Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143384.roa
File: AS143384.roa (raw, json)
Hash identifier: 41JKUnN5XAxSF8JxvPsV3gkwJwey7ApBohUCaB7X9X8=
Subject key identifier: DD:63:19:54:89:EB:B3:55:E9:66:E7:69:2B:21:BC:8D:03:2A:FE:0C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 32F8437747B10A05F1249BE765FE94D501179D4E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143384.roa
Signing time: Fri 22 May 2026 04:08:16 +0000
ROA not before: Fri 22 May 2026 04:03:16 +0000
ROA not after: Fri 21 May 2027 04:08:16 +0000
asID: 143384
IP address blocks: 240a:a2de::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:f8:43:77:47:b1:0a:05:f1:24:9b:e7:65:fe:94:d5:01:17:9d:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:16 2026 GMT
Not After : May 21 04:08:16 2027 GMT
Subject: CN=DD63195489EBB355E966E7692B21BC8D032AFE0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:20:20:de:c3:a8:43:61:4f:cc:91:d2:10:ef:
57:8b:1f:c6:a4:c3:44:b4:ed:a2:9c:23:1c:96:0d:
4f:53:01:44:8b:b3:ba:52:eb:d0:bd:15:5f:f5:33:
82:88:3d:88:ef:19:59:69:49:6a:fa:18:3c:7f:b4:
51:12:10:97:be:da:6b:8f:56:24:ad:f1:37:b2:00:
19:2e:a4:59:b9:aa:71:71:34:7f:00:30:a6:00:c7:
0c:d9:2b:b8:22:d9:6f:a8:1b:c2:8f:fb:e1:13:5c:
0b:4e:b0:a1:be:df:a7:d3:6b:2b:9a:45:39:23:6d:
49:be:f6:bc:39:41:54:ff:b0:7f:04:47:99:9b:96:
34:a4:d5:b6:a7:95:49:a5:20:c4:cf:9a:88:29:13:
83:96:e7:d9:59:1d:18:40:a8:cc:61:bc:d5:4e:e0:
18:1d:5f:60:5f:81:11:84:70:4b:31:cd:fb:58:e5:
41:4d:06:c7:a2:66:f6:0b:3b:3a:55:cf:b1:70:d0:
57:09:b0:b1:6a:2c:10:a4:80:50:58:74:da:16:87:
b1:c7:ee:fe:7f:6c:e4:4c:35:7f:67:f3:f6:16:19:
60:a9:fd:7a:fd:12:08:3b:1c:63:50:34:ff:76:73:
94:b7:97:a2:72:00:4c:2a:ec:80:18:ff:a0:86:14:
f0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:63:19:54:89:EB:B3:55:E9:66:E7:69:2B:21:BC:8D:03:2A:FE:0C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143384.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a2de::/32
Signature Algorithm: sha256WithRSAEncryption
3a:2b:e6:0c:b5:4a:47:9e:c4:c2:79:56:92:81:a6:83:e2:39:
6c:c1:e0:bf:ec:1f:d3:13:d2:d3:be:11:9d:89:fd:5a:4c:7b:
af:33:de:51:c9:31:2e:db:4e:f6:9e:b2:f9:f5:42:e4:a7:22:
83:17:20:4a:b0:94:f5:73:8a:15:2f:54:98:b9:52:d4:87:bf:
98:d4:c3:6e:14:a6:b6:b9:c8:0d:fb:16:94:2f:1a:ae:17:2b:
a2:fb:90:e9:83:22:ff:7b:cc:28:a9:ae:20:5d:3d:33:c3:ea:
1e:8d:b3:6e:80:b5:64:3e:6d:c7:1d:3b:ec:cb:9b:30:a0:93:
16:d4:85:72:47:92:7a:d7:fc:45:89:ee:bc:e5:a5:13:4f:56:
9d:50:c4:35:1a:fb:17:97:40:c3:9d:59:25:7f:17:21:ed:5d:
3c:2e:f9:3d:e3:f4:ae:fd:1f:3d:8c:d5:1e:90:fa:dc:c7:ce:
dc:93:f7:90:1b:18:90:be:9d:b3:69:cb:50:4e:8e:d2:f8:44:
63:71:b6:9c:ce:b9:52:75:ee:4e:c9:dc:44:fe:23:d6:41:1c:
51:c1:17:b5:e6:94:3c:2d:f4:2c:f0:28:52:fd:7e:51:41:75:
c0:cc:be:18:14:10:94:4a:e9:1f:db:e3:8f:26:2d:6e:70:e4:
27:0d:1c:6e
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUMvhDd0exCgXxJJvnZf6U1QEXnU4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNDAzMTZaFw0yNzA1MjEwNDA4MTZaMDMxMTAvBgNV
BAMTKERENjMxOTU0ODlFQkIzNTVFOTY2RTc2OTJCMjFCQzhEMDMyQUZFMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYICDew6hDYU/MkdIQ71eLH8ak
w0S07aKcIxyWDU9TAUSLs7pS69C9FV/1M4KIPYjvGVlpSWr6GDx/tFESEJe+2muP
ViSt8TeyABkupFm5qnFxNH8AMKYAxwzZK7gi2W+oG8KP++ETXAtOsKG+36fTayua
RTkjbUm+9rw5QVT/sH8ER5mbljSk1banlUmlIMTPmogpE4OW59lZHRhAqMxhvNVO
4BgdX2BfgRGEcEsxzftY5UFNBseiZvYLOzpVz7Fw0FcJsLFqLBCkgFBYdNoWh7HH
7v5/bORMNX9n8/YWGWCp/Xr9Egg7HGNQNP92c5S3l6JyAEwq7IAY/6CGFPDJAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU3WMZVInrs1XpZudpKyG8jQMq/gwwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzMzg0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqi3jANBgkqhkiG9w0BAQsFAAOCAQEAOivm
DLVKR57EwnlWkoGmg+I5bMHgv+wf0xPS074RnYn9Wkx7rzPeUckxLttO9p6y+fVC
5KcigxcgSrCU9XOKFS9UmLlS1Ie/mNTDbhSmtrnIDfsWlC8arhcrovuQ6YMi/3vM
KKmuIF09M8PqHo2zboC1ZD5txx077MubMKCTFtSFckeSetf8RYnuvOWlE09WnVDE
NRr7F5dAw51ZJX8XIe1dPC75PeP0rv0fPYzVHpD63MfO3JP3kBsYkL6ds2nLUE6O
0vhEY3G2nM65UnXuTsncRP4j1kEcUcEXteaUPC30LPAoUv1+UUF1wMy+GBQQlErp
H9vjjyYtbnDkJw0cbg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:58 2026 by rpki-client