Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143475.roa
File: AS143475.roa (raw, json)
Hash identifier: fxG/rcOBRz+/8b9lswM95E4n4rT66ha4v2KQAI+OpAk=
Subject key identifier: D8:F7:59:E7:C1:1E:38:FA:24:C4:0F:3F:C4:11:5A:35:45:04:63:E2
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 47304750A4964C78178139657D594CE86DFB20E9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143475.roa
Signing time: Tue 26 May 2026 01:13:28 +0000
ROA not before: Tue 26 May 2026 01:08:28 +0000
ROA not after: Tue 25 May 2027 01:13:28 +0000
asID: 143475
IP address blocks: 240a:a339::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:30:47:50:a4:96:4c:78:17:81:39:65:7d:59:4c:e8:6d:fb:20:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:28 2026 GMT
Not After : May 25 01:13:28 2027 GMT
Subject: CN=D8F759E7C11E38FA24C40F3FC4115A35450463E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:40:63:ca:7b:36:22:12:a0:0a:52:f0:73:f0:
3a:0a:fa:02:c8:10:8a:07:fd:71:1b:33:04:59:0b:
53:ea:61:0f:0d:32:d5:cb:b0:fd:b8:eb:3a:e4:29:
fa:4e:8b:26:4b:d8:c1:d2:16:42:fb:01:4c:cb:cd:
a4:ff:ba:0f:d7:48:47:e9:3f:c6:24:2b:fe:97:ea:
42:dc:17:fa:71:c5:36:b7:0e:ce:00:e1:e8:c3:f6:
d4:1b:cd:ef:f9:38:ad:18:c5:c4:53:f6:6c:58:3d:
99:f9:c1:2d:60:d4:6e:02:3e:20:d6:ef:16:38:27:
2a:d1:07:3a:f4:79:47:27:74:ad:89:f8:fb:2b:67:
aa:83:55:ac:f9:72:51:f9:9c:21:eb:85:5c:9b:73:
eb:da:e5:2b:ba:93:43:90:e2:dc:aa:29:b3:2c:d5:
0c:51:4a:a4:83:94:06:cb:13:31:97:d8:9e:82:b4:
3a:c4:64:97:a8:b6:97:c3:ad:67:fa:3e:51:90:43:
51:27:3b:b4:3a:43:8e:8d:de:6d:0f:40:51:e6:7d:
8b:1e:ad:0a:67:66:53:f5:cd:e5:3e:2a:ca:c9:85:
13:fb:c7:07:0c:12:8e:4f:19:79:a3:99:c7:b3:75:
ed:8c:5a:ae:32:35:3b:12:3f:f0:09:c0:50:a1:d5:
02:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F7:59:E7:C1:1E:38:FA:24:C4:0F:3F:C4:11:5A:35:45:04:63:E2
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143475.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a339::/32
Signature Algorithm: sha256WithRSAEncryption
a8:84:aa:1e:a4:a7:08:d9:e1:4e:14:96:2c:52:7d:7b:30:de:
de:ea:07:b3:e3:c0:24:56:a0:f6:ed:33:7d:6f:5c:10:22:46:
d6:96:88:4f:ee:fa:e5:e6:51:f7:ab:d9:9f:f7:b5:7a:fc:0c:
52:49:5e:46:79:53:26:3c:c1:9a:e5:f7:cf:24:1b:43:70:5d:
cd:a5:f9:cd:c2:33:19:1d:32:d8:4c:39:7e:7e:90:93:ec:14:
7f:df:48:62:5b:a1:45:a3:92:ff:c8:3f:fb:bd:f4:a6:cf:d4:
83:23:de:73:0b:97:f1:51:7f:6b:23:75:f3:45:52:9e:ec:32:
3b:a9:eb:6a:90:6c:3a:8e:1c:77:f7:0e:6e:a4:14:da:47:1f:
75:0e:b5:ae:0f:84:9e:72:6a:0c:93:2b:f4:9b:f7:d9:77:93:
71:ed:42:59:74:db:a6:73:ed:45:82:82:e6:e6:f6:26:35:80:
b2:5d:65:3a:f4:a0:d5:bc:78:6d:01:7f:3d:43:5e:b2:82:8c:
9c:ee:d4:15:d7:e8:19:ef:23:dd:dc:c1:89:d0:0b:00:d9:32:
26:d0:a3:cd:51:86:31:43:a2:ae:ca:91:1a:95:da:1c:cc:dc:
ba:c1:91:55:ba:5f:58:52:c6:5b:54:f7:64:53:b3:78:15:1b:
f7:43:c8:c9
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIURzBHUKSWTHgXgTllfVlM6G37IOkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMTA4MjhaFw0yNzA1MjUwMTEzMjhaMDMxMTAvBgNV
BAMTKEQ4Rjc1OUU3QzExRTM4RkEyNEM0MEYzRkM0MTE1QTM1NDUwNDYzRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1QGPKezYiEqAKUvBz8DoK+gLI
EIoH/XEbMwRZC1PqYQ8NMtXLsP246zrkKfpOiyZL2MHSFkL7AUzLzaT/ug/XSEfp
P8YkK/6X6kLcF/pxxTa3Ds4A4ejD9tQbze/5OK0YxcRT9mxYPZn5wS1g1G4CPiDW
7xY4JyrRBzr0eUcndK2J+PsrZ6qDVaz5clH5nCHrhVybc+va5Su6k0OQ4tyqKbMs
1QxRSqSDlAbLEzGX2J6CtDrEZJeotpfDrWf6PlGQQ1EnO7Q6Q46N3m0PQFHmfYse
rQpnZlP1zeU+KsrJhRP7xwcMEo5PGXmjmcezde2MWq4yNTsSP/AJwFCh1QJzAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU2PdZ58EeOPokxA8/xBFaNUUEY+IwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzNDc1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqjOTANBgkqhkiG9w0BAQsFAAOCAQEAqISq
HqSnCNnhThSWLFJ9ezDe3uoHs+PAJFag9u0zfW9cECJG1paIT+765eZR96vZn/e1
evwMUkleRnlTJjzBmuX3zyQbQ3BdzaX5zcIzGR0y2Ew5fn6Qk+wUf99IYluhRaOS
/8g/+730ps/UgyPecwuX8VF/ayN180VSnuwyO6nrapBsOo4cd/cObqQU2kcfdQ61
rg+EnnJqDJMr9Jv32XeTce1CWXTbpnPtRYKC5ub2JjWAsl1lOvSg1bx4bQF/PUNe
soKMnO7UFdfoGe8j3dzBidALANkyJtCjzVGGMUOirsqRGpXaHMzcusGRVbpfWFLG
W1T3ZFOzeBUb90PIyQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:09 2026 by rpki-client