Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143428.roa
File: AS143428.roa (raw, json)
Hash identifier: RhpxBX+ld3xTqQERqXrKitQoX12vGUoaTfmuIdN0YuU=
Subject key identifier: 87:F8:1B:31:36:31:1D:8B:5A:C1:13:4C:F1:73:13:EB:9D:26:A4:5D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5D697DF2503560DB1E74736B3AB7883301BFE53A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143428.roa
Signing time: Fri 22 May 2026 07:41:03 +0000
ROA not before: Fri 22 May 2026 07:36:03 +0000
ROA not after: Fri 21 May 2027 07:41:03 +0000
asID: 143428
IP address blocks: 240a:a30a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:69:7d:f2:50:35:60:db:1e:74:73:6b:3a:b7:88:33:01:bf:e5:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:36:03 2026 GMT
Not After : May 21 07:41:03 2027 GMT
Subject: CN=87F81B3136311D8B5AC1134CF17313EB9D26A45D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7f:cd:8e:57:8e:34:b6:68:3a:09:e5:7c:1d:
ef:ab:0e:27:da:de:55:e6:c5:e2:4b:df:f3:50:4c:
2e:4c:79:7e:7d:50:23:bc:b0:fe:82:b7:47:22:9c:
f3:a1:eb:e3:ce:61:5c:28:c6:9f:93:1d:dc:3b:82:
47:03:4c:11:40:1c:98:cf:1d:5c:d2:ce:70:51:6c:
a3:4e:9b:ad:de:c7:7c:2b:fc:4a:16:a1:06:18:de:
1a:29:36:c2:57:a0:85:9c:94:c2:9a:b3:52:78:bf:
72:20:1c:46:33:07:84:41:cc:3e:38:0d:30:1f:fa:
76:66:51:51:66:0c:c0:e3:a4:9c:f7:9b:97:14:44:
42:97:8d:a6:79:a3:27:14:6e:45:94:4f:fc:88:5a:
25:dd:a7:88:71:6e:c6:df:4f:26:2e:66:21:62:41:
da:ef:ee:7e:c5:81:89:3a:d4:d5:b7:7b:ba:21:33:
32:90:34:81:ed:1a:d1:3a:06:50:65:69:a2:e7:9b:
f8:cb:7c:29:f5:ca:75:81:7e:bd:9e:b7:bf:37:c2:
8a:02:6e:44:85:0f:9f:fe:a2:62:46:69:73:af:84:
f1:fa:f8:a8:71:42:13:2d:7a:d3:38:11:af:54:7b:
91:30:d7:6e:08:49:bb:a1:4f:79:f4:25:48:ff:9b:
28:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F8:1B:31:36:31:1D:8B:5A:C1:13:4C:F1:73:13:EB:9D:26:A4:5D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143428.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a30a::/32
Signature Algorithm: sha256WithRSAEncryption
96:7a:7b:67:16:cb:7c:84:ae:8a:ca:3f:ec:b4:2e:5b:10:58:
1e:5a:a0:11:41:f6:ee:65:8c:12:22:3e:fd:6d:06:fd:18:80:
1d:d7:17:00:32:e6:81:b2:87:5f:a2:fe:22:39:9b:67:cc:85:
15:33:5e:ab:41:be:62:6d:a9:c6:84:45:23:75:74:fb:b9:c5:
95:8e:2c:f7:4f:31:f6:a0:fd:0e:bb:84:fc:22:e9:6a:2d:f5:
18:9f:eb:fc:b3:49:94:53:da:67:cd:e2:e2:20:61:2b:c2:92:
ea:64:70:82:df:90:e1:25:0d:1e:42:c6:4d:d4:34:28:ab:e0:
d6:16:a7:fd:b0:d7:06:33:fd:5e:3a:68:a4:e1:fb:cf:93:1b:
ea:d1:0a:8c:7a:6e:0b:04:e5:80:52:c5:d5:43:15:53:f5:db:
c9:c1:1a:63:a2:f4:63:c9:c5:ed:f6:fe:5c:73:a3:ac:e1:10:
c1:5b:db:8e:1f:15:83:ed:82:78:03:c6:f8:30:c4:0b:05:4a:
2a:16:a8:8c:91:21:65:fc:82:02:ff:e6:15:8c:52:48:92:50:
4e:5b:3d:6d:d8:d4:40:af:92:a5:14:79:e1:6b:70:f5:73:0f:
61:b8:af:77:4e:6b:f7:ad:c7:71:af:14:f8:ba:1b:29:54:ab:
85:08:b4:e1
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUXWl98lA1YNsedHNrOreIMwG/5TowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzM2MDNaFw0yNzA1MjEwNzQxMDNaMDMxMTAvBgNV
BAMTKDg3RjgxQjMxMzYzMTFEOEI1QUMxMTM0Q0YxNzMxM0VCOUQyNkE0NUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjf82OV440tmg6CeV8He+rDifa
3lXmxeJL3/NQTC5MeX59UCO8sP6Ct0cinPOh6+POYVwoxp+THdw7gkcDTBFAHJjP
HVzSznBRbKNOm63ex3wr/EoWoQYY3hopNsJXoIWclMKas1J4v3IgHEYzB4RBzD44
DTAf+nZmUVFmDMDjpJz3m5cUREKXjaZ5oycUbkWUT/yIWiXdp4hxbsbfTyYuZiFi
Qdrv7n7FgYk61NW3e7ohMzKQNIHtGtE6BlBlaaLnm/jLfCn1ynWBfr2et783wooC
bkSFD5/+omJGaXOvhPH6+KhxQhMtetM4Ea9Ue5Ew124ISbuhT3n0JUj/myibAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUh/gbMTYxHYtawRNM8XMT650mpF0wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzNDI4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqjCjANBgkqhkiG9w0BAQsFAAOCAQEAlnp7
ZxbLfISuiso/7LQuWxBYHlqgEUH27mWMEiI+/W0G/RiAHdcXADLmgbKHX6L+Ijmb
Z8yFFTNeq0G+Ym2pxoRFI3V0+7nFlY4s908x9qD9DruE/CLpai31GJ/r/LNJlFPa
Z83i4iBhK8KS6mRwgt+Q4SUNHkLGTdQ0KKvg1han/bDXBjP9XjpopOH7z5Mb6tEK
jHpuCwTlgFLF1UMVU/XbycEaY6L0Y8nF7fb+XHOjrOEQwVvbjh8Vg+2CeAPG+DDE
CwVKKhaojJEhZfyCAv/mFYxSSJJQTls9bdjUQK+SpRR54Wtw9XMPYbivd05r963H
ca8U+LobKVSrhQi04Q==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:03 2026 by rpki-client