c5:4e:70:57:7d:a2:
13:e3:03:4f:47:de:bb:e6:f5:5a:c5:10:94:80:f5:42:57:11:
17:56:58:9f
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUd7n92fNeS8LJa1ZqQWyKH0f1PrkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzAzMzdaFw0yNzA1MjEwNzA4MzdaMDMxMTAvBgNV
BAMTKERENDhFOTlERENEOEYwNzkzNTgxMzFGOTU5OTgxMEE1ODNERUE5N0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSp4JwZ2y1u/u11IqKhy3M5Y2c
+8wFA3uEm5HY0Tnv5mOeGFR1FSYTFFeKTBw4RgqsDOlqbtoMw1mAd1bWPVd1VDCI
UiOqh8VvEf5vnicDW5o3CkKAT4Wn3iDtNkMNMGnja0t5akefXr7jObyOvpVNLSVg
97zYgR5ioc7nCsoCuEViVcamFktvVCT3+5ssspVoPyIgNrLWry6DzUN5jEIqMdJL
f82E3z901FOt7L8ZzamNIMEgEg91PMKkx4ysaiRNSC1K+VlmnMF18BmY6BlQS4sm
jL/kKMIuWO/7ToSYsppl+Em18O6jjzPCOobrHFl84WkL5Os3qKChtF4eSDz1AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU3UjpndzY8Hk1gTH5WZgQpYPeqX8wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzMzc4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqi2DANBgkqhkiG9w0BAQsFAAOCAQEAcA/n
oTDBNr3f6SaTV3K/4SoSQv3fcyK0QGV3WkkUPRhCgcpXhRr7gxRxKkKd3pnGUWRh
jE0Xtslgiu3i/KVY3SNitbHl6Proxxh9NABhhBv83cECAtOd84n7UcXSoW2rFWOE
6uDEpzvtIWQj6Zvo0jxcUJADSGYNTMe9kLywzoTRfIvjtwT38d7w+slTzlXTwG7c
sHAk5IYoUWdLS7u9slyoA2wJsx/XKp9sBfvriI7++FIzuLNpTGxvOCciZix/g+29
V9gT3cqVqPoyGj4tLiG/4Z5AcvJC1fVBupnpEV6tgbnExU5wV32iE+MDT0feu+b1
WsUQlID1QlcRF1ZYnw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:44 2026 by rpki-client