Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143432.roa
File: AS143432.roa (raw, json)
Hash identifier: dtaIwTYAdzw6bEUE0Mx5wG5B+GYcR/ZeYiD7b6e+KKE=
Subject key identifier: B4:DF:AB:EF:D8:57:B4:04:44:F5:1E:72:9E:45:2F:89:3D:6A:28:E0
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 630D6081D7170BA766E821A49F6997FD8670CA1E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143432.roa
Signing time: Mon 25 May 2026 01:38:17 +0000
ROA not before: Mon 25 May 2026 01:33:17 +0000
ROA not after: Mon 24 May 2027 01:38:17 +0000
asID: 143432
IP address blocks: 240a:a30e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:0d:60:81:d7:17:0b:a7:66:e8:21:a4:9f:69:97:fd:86:70:ca:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:17 2026 GMT
Not After : May 24 01:38:17 2027 GMT
Subject: CN=B4DFABEFD857B40444F51E729E452F893D6A28E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:48:e8:40:3d:5f:06:fd:d7:81:af:35:b6:2f:
bf:e6:33:e5:f7:bc:4f:78:6a:2e:a2:df:1a:95:28:
e3:fa:8d:0c:3d:27:5a:89:39:40:99:5c:ee:2d:10:
91:c5:9b:3f:c6:3f:6b:c6:cb:30:14:90:71:24:17:
ed:a7:7a:0e:7b:8f:6c:a1:b5:5f:f8:7d:3f:94:c2:
14:fa:30:a9:b6:f4:dd:cd:10:09:10:7b:d1:2c:6f:
49:4b:74:98:4c:85:2c:d5:6f:19:52:ee:96:73:56:
f0:f4:93:b7:c9:8e:d3:a7:4c:89:62:05:4a:7b:ef:
1a:fc:7a:c4:90:81:e1:1d:e7:4f:e8:2e:f5:37:38:
1d:ec:3b:4e:41:00:c0:98:1c:ae:04:58:e6:93:5f:
0c:bc:62:de:06:2e:bb:ee:69:2f:7e:c0:71:6a:53:
e8:e3:1f:27:f0:32:10:bb:40:e3:d3:40:42:ed:55:
63:8e:15:86:d6:71:51:83:ee:ff:2b:6f:79:c9:f4:
ea:d4:28:bc:cb:f0:a9:8b:a2:ea:74:40:a6:30:28:
29:9a:e3:c1:48:0d:5e:c0:7b:43:76:d5:b7:3a:60:
b6:09:ef:94:55:a1:b8:cd:48:13:e7:c1:aa:81:7f:
8e:70:7f:64:18:ee:56:93:33:ad:fb:75:11:f7:9a:
f3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:DF:AB:EF:D8:57:B4:04:44:F5:1E:72:9E:45:2F:89:3D:6A:28:E0
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a30e::/32
Signature Algorithm: sha256WithRSAEncryption
4c:e0:36:a4:ff:17:16:fb:1e:d5:38:ee:05:fe:dd:fb:47:3a:
b0:53:48:41:61:d3:9b:e9:30:5c:60:01:ca:38:87:3f:de:fa:
f7:68:7f:cb:b8:81:a0:49:ea:85:3d:b1:0c:69:7a:49:0b:8d:
4d:e1:7f:a5:d9:bd:cd:3d:7f:eb:ab:b5:ed:3c:2c:08:68:f0:
c1:95:80:ee:1e:f5:b8:5b:2a:65:6f:08:08:73:a9:da:8f:72:
51:f0:86:5d:ac:d5:db:98:04:72:13:aa:32:d8:a1:57:e0:cd:
c1:06:68:2f:f9:2a:80:2b:e6:cb:de:90:a6:87:f9:76:19:1e:
b6:56:e5:c0:92:f3:32:b5:09:cc:db:28:1a:98:2e:c2:98:e1:
e4:aa:c3:17:47:50:61:3b:4b:5d:50:79:5f:2f:0e:43:5f:7b:
92:7f:8a:0b:bd:ad:d7:0e:94:3c:03:d5:f9:d7:74:c5:44:7e:
aa:5c:a1:5d:d4:c4:0d:51:ca:70:29:15:76:44:84:26:54:0f:
d1:d3:6c:b3:fb:cb:54:04:18:bf:eb:54:4d:60:97:0e:96:d7:
b1:4d:9e:02:3e:d7:67:23:2d:b7:05:25:8e:21:d5:78:82:0f:
50:40:a4:50:43:b0:67:09:c2:55:0d:31:5b:4c:6c:45:a0:b8:
d5:dd:19:35
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUYw1ggdcXC6dm6CGkn2mX/YZwyh4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTMzMTdaFw0yNzA1MjQwMTM4MTdaMDMxMTAvBgNV
BAMTKEI0REZBQkVGRDg1N0I0MDQ0NEY1MUU3MjlFNDUyRjg5M0Q2QTI4RTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXSOhAPV8G/deBrzW2L7/mM+X3
vE94ai6i3xqVKOP6jQw9J1qJOUCZXO4tEJHFmz/GP2vGyzAUkHEkF+2neg57j2yh
tV/4fT+UwhT6MKm29N3NEAkQe9Esb0lLdJhMhSzVbxlS7pZzVvD0k7fJjtOnTIli
BUp77xr8esSQgeEd50/oLvU3OB3sO05BAMCYHK4EWOaTXwy8Yt4GLrvuaS9+wHFq
U+jjHyfwMhC7QOPTQELtVWOOFYbWcVGD7v8rb3nJ9OrUKLzL8KmLoup0QKYwKCma
48FIDV7Ae0N21bc6YLYJ75RVobjNSBPnwaqBf45wf2QY7laTM637dRH3mvMBAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUtN+r79hXtARE9R5ynkUviT1qKOAwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzNDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqjDjANBgkqhkiG9w0BAQsFAAOCAQEATOA2
pP8XFvse1TjuBf7d+0c6sFNIQWHTm+kwXGAByjiHP97692h/y7iBoEnqhT2xDGl6
SQuNTeF/pdm9zT1/66u17TwsCGjwwZWA7h71uFsqZW8ICHOp2o9yUfCGXazV25gE
chOqMtihV+DNwQZoL/kqgCvmy96Qpof5dhketlblwJLzMrUJzNsoGpguwpjh5KrD
F0dQYTtLXVB5Xy8OQ197kn+KC72t1w6UPAPV+dd0xUR+qlyhXdTEDVHKcCkVdkSE
JlQP0dNss/vLVAQYv+tUTWCXDpbXsU2eAj7XZyMttwUljiHVeIIPUECkUEOwZwnC
VQ0xW0xsRaC41d0ZNQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:04 2026 by rpki-client