Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143416.roa
File: AS143416.roa (raw, json)
Hash identifier: dWbyAupdmUbEZOgy4wFvAXnjjsXwIrCVd1DLgxb/BGU=
Subject key identifier: A2:3C:9F:9A:C1:2D:02:4C:A9:15:60:E7:D3:BD:00:8E:BE:81:DA:6B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2296C360602A4455F954349A7A807958DB19E234
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143416.roa
Signing time: Mon 25 May 2026 01:20:36 +0000
ROA not before: Mon 25 May 2026 01:15:36 +0000
ROA not after: Mon 24 May 2027 01:20:36 +0000
asID: 143416
IP address blocks: 240a:a2fe::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:96:c3:60:60:2a:44:55:f9:54:34:9a:7a:80:79:58:db:19:e2:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:36 2026 GMT
Not After : May 24 01:20:36 2027 GMT
Subject: CN=A23C9F9AC12D024CA91560E7D3BD008EBE81DA6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:0f:5c:7b:b9:4f:65:8f:16:60:4a:c9:9a:88:
ca:95:bc:f5:0c:46:b8:bc:81:a4:64:31:a3:df:fe:
29:2a:5c:ce:75:a8:a6:0c:73:1a:f1:0a:b5:ed:f7:
aa:ec:80:6c:56:d7:54:4e:3a:8f:45:36:bf:e7:0e:
b6:86:d1:cb:94:a0:84:6f:0c:ae:6e:73:c9:23:fe:
26:af:0b:5f:43:58:59:ad:21:f1:fb:c9:9f:dd:49:
1c:a8:ca:16:8b:b1:7f:46:da:1d:e8:35:72:f0:54:
e1:bf:78:47:22:e2:0a:a9:0b:cf:fe:13:55:05:6c:
cd:d1:56:f4:97:77:83:fb:b5:92:b7:7b:01:21:5c:
8c:6c:de:71:c7:ce:76:69:bf:5e:be:65:52:84:e7:
63:9f:d1:ba:7d:ea:fc:27:f4:11:95:07:2d:9f:5a:
9c:29:b6:eb:02:df:3c:be:94:c2:f9:7f:a8:f2:fe:
ad:88:b5:bd:c8:56:36:ef:df:59:22:a1:02:35:54:
ac:fb:86:51:e3:97:b0:6c:66:98:fd:36:a6:15:98:
47:42:ec:a4:37:3b:9a:e1:0b:85:12:8e:2f:8a:83:
e5:e7:e6:53:16:98:75:ba:39:7e:b9:b8:3f:65:50:
ff:f0:c2:99:53:d1:14:0c:b2:cd:40:9a:e1:fb:4d:
68:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:3C:9F:9A:C1:2D:02:4C:A9:15:60:E7:D3:BD:00:8E:BE:81:DA:6B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143416.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a2fe::/32
Signature Algorithm: sha256WithRSAEncryption
36:02:f3:a0:91:56:38:2b:a1:d5:fe:2e:9a:8a:fe:e3:a0:7d:
90:c5:d4:f5:c0:21:be:de:ba:4a:f3:e8:2c:fb:e0:23:5c:b8:
46:2f:22:8e:85:18:92:56:d8:00:0e:30:57:ac:35:f5:b6:47:
06:70:f6:53:dc:a8:33:80:62:27:fb:59:b0:ef:3b:c9:78:89:
90:ad:9d:3b:dc:28:f2:d1:8d:e3:58:66:55:2c:1e:d5:bf:e1:
e7:5d:1b:7f:81:f7:38:33:2b:7c:08:64:5b:16:36:7a:2c:a6:
d8:17:db:eb:5d:10:96:be:25:dc:25:96:fa:61:c3:c6:48:ab:
1c:ec:5c:84:6e:ef:62:1a:f8:df:08:11:76:7e:61:db:8f:40:
57:76:c4:fc:ce:1c:87:3a:1e:44:8e:a9:5f:78:d1:f8:04:f4:
c2:39:2d:eb:b1:24:1c:78:25:af:d9:c0:67:db:22:bd:c7:c6:
2d:59:e8:3c:fd:05:c0:b8:bd:c6:5c:42:7e:03:75:a2:7e:81:
61:f7:78:17:86:bc:f6:d0:2e:c2:44:d8:13:04:94:c2:8a:1b:
72:b4:9f:f1:3d:fd:13:a1:41:5f:db:de:2f:ef:19:aa:c0:92:
fc:58:d9:e4:9e:6d:7f:03:55:df:95:f7:f6:68:4c:b1:52:c2:
59:0f:f6:9c
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUIpbDYGAqRFX5VDSaeoB5WNsZ4jQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTE1MzZaFw0yNzA1MjQwMTIwMzZaMDMxMTAvBgNV
BAMTKEEyM0M5RjlBQzEyRDAyNENBOTE1NjBFN0QzQkQwMDhFQkU4MURBNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5D1x7uU9ljxZgSsmaiMqVvPUM
Rri8gaRkMaPf/ikqXM51qKYMcxrxCrXt96rsgGxW11ROOo9FNr/nDraG0cuUoIRv
DK5uc8kj/iavC19DWFmtIfH7yZ/dSRyoyhaLsX9G2h3oNXLwVOG/eEci4gqpC8/+
E1UFbM3RVvSXd4P7tZK3ewEhXIxs3nHHznZpv16+ZVKE52Of0bp96vwn9BGVBy2f
WpwptusC3zy+lML5f6jy/q2Itb3IVjbv31kioQI1VKz7hlHjl7BsZpj9NqYVmEdC
7KQ3O5rhC4USji+Kg+Xn5lMWmHW6OX65uD9lUP/wwplT0RQMss1AmuH7TWjJAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUojyfmsEtAkypFWDn070Ajr6B2mswHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzNDE2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqi/jANBgkqhkiG9w0BAQsFAAOCAQEANgLz
oJFWOCuh1f4umor+46B9kMXU9cAhvt66SvPoLPvgI1y4Ri8ijoUYklbYAA4wV6w1
9bZHBnD2U9yoM4BiJ/tZsO87yXiJkK2dO9wo8tGN41hmVSwe1b/h510bf4H3ODMr
fAhkWxY2eiym2Bfb610Qlr4l3CWW+mHDxkirHOxchG7vYhr43wgRdn5h249AV3bE
/M4chzoeRI6pX3jR+AT0wjkt67EkHHglr9nAZ9sivcfGLVnoPP0FwLi9xlxCfgN1
on6BYfd4F4a89tAuwkTYEwSUwoobcrSf8T39E6FBX9veL+8ZqsCS/FjZ5J5tfwNV
35X39mhMsVLCWQ/2nA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:37 2026 by rpki-client