Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143474.roa
File: AS143474.roa (raw, json)
Hash identifier: iCzn36NakloJPJ/Da/PX0hauGNyWSo8XLnP3p3a2MmI=
Subject key identifier: 6C:19:4A:F9:68:8F:F9:40:DD:11:C9:AA:21:01:E3:97:9F:7E:9C:23
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0EF6AF99C9960CE92425B1158FB6CBC0737402AA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143474.roa
Signing time: Fri 22 May 2026 07:08:55 +0000
ROA not before: Fri 22 May 2026 07:03:55 +0000
ROA not after: Fri 21 May 2027 07:08:55 +0000
asID: 143474
IP address blocks: 240a:a338::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:f6:af:99:c9:96:0c:e9:24:25:b1:15:8f:b6:cb:c0:73:74:02:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:03:55 2026 GMT
Not After : May 21 07:08:55 2027 GMT
Subject: CN=6C194AF9688FF940DD11C9AA2101E3979F7E9C23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:01:96:5a:8d:b9:56:c6:18:39:1c:39:53:f3:
5a:5f:10:73:98:f8:e5:ef:18:11:b4:82:e1:3f:c0:
3b:ea:c5:9b:dd:49:61:81:c2:a1:4a:6c:66:33:d1:
2d:87:e6:c9:1b:56:0f:3d:be:1c:2c:2d:70:b3:a1:
50:fd:36:2d:8a:00:fa:cb:78:3d:fd:aa:25:76:99:
97:5c:5e:13:64:8d:dd:c2:3f:26:a8:70:20:66:17:
69:6d:c1:2e:5c:b9:1b:17:1b:57:2d:d0:3e:b1:90:
37:98:31:fc:eb:e7:c7:3f:e5:5d:fb:5f:5f:27:7a:
98:bc:e2:87:47:9b:ac:55:63:6b:54:b8:f5:0b:a1:
24:5c:ec:71:23:b2:ac:99:fe:56:a1:ac:fd:9d:58:
43:a2:ba:60:00:f9:8d:db:fe:fc:00:35:dd:28:b2:
2d:99:0f:8f:0f:09:25:f9:d8:4b:de:29:23:e5:99:
62:12:d1:e7:a2:8c:97:4b:56:09:32:fd:d8:a3:c7:
67:8e:33:a0:63:3e:22:5f:34:01:52:ab:d4:ed:d3:
05:98:dc:35:8a:84:f2:ad:f7:7e:3e:ea:23:10:36:
3b:95:5c:50:58:d0:a9:14:2b:ee:89:43:ab:c7:32:
0f:19:43:11:26:7c:6d:63:5b:05:83:07:15:83:cb:
fe:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:19:4A:F9:68:8F:F9:40:DD:11:C9:AA:21:01:E3:97:9F:7E:9C:23
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143474.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a338::/32
Signature Algorithm: sha256WithRSAEncryption
81:24:c2:d8:0d:b3:20:15:51:e3:98:a4:3f:bb:d4:2e:f4:06:
65:fa:2a:30:28:29:11:b8:d6:49:80:a1:82:fb:34:1c:a5:ab:
6e:16:f9:7c:8e:3c:93:4d:b0:4d:98:8a:95:6f:c6:0b:2f:0a:
8c:23:6a:20:20:24:0e:ae:bc:ff:06:70:c3:8d:49:52:27:c0:
b7:02:6a:85:15:43:d0:c0:bd:1f:66:92:6b:3c:ae:e4:74:69:
21:e6:83:dc:cc:25:df:98:79:8a:ce:42:41:ea:62:be:12:db:
7f:70:e0:18:1d:30:a0:e8:bc:c2:f0:9d:bb:95:ed:4b:05:c3:
9a:4c:a1:71:b2:31:2e:b5:0f:cb:31:39:df:b1:1a:11:15:cf:
82:a6:64:2d:25:cd:ec:b8:d0:a0:74:a5:c7:4b:cd:ab:52:88:
48:b8:2f:de:35:30:fc:a2:05:65:b1:18:2c:8f:64:1e:38:1b:
1e:7c:36:ef:9b:77:23:50:c2:e4:a2:c5:29:d4:68:1f:34:a7:
f3:b8:c6:8f:97:98:bb:07:09:bb:f0:c0:f0:8f:57:ae:c2:f5:
e5:3c:c9:f5:4d:2f:e9:ee:d4:23:49:bd:14:ea:94:90:dc:d7:
fe:96:3f:b5:8b:f8:d1:d8:17:c3:60:04:aa:53:ac:d3:91:11:
da:43:d2:4c
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUDvavmcmWDOkkJbEVj7bLwHN0AqowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzAzNTVaFw0yNzA1MjEwNzA4NTVaMDMxMTAvBgNV
BAMTKDZDMTk0QUY5Njg4RkY5NDBERDExQzlBQTIxMDFFMzk3OUY3RTlDMjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeAZZajblWxhg5HDlT81pfEHOY
+OXvGBG0guE/wDvqxZvdSWGBwqFKbGYz0S2H5skbVg89vhwsLXCzoVD9Ni2KAPrL
eD39qiV2mZdcXhNkjd3CPyaocCBmF2ltwS5cuRsXG1ct0D6xkDeYMfzr58c/5V37
X18nepi84odHm6xVY2tUuPULoSRc7HEjsqyZ/lahrP2dWEOiumAA+Y3b/vwANd0o
si2ZD48PCSX52EveKSPlmWIS0eeijJdLVgky/dijx2eOM6BjPiJfNAFSq9Tt0wWY
3DWKhPKt934+6iMQNjuVXFBY0KkUK+6JQ6vHMg8ZQxEmfG1jWwWDBxWDy/4LAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUbBlK+WiP+UDdEcmqIQHjl59+nCMwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzNDc0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqjODANBgkqhkiG9w0BAQsFAAOCAQEAgSTC
2A2zIBVR45ikP7vULvQGZfoqMCgpEbjWSYChgvs0HKWrbhb5fI48k02wTZiKlW/G
Cy8KjCNqICAkDq68/wZww41JUifAtwJqhRVD0MC9H2aSazyu5HRpIeaD3Mwl35h5
is5CQepivhLbf3DgGB0woOi8wvCdu5XtSwXDmkyhcbIxLrUPyzE537EaERXPgqZk
LSXN7LjQoHSlx0vNq1KISLgv3jUw/KIFZbEYLI9kHjgbHnw275t3I1DC5KLFKdRo
HzSn87jGj5eYuwcJu/DA8I9XrsL15TzJ9U0v6e7UI0m9FOqUkNzX/pY/tYv40dgX
w2AEqlOs05ER2kPSTA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:05 2026 by rpki-client