Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143420.roa
File: AS143420.roa (raw, json)
Hash identifier: Yh8kjPL6v59ZRwMFLsdjBJxU8ytviRkT/dxYJpGfrCI=
Subject key identifier: 3A:E5:E9:61:5A:24:54:DA:B9:DF:7B:D9:0B:0C:2D:1D:30:73:11:81
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3B9CFBB23CA73E9D4224DC40E018865871CF6E04
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143420.roa
Signing time: Tue 26 May 2026 06:30:50 +0000
ROA not before: Tue 26 May 2026 06:25:50 +0000
ROA not after: Tue 25 May 2027 06:30:50 +0000
asID: 143420
IP address blocks: 240a:a302::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:9c:fb:b2:3c:a7:3e:9d:42:24:dc:40:e0:18:86:58:71:cf:6e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:25:50 2026 GMT
Not After : May 25 06:30:50 2027 GMT
Subject: CN=3AE5E9615A2454DAB9DF7BD90B0C2D1D30731181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:85:77:18:ca:0f:96:6e:46:81:48:3c:f4:6b:
92:25:77:c3:79:89:bd:63:d0:19:61:93:f5:66:51:
b3:cf:45:3c:6b:5a:86:99:84:5a:2c:0b:15:c2:17:
1b:f8:e3:f6:ec:d2:61:61:83:fa:2f:3a:a0:a5:85:
a4:30:bb:19:e7:7a:a3:2d:fa:49:53:9e:2b:86:e6:
f5:d5:31:21:88:f0:5e:b1:fe:05:6c:43:c8:a5:85:
cc:51:3d:42:12:4d:66:2e:56:7f:8e:b4:c2:d7:52:
78:c1:e0:77:37:fc:b2:1d:bd:5a:4a:90:0c:c6:24:
4f:ce:bf:63:79:a4:f1:47:2d:3b:8a:21:98:57:1c:
95:bc:cb:db:7c:a8:fe:10:ef:56:15:a3:c9:80:98:
0e:67:e5:7f:8f:4b:c3:18:53:b8:89:54:c9:89:c9:
2a:bc:4b:5a:01:b3:63:e2:3f:7d:39:1a:03:47:80:
83:2c:57:0d:e4:60:fb:e0:cd:4b:1d:57:da:41:9f:
59:94:a8:ec:34:66:ad:67:d6:a0:f6:66:dc:36:22:
f0:a8:9b:2c:03:e8:ee:c9:bd:e6:cc:09:ed:95:2e:
7f:1f:16:75:82:e3:dd:a5:6a:aa:ab:37:51:43:71:
fc:32:1c:06:cb:71:88:72:5a:30:46:60:86:f1:84:
71:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E5:E9:61:5A:24:54:DA:B9:DF:7B:D9:0B:0C:2D:1D:30:73:11:81
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143420.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a302::/32
Signature Algorithm: sha256WithRSAEncryption
56:c5:18:83:1d:35:d1:da:a9:9c:86:b2:cf:65:c7:9f:4b:90:
de:48:42:ad:77:bd:74:4f:8c:bb:74:7d:18:e2:e0:7d:3a:f0:
2c:bb:02:a8:a1:95:59:00:4d:51:1f:8c:d7:1c:55:1a:fa:e9:
fd:f1:da:bc:a3:cb:fb:54:a3:24:ee:38:39:52:aa:74:e3:32:
c2:be:ba:77:f2:08:33:49:63:4c:2c:dd:e0:0f:88:d5:e7:73:
af:b9:02:97:99:63:f8:d9:35:72:0f:45:a7:ac:81:a6:4f:ac:
ce:5c:d1:fa:f1:b5:22:61:c0:94:e7:f6:ab:8c:b0:63:d9:27:
24:ed:5c:0f:22:6c:e4:18:68:6c:90:c1:8c:fa:ea:91:d0:80:
aa:d4:a4:bb:6d:c8:4a:da:3d:76:3d:b2:79:24:b9:81:1c:40:
ae:12:d8:e5:9a:9e:00:d2:25:07:87:2b:c1:10:8a:8d:0b:56:
d8:68:7a:e3:a1:68:b8:8d:9b:47:ca:7e:c2:67:f4:2b:87:91:
a8:f7:e7:b0:95:43:57:ea:20:b1:8f:05:95:18:39:eb:75:7b:
88:17:44:05:2f:e8:cb:95:2c:a5:b4:02:17:47:03:9e:93:81:
9c:05:ee:8f:e7:fd:b9:7f:7e:f7:d4:63:51:af:25:ff:1b:77:
dc:88:79:eb
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUO5z7sjynPp1CJNxA4BiGWHHPbgQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwNjI1NTBaFw0yNzA1MjUwNjMwNTBaMDMxMTAvBgNV
BAMTKDNBRTVFOTYxNUEyNDU0REFCOURGN0JEOTBCMEMyRDFEMzA3MzExODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkhXcYyg+WbkaBSDz0a5Ild8N5
ib1j0Blhk/VmUbPPRTxrWoaZhFosCxXCFxv44/bs0mFhg/ovOqClhaQwuxnneqMt
+klTniuG5vXVMSGI8F6x/gVsQ8ilhcxRPUISTWYuVn+OtMLXUnjB4Hc3/LIdvVpK
kAzGJE/Ov2N5pPFHLTuKIZhXHJW8y9t8qP4Q71YVo8mAmA5n5X+PS8MYU7iJVMmJ
ySq8S1oBs2PiP305GgNHgIMsVw3kYPvgzUsdV9pBn1mUqOw0Zq1n1qD2Ztw2IvCo
mywD6O7JvebMCe2VLn8fFnWC492laqqrN1FDcfwyHAbLcYhyWjBGYIbxhHEtAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUOuXpYVokVNq533vZCwwtHTBzEYEwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzNDIwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqjAjANBgkqhkiG9w0BAQsFAAOCAQEAVsUY
gx010dqpnIayz2XHn0uQ3khCrXe9dE+Mu3R9GOLgfTrwLLsCqKGVWQBNUR+M1xxV
Gvrp/fHavKPL+1SjJO44OVKqdOMywr66d/IIM0ljTCzd4A+I1edzr7kCl5lj+Nk1
cg9Fp6yBpk+szlzR+vG1ImHAlOf2q4ywY9knJO1cDyJs5BhobJDBjPrqkdCAqtSk
u23ISto9dj2yeSS5gRxArhLY5ZqeANIlB4crwRCKjQtW2Gh646FouI2bR8p+wmf0
K4eRqPfnsJVDV+ogsY8FlRg563V7iBdEBS/oy5UspbQCF0cDnpOBnAXuj+f9uX9+
99RjUa8l/xt33Ih56w==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:42 2026 by rpki-client