Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143404.roa
File: AS143404.roa (raw, json)
Hash identifier: m8KfBGQFK0/xq82DlClASdvWLJUwqC/Y2XrCYWmpGk4=
Subject key identifier: F3:3E:AA:11:79:28:C8:09:CB:B8:D4:43:24:BA:66:45:15:28:53:31
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 069338EC57E6520E09BEC70C93163AD9BBEE5E6D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143404.roa
Signing time: Mon 25 May 2026 02:22:37 +0000
ROA not before: Mon 25 May 2026 02:17:37 +0000
ROA not after: Mon 24 May 2027 02:22:37 +0000
asID: 143404
IP address blocks: 240a:a2f2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:93:38:ec:57:e6:52:0e:09:be:c7:0c:93:16:3a:d9:bb:ee:5e:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:37 2026 GMT
Not After : May 24 02:22:37 2027 GMT
Subject: CN=F33EAA117928C809CBB8D44324BA664515285331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:69:6d:c1:6d:89:9f:c9:14:ab:52:15:ce:19:
f7:47:a5:a5:5d:a8:a2:6c:1b:76:7e:1f:04:d0:d0:
28:50:95:1d:0a:a5:38:72:81:de:ac:2c:cd:97:26:
37:1d:82:04:8c:8e:6e:b2:a7:66:f2:fa:39:2f:f2:
f7:6a:03:51:11:5b:30:6e:52:0c:25:12:ef:76:b8:
94:bd:5a:09:e8:54:48:cc:f5:47:ac:0a:c8:81:2a:
4d:d3:3f:f9:6c:7b:8c:00:65:ea:9e:e3:3a:a8:77:
15:46:51:ad:6e:24:71:19:44:15:74:06:36:6b:88:
e3:c9:f1:e5:1f:74:af:a0:ed:42:8e:e0:af:dd:f5:
81:f0:c9:6f:6d:52:61:74:04:8f:78:ec:2e:33:69:
5a:38:0e:0f:16:12:57:cc:8d:53:8e:b6:b1:a9:58:
af:25:1f:12:fe:98:15:8a:bd:7b:3a:06:14:3f:0c:
fc:33:52:f1:4e:43:c0:5b:7e:84:71:7e:ce:45:42:
2a:1a:54:0e:0f:36:1c:57:78:29:b1:83:12:81:57:
9e:ab:7d:c3:a1:20:a7:b9:83:14:b0:87:92:15:db:
df:56:82:52:5d:cc:f6:9f:56:53:35:dd:6f:05:2f:
90:97:10:71:ac:30:a2:38:f8:1b:4f:a5:85:dc:e7:
e2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:3E:AA:11:79:28:C8:09:CB:B8:D4:43:24:BA:66:45:15:28:53:31
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143404.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a2f2::/32
Signature Algorithm: sha256WithRSAEncryption
0f:2b:04:30:04:09:4b:6c:c0:33:07:f5:af:ea:03:9b:52:e1:
7a:94:97:60:5a:89:eb:2a:60:8a:66:24:fe:7e:30:e0:9d:b0:
38:8a:a6:b2:9a:2d:56:39:84:50:b8:fb:57:9c:74:15:3e:e8:
a6:fa:2e:d7:10:9c:93:f4:d4:68:08:3a:5d:44:e2:8e:6b:f3:
69:cb:8c:a2:e5:e4:6f:96:11:45:e1:2e:f0:d0:53:1e:34:ac:
94:d7:f9:ad:81:5f:8b:3a:cc:7a:55:d3:28:ba:79:fd:98:37:
60:65:56:3a:4b:40:27:75:38:42:88:43:8a:92:ae:e8:b7:d1:
e1:17:68:09:88:64:f8:af:f7:a8:d5:55:e9:7f:19:49:50:6e:
88:d6:6f:04:06:88:46:4c:03:8b:8f:e6:83:84:d0:a3:1e:48:
e6:2f:94:66:98:45:38:a7:35:99:95:f8:7c:c3:72:0f:e8:ae:
3d:81:75:55:1e:e2:ae:bb:90:80:06:32:88:bb:40:b7:b0:7f:
ac:62:95:a2:61:1e:f5:01:b9:65:3c:39:fc:ad:15:96:2c:87:
3b:fd:7b:11:33:a3:4e:3a:11:f0:6e:7a:9c:80:35:82:d7:23:
8f:15:20:be:66:35:18:2d:9d:99:88:9c:16:c4:b5:25:fd:ec:
4a:b6:71:0a
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUBpM47FfmUg4JvscMkxY62bvuXm0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMjE3MzdaFw0yNzA1MjQwMjIyMzdaMDMxMTAvBgNV
BAMTKEYzM0VBQTExNzkyOEM4MDlDQkI4RDQ0MzI0QkE2NjQ1MTUyODUzMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXaW3BbYmfyRSrUhXOGfdHpaVd
qKJsG3Z+HwTQ0ChQlR0KpThygd6sLM2XJjcdggSMjm6yp2by+jkv8vdqA1ERWzBu
UgwlEu92uJS9WgnoVEjM9UesCsiBKk3TP/lse4wAZeqe4zqodxVGUa1uJHEZRBV0
BjZriOPJ8eUfdK+g7UKO4K/d9YHwyW9tUmF0BI947C4zaVo4Dg8WElfMjVOOtrGp
WK8lHxL+mBWKvXs6BhQ/DPwzUvFOQ8BbfoRxfs5FQioaVA4PNhxXeCmxgxKBV56r
fcOhIKe5gxSwh5IV299WglJdzPafVlM13W8FL5CXEHGsMKI4+BtPpYXc5+JvAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU8z6qEXkoyAnLuNRDJLpmRRUoUzEwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzNDA0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqi8jANBgkqhkiG9w0BAQsFAAOCAQEADysE
MAQJS2zAMwf1r+oDm1LhepSXYFqJ6ypgimYk/n4w4J2wOIqmspotVjmEULj7V5x0
FT7opvou1xCck/TUaAg6XUTijmvzacuMouXkb5YRReEu8NBTHjSslNf5rYFfizrM
elXTKLp5/Zg3YGVWOktAJ3U4QohDipKu6LfR4RdoCYhk+K/3qNVV6X8ZSVBuiNZv
BAaIRkwDi4/mg4TQox5I5i+UZphFOKc1mZX4fMNyD+iuPYF1VR7irruQgAYyiLtA
t7B/rGKVomEe9QG5ZTw5/K0VliyHO/17ETOjTjoR8G56nIA1gtcjjxUgvmY1GC2d
mYicFsS1Jf3sSrZxCg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:23 2026 by rpki-client