Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143440.roa
File: AS143440.roa (raw, json)
Hash identifier: HASyMi2Kb5f2NvmiMmlokoINyVnteJh4oKzxE3F1Z24=
Subject key identifier: D4:20:53:81:F9:9B:1C:05:6E:3F:1F:7B:24:F4:F8:B2:C4:AC:CD:90
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 697D521D1F352111E109736BF1933C1E222C3EFF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143440.roa
Signing time: Fri 22 May 2026 07:41:12 +0000
ROA not before: Fri 22 May 2026 07:36:12 +0000
ROA not after: Fri 21 May 2027 07:41:12 +0000
asID: 143440
IP address blocks: 240a:a316::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:7d:52:1d:1f:35:21:11:e1:09:73:6b:f1:93:3c:1e:22:2c:3e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:36:12 2026 GMT
Not After : May 21 07:41:12 2027 GMT
Subject: CN=D4205381F99B1C056E3F1F7B24F4F8B2C4ACCD90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:64:d7:9a:61:9b:a7:7e:6e:33:8e:1b:7f:02:
8c:06:d6:37:9e:67:98:7e:2d:c5:a7:ea:30:aa:b5:
a0:82:fa:74:4d:be:a4:a9:b4:4d:c5:81:59:92:ff:
c9:f5:11:22:80:85:91:17:4d:fd:a5:f8:5d:7f:74:
42:d0:d1:c5:a8:07:06:62:b6:dd:e7:a7:a5:43:0f:
c3:11:f9:c8:c6:3d:f3:37:49:8d:84:6c:65:b3:b4:
8b:f7:2c:9f:31:a6:71:ed:78:ae:33:ff:11:d5:1b:
04:a0:70:9c:9e:4f:3a:d5:ba:05:bf:f7:53:51:e9:
b8:6e:bf:34:5a:37:85:8d:87:74:0f:66:5f:68:b7:
a2:16:5c:05:2f:b4:9e:d3:d9:09:b2:52:f9:65:2a:
c3:4c:86:65:7b:06:64:df:a4:86:2c:69:dd:dd:88:
40:4a:f9:22:8a:5d:e1:69:06:dc:97:95:63:5d:5c:
79:fa:11:a9:fa:fe:28:0a:6f:c6:bd:ee:61:bb:8c:
34:b2:3c:70:63:e7:37:c6:c7:23:e3:e1:1e:f4:8e:
cd:d8:69:20:18:62:d4:6e:6d:14:01:bb:a2:f1:80:
e4:0a:04:93:be:43:9b:70:75:96:69:02:e1:a2:b7:
cc:8d:9c:c4:0c:25:ed:a5:64:84:9a:db:a0:53:0e:
72:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:20:53:81:F9:9B:1C:05:6E:3F:1F:7B:24:F4:F8:B2:C4:AC:CD:90
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143440.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a316::/32
Signature Algorithm: sha256WithRSAEncryption
92:37:5a:96:e7:b6:41:ec:b6:e9:e7:90:a7:78:89:98:50:f7:
98:ca:d7:f5:47:20:c7:8e:81:a6:e5:b4:0b:51:8f:6a:d4:42:
08:31:06:0b:89:6f:da:73:5c:91:a5:41:78:76:fe:bf:be:5d:
c4:b0:e1:f1:a8:33:c6:f8:a2:7e:e5:86:ea:87:ce:c3:84:95:
ad:ec:1b:fc:71:58:d5:f4:b8:16:35:d3:ad:26:b4:53:9f:17:
86:e6:3b:22:b2:b4:c9:c6:53:8a:4c:97:65:d9:43:d7:63:2e:
7a:a0:dd:06:1f:de:d0:4d:97:73:53:7e:cf:88:e0:ce:81:ff:
4d:9d:61:ba:ea:68:b2:68:00:68:74:75:7e:db:61:41:b3:d4:
de:7f:22:e7:24:1a:f9:d3:8a:ad:02:52:3c:82:61:05:ee:dc:
a9:67:3d:7b:7b:7d:b9:0a:38:6a:cc:8a:14:8f:f8:52:32:9e:
53:e7:89:c8:ff:b5:eb:d0:47:8e:22:5e:bc:0d:4b:24:ef:23:
63:d2:90:90:0e:da:63:31:7a:80:15:5e:90:82:3e:ea:1d:6c:
37:a0:a0:9d:8a:a3:71:1c:38:f5:77:97:46:4d:50:7b:0c:fa:
29:9a:1e:47:cf:12:e8:72:30:66:6e:15:07:35:ce:db:33:08:
18:5d:93:77
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUaX1SHR81IRHhCXNr8ZM8HiIsPv8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzM2MTJaFw0yNzA1MjEwNzQxMTJaMDMxMTAvBgNV
BAMTKEQ0MjA1MzgxRjk5QjFDMDU2RTNGMUY3QjI0RjRGOEIyQzRBQ0NEOTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6ZNeaYZunfm4zjht/AowG1jee
Z5h+LcWn6jCqtaCC+nRNvqSptE3FgVmS/8n1ESKAhZEXTf2l+F1/dELQ0cWoBwZi
tt3np6VDD8MR+cjGPfM3SY2EbGWztIv3LJ8xpnHteK4z/xHVGwSgcJyeTzrVugW/
91NR6bhuvzRaN4WNh3QPZl9ot6IWXAUvtJ7T2QmyUvllKsNMhmV7BmTfpIYsad3d
iEBK+SKKXeFpBtyXlWNdXHn6Ean6/igKb8a97mG7jDSyPHBj5zfGxyPj4R70js3Y
aSAYYtRubRQBu6LxgOQKBJO+Q5twdZZpAuGit8yNnMQMJe2lZISa26BTDnI7AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU1CBTgfmbHAVuPx97JPT4ssSszZAwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzNDQwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqjFjANBgkqhkiG9w0BAQsFAAOCAQEAkjda
lue2Qey26eeQp3iJmFD3mMrX9Ucgx46BpuW0C1GPatRCCDEGC4lv2nNckaVBeHb+
v75dxLDh8agzxviifuWG6ofOw4SVrewb/HFY1fS4FjXTrSa0U58XhuY7IrK0ycZT
ikyXZdlD12MueqDdBh/e0E2Xc1N+z4jgzoH/TZ1huuposmgAaHR1ftthQbPU3n8i
5yQa+dOKrQJSPIJhBe7cqWc9e3t9uQo4asyKFI/4UjKeU+eJyP+169BHjiJevA1L
JO8jY9KQkA7aYzF6gBVekII+6h1sN6CgnYqjcRw49XeXRk1Qewz6KZoeR88S6HIw
Zm4VBzXO2zMIGF2Tdw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:38 2026 by rpki-client