Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143421.roa
File: AS143421.roa (raw, json)
Hash identifier: TrNpSp4jGQFxaA9d+nhxoEFz12Po9RYMZOCcBQyuKc0=
Subject key identifier: 00:AC:A9:6E:07:34:0E:4C:AC:42:66:84:F3:D7:CE:87:20:AA:82:89
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 204EEFCE3874760A47C90F094192F3F79FDDE6DE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143421.roa
Signing time: Tue 26 May 2026 03:16:42 +0000
ROA not before: Tue 26 May 2026 03:11:42 +0000
ROA not after: Tue 25 May 2027 03:16:42 +0000
asID: 143421
IP address blocks: 240a:a303::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:4e:ef:ce:38:74:76:0a:47:c9:0f:09:41:92:f3:f7:9f:dd:e6:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:11:42 2026 GMT
Not After : May 25 03:16:42 2027 GMT
Subject: CN=00ACA96E07340E4CAC426684F3D7CE8720AA8289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9d:4e:48:f2:c7:da:31:21:e9:23:a5:1b:86:
f4:4f:c7:95:92:89:6e:57:cf:0f:c9:54:4f:26:c3:
c1:83:bb:2b:fa:97:8c:bb:3a:d7:3d:7e:e3:85:ae:
14:49:21:cf:8d:ed:58:15:ab:c8:48:36:dd:9a:0c:
b8:68:79:f3:46:aa:1e:f4:d8:99:f1:35:2e:32:22:
84:37:33:90:76:f7:8b:09:ce:16:a5:85:01:8c:a6:
8b:f6:3b:38:13:4a:23:66:5c:1e:f4:7c:c5:a9:ef:
cc:3e:75:35:e5:5e:f7:64:7c:c8:35:44:93:2a:0e:
10:c7:5e:e1:ca:53:ac:f6:3e:d9:db:7a:0a:6a:52:
4f:21:d9:04:94:b6:30:53:68:f4:a7:b1:e7:c4:3b:
19:d1:77:30:48:a7:0f:01:45:62:00:d7:d4:70:65:
f5:c5:c3:98:4b:c9:b3:59:c3:66:df:55:7b:8e:49:
9d:e9:39:e8:79:44:b8:1f:36:7e:0a:37:ba:29:96:
8b:02:9a:9d:fe:4d:f3:0e:c5:30:28:99:77:16:01:
d9:06:9c:f2:1e:f9:73:3a:5d:31:94:9c:9d:48:d4:
8a:64:46:70:a4:5f:dc:9b:a9:2c:2a:4f:5d:3f:3c:
bd:59:c5:0a:f5:ee:34:c1:5c:99:d4:31:0c:ec:4f:
73:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:AC:A9:6E:07:34:0E:4C:AC:42:66:84:F3:D7:CE:87:20:AA:82:89
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143421.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a303::/32
Signature Algorithm: sha256WithRSAEncryption
07:97:a8:93:6b:0e:2d:4a:26:48:e1:2b:50:5d:0f:17:67:7b:
85:31:3d:e3:32:b8:a8:94:66:ba:65:a8:24:15:40:29:07:a2:
fc:fb:af:cd:c3:ce:0f:8b:07:14:30:7c:95:ef:8d:d1:47:fe:
3f:f5:b9:a3:43:fc:d3:39:a5:f3:26:e7:43:d3:45:ce:5c:52:
df:3a:9a:47:82:c1:8f:07:17:8f:87:f6:2a:42:b9:dd:41:8f:
dd:38:2e:22:f1:16:0f:1f:2e:8a:c2:3d:d8:43:bc:dd:9c:bb:
a1:0f:21:7b:a6:85:54:08:b0:1a:e0:cd:64:47:be:19:c8:d2:
d4:0a:d0:76:d4:65:34:32:c0:b5:04:98:ff:d0:92:de:d5:2c:
ef:d9:38:4a:33:01:87:a6:83:f3:69:98:3f:dc:d3:28:a1:ed:
05:79:ed:0b:05:38:4f:e9:45:93:63:52:59:0a:49:72:c1:d6:
90:7c:9f:aa:f8:59:1d:38:da:18:15:68:16:2c:90:c8:db:73:
da:db:d5:68:d6:ca:e9:56:e5:98:90:3b:46:a3:1f:eb:7f:d4:
9a:38:66:9e:5d:ab:ae:89:78:49:ba:20:c3:35:2c:42:f8:fa:
14:f7:ed:2c:63:56:79:aa:be:73:a9:44:7c:3d:a8:b3:f2:c2:
f9:4c:bc:a8
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUIE7vzjh0dgpHyQ8JQZLz95/d5t4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMzExNDJaFw0yNzA1MjUwMzE2NDJaMDMxMTAvBgNV
BAMTKDAwQUNBOTZFMDczNDBFNENBQzQyNjY4NEYzRDdDRTg3MjBBQTgyODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1nU5I8sfaMSHpI6UbhvRPx5WS
iW5Xzw/JVE8mw8GDuyv6l4y7Otc9fuOFrhRJIc+N7VgVq8hINt2aDLhoefNGqh70
2JnxNS4yIoQ3M5B294sJzhalhQGMpov2OzgTSiNmXB70fMWp78w+dTXlXvdkfMg1
RJMqDhDHXuHKU6z2PtnbegpqUk8h2QSUtjBTaPSnsefEOxnRdzBIpw8BRWIA19Rw
ZfXFw5hLybNZw2bfVXuOSZ3pOeh5RLgfNn4KN7oplosCmp3+TfMOxTAomXcWAdkG
nPIe+XM6XTGUnJ1I1IpkRnCkX9ybqSwqT10/PL1ZxQr17jTBXJnUMQzsT3PbAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUAKypbgc0DkysQmaE89fOhyCqgokwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzNDIxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqjAzANBgkqhkiG9w0BAQsFAAOCAQEAB5eo
k2sOLUomSOErUF0PF2d7hTE94zK4qJRmumWoJBVAKQei/PuvzcPOD4sHFDB8le+N
0Uf+P/W5o0P80zml8ybnQ9NFzlxS3zqaR4LBjwcXj4f2KkK53UGP3TguIvEWDx8u
isI92EO83Zy7oQ8he6aFVAiwGuDNZEe+GcjS1ArQdtRlNDLAtQSY/9CS3tUs79k4
SjMBh6aD82mYP9zTKKHtBXntCwU4T+lFk2NSWQpJcsHWkHyfqvhZHTjaGBVoFiyQ
yNtz2tvVaNbK6VblmJA7RqMf63/Umjhmnl2rrol4SbogwzUsQvj6FPftLGNWeaq+
c6lEfD2os/LC+Uy8qA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:59 2026 by rpki-client