Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143407.roa
File: AS143407.roa (raw, json)
Hash identifier: hfSATki27B7cjJcyHZGbN8Fx3GqvuGeCt5vnBdqqV5E=
Subject key identifier: B3:98:63:AE:A4:49:DE:B5:CC:64:7E:4D:5B:A5:7C:3A:36:19:C5:44
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7BC0739E4ED4E8798EBAFDF26A0B81714ED0386F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143407.roa
Signing time: Fri 22 May 2026 04:27:01 +0000
ROA not before: Fri 22 May 2026 04:22:01 +0000
ROA not after: Fri 21 May 2027 04:27:01 +0000
asID: 143407
IP address blocks: 240a:a2f5::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:c0:73:9e:4e:d4:e8:79:8e:ba:fd:f2:6a:0b:81:71:4e:d0:38:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:22:01 2026 GMT
Not After : May 21 04:27:01 2027 GMT
Subject: CN=B39863AEA449DEB5CC647E4D5BA57C3A3619C544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:aa:8f:e1:d1:68:23:c2:ce:32:38:9e:44:4b:
80:bd:db:dd:d8:4e:39:57:75:18:14:c6:07:12:ce:
20:cf:ee:97:2f:c6:9d:b8:b6:7d:04:81:86:2a:91:
cd:bd:1e:98:f4:0e:ab:c7:86:38:40:a9:9c:e0:dc:
1d:45:29:ac:62:20:a6:42:dc:f6:7d:aa:fa:b2:dd:
f4:f2:6b:b0:f0:df:25:73:10:62:08:47:9f:1b:56:
b4:6b:7d:54:da:76:d1:6a:8c:f3:22:4d:2e:c4:a5:
64:5c:54:59:78:19:8e:dd:da:4f:6d:31:80:0f:8b:
ca:c3:79:07:a9:9a:bd:25:49:52:d7:d3:c2:78:dc:
b4:94:65:c3:57:3a:78:5a:03:ac:d1:a4:2c:18:62:
3b:f1:f4:7f:46:60:95:58:98:01:30:ae:14:30:0e:
4b:88:a8:ec:27:f7:b5:81:de:ec:cc:85:6d:e7:70:
0a:72:5e:48:b0:f1:35:6a:3d:d5:09:26:27:33:71:
d8:56:5e:f3:f8:1e:74:e8:17:f9:f8:13:69:9d:a6:
99:e3:74:e9:ce:f5:b2:41:04:7c:14:ab:b9:69:5e:
03:2c:5b:85:ef:b4:69:c4:62:2a:e2:ac:b7:ac:17:
27:d8:41:3d:30:ee:3b:e8:f3:23:61:0d:25:43:4f:
a7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:98:63:AE:A4:49:DE:B5:CC:64:7E:4D:5B:A5:7C:3A:36:19:C5:44
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143407.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a2f5::/32
Signature Algorithm: sha256WithRSAEncryption
61:ce:5d:8e:80:59:41:45:35:3c:a2:ac:09:7c:3a:89:07:56:
26:37:5c:e0:d7:de:20:20:e1:db:2f:eb:00:f8:4c:89:c7:c8:
dc:b8:05:c5:fa:1d:9c:86:76:06:ab:b0:c2:8d:d3:f3:49:28:
c3:a3:1e:1e:a7:5e:2c:a7:2f:92:aa:5a:ae:79:38:40:6b:3d:
f9:f1:be:43:c3:e9:4a:ea:53:03:7c:e3:47:b3:83:e2:10:ad:
e2:80:c8:45:5d:23:51:76:b1:33:fd:ec:78:dd:0f:ee:8c:2b:
9b:72:1d:6a:2f:09:dd:3b:ee:8f:6c:49:73:95:79:87:17:09:
f5:03:59:32:e8:ea:c9:46:71:70:9c:b3:5d:00:5f:9a:88:84:
4c:93:e8:e9:a4:16:3d:ee:48:1e:08:c2:55:56:17:09:b7:53:
9f:2c:15:77:65:ca:d2:f2:09:5a:5f:02:d6:f8:3f:2c:e9:61:
9e:05:01:31:ec:42:c5:ed:e3:81:a0:f2:b6:a0:17:75:0a:af:
4a:16:23:23:ac:25:a3:0b:19:15:cf:a2:53:b8:36:05:c5:56:
5d:84:41:77:96:b6:cb:a9:3f:7c:49:55:d5:38:a1:94:e2:81:
3a:93:f1:cc:3b:73:9b:96:af:af:cf:25:c2:f9:84:01:7e:08:
3d:fb:97:6d
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUe8Bznk7U6HmOuv3yaguBcU7QOG8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNDIyMDFaFw0yNzA1MjEwNDI3MDFaMDMxMTAvBgNV
BAMTKEIzOTg2M0FFQTQ0OURFQjVDQzY0N0U0RDVCQTU3QzNBMzYxOUM1NDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLqo/h0Wgjws4yOJ5ES4C9293Y
TjlXdRgUxgcSziDP7pcvxp24tn0EgYYqkc29Hpj0DqvHhjhAqZzg3B1FKaxiIKZC
3PZ9qvqy3fTya7Dw3yVzEGIIR58bVrRrfVTadtFqjPMiTS7EpWRcVFl4GY7d2k9t
MYAPi8rDeQepmr0lSVLX08J43LSUZcNXOnhaA6zRpCwYYjvx9H9GYJVYmAEwrhQw
DkuIqOwn97WB3uzMhW3ncApyXkiw8TVqPdUJJiczcdhWXvP4HnToF/n4E2mdppnj
dOnO9bJBBHwUq7lpXgMsW4XvtGnEYirirLesFyfYQT0w7jvo8yNhDSVDT6ftAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUs5hjrqRJ3rXMZH5NW6V8OjYZxUQwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzNDA3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqi9TANBgkqhkiG9w0BAQsFAAOCAQEAYc5d
joBZQUU1PKKsCXw6iQdWJjdc4NfeICDh2y/rAPhMicfI3LgFxfodnIZ2Bquwwo3T
80kow6MeHqdeLKcvkqparnk4QGs9+fG+Q8PpSupTA3zjR7OD4hCt4oDIRV0jUXax
M/3seN0P7owrm3Idai8J3Tvuj2xJc5V5hxcJ9QNZMujqyUZxcJyzXQBfmoiETJPo
6aQWPe5IHgjCVVYXCbdTnywVd2XK0vIJWl8C1vg/LOlhngUBMexCxe3jgaDytqAX
dQqvShYjI6wlowsZFc+iU7g2BcVWXYRBd5a2y6k/fElV1TihlOKBOpPxzDtzm5av
r88lwvmEAX4IPfuXbQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:11 2026 by rpki-client