Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143499.roa
File: AS143499.roa (raw, json)
Hash identifier: RIN/hswFPvMOySnGHqddkTYfLC/jTHUZOBQDwketT44=
Subject key identifier: 4A:C0:09:98:EA:29:C2:93:B5:15:15:B6:3C:E5:1F:3E:E3:EB:03:67
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 649A5D8B7634849AE6BF54C0CE551C90191A1645
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143499.roa
Signing time: Mon 25 May 2026 01:20:03 +0000
ROA not before: Mon 25 May 2026 01:15:03 +0000
ROA not after: Mon 24 May 2027 01:20:03 +0000
asID: 143499
IP address blocks: 240a:a351::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:9a:5d:8b:76:34:84:9a:e6:bf:54:c0:ce:55:1c:90:19:1a:16:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:03 2026 GMT
Not After : May 24 01:20:03 2027 GMT
Subject: CN=4AC00998EA29C293B51515B63CE51F3EE3EB0367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:75:b9:1d:b7:e1:30:79:e9:34:04:46:aa:ef:
28:26:3c:97:30:4a:09:40:a6:45:e2:5f:0f:99:06:
32:b6:48:ca:e8:6b:31:6e:1f:03:b1:bf:62:3d:aa:
8b:17:a6:94:be:52:fa:bf:5b:bc:0d:94:53:05:5c:
6b:92:b2:7b:3e:eb:e4:94:86:83:0c:0e:eb:ff:02:
de:9e:5a:02:4b:75:e9:64:53:8e:75:98:33:c6:7a:
58:96:61:ee:fe:f9:76:93:c4:0c:da:78:52:13:10:
34:6e:de:95:d6:a0:71:d6:d3:7d:53:6f:86:e8:a6:
0b:ab:c8:02:99:fd:c4:d2:d6:5b:a2:08:34:c0:55:
e3:7b:ed:06:1b:49:50:62:f3:dd:da:9e:81:93:0a:
ce:75:de:d3:8c:96:63:ae:47:81:65:23:a7:d1:bf:
85:c7:ec:86:5e:cf:9b:ca:99:78:1a:4d:70:b5:d7:
69:d6:3c:90:57:1c:d4:c4:ab:40:1e:e7:0b:5c:c2:
35:71:53:f4:8f:0d:21:ca:a8:53:d2:6a:73:34:64:
34:0d:22:b4:8f:7c:fd:dc:96:9f:08:fc:4e:e0:d2:
07:e7:73:c2:ea:4f:a9:c1:42:d5:48:4b:f8:35:b7:
f6:50:07:8e:08:c9:ee:52:7b:75:53:c4:87:f9:7a:
b8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C0:09:98:EA:29:C2:93:B5:15:15:B6:3C:E5:1F:3E:E3:EB:03:67
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143499.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a351::/32
Signature Algorithm: sha256WithRSAEncryption
3a:9b:6b:c6:c7:4a:8e:65:5e:75:09:8b:97:06:23:7b:bc:a8:
35:58:05:bc:b2:01:57:0d:c9:10:87:46:60:39:27:69:c5:45:
f9:6b:b3:a5:d5:9d:04:07:b7:51:a7:c3:47:d5:e3:34:6b:53:
70:25:ac:31:2f:56:d4:ad:ba:45:ae:f4:37:02:12:af:1f:b8:
a7:b2:7f:c1:2b:2e:6a:c2:94:f1:ef:83:d5:1d:c3:a6:c2:7b:
1f:9d:37:7c:2b:0e:3c:fd:31:3f:37:27:7e:fe:3c:67:84:0e:
9e:c8:01:7d:56:1f:75:c0:f1:7e:26:5d:ce:12:64:17:c5:22:
b3:f6:d2:30:39:77:03:85:56:5d:5b:ca:9d:bc:a5:69:5a:a7:
2c:e5:4c:df:37:bd:2c:90:60:05:a7:f0:67:01:c5:d3:f6:30:
71:c2:22:4c:58:93:c0:75:ca:b3:5b:cb:e5:ec:0e:13:41:90:
a2:69:fe:5b:48:cf:9f:91:65:25:82:36:7d:d1:ca:7a:7c:18:
0c:8f:43:8c:59:03:35:93:98:94:bf:d4:51:d1:31:3e:22:09:
79:39:bd:60:b3:14:71:ab:34:cd:69:2a:9c:6b:ac:6f:4b:4b:
a3:d0:59:da:6f:b1:39:7b:d7:68:1d:af:c5:96:3b:a7:78:14:
7b:cc:36:dc
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUZJpdi3Y0hJrmv1TAzlUckBkaFkUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTE1MDNaFw0yNzA1MjQwMTIwMDNaMDMxMTAvBgNV
BAMTKDRBQzAwOTk4RUEyOUMyOTNCNTE1MTVCNjNDRTUxRjNFRTNFQjAzNjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWdbkdt+Eweek0BEaq7ygmPJcw
SglApkXiXw+ZBjK2SMroazFuHwOxv2I9qosXppS+Uvq/W7wNlFMFXGuSsns+6+SU
hoMMDuv/At6eWgJLdelkU451mDPGeliWYe7++XaTxAzaeFITEDRu3pXWoHHW031T
b4bopguryAKZ/cTS1luiCDTAVeN77QYbSVBi893anoGTCs513tOMlmOuR4FlI6fR
v4XH7IZez5vKmXgaTXC112nWPJBXHNTEq0Ae5wtcwjVxU/SPDSHKqFPSanM0ZDQN
IrSPfP3clp8I/E7g0gfnc8LqT6nBQtVIS/g1t/ZQB44Iye5Se3VTxIf5erhTAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUSsAJmOopwpO1FRW2POUfPuPrA2cwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzNDk5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqjUTANBgkqhkiG9w0BAQsFAAOCAQEAOptr
xsdKjmVedQmLlwYje7yoNVgFvLIBVw3JEIdGYDknacVF+WuzpdWdBAe3UafDR9Xj
NGtTcCWsMS9W1K26Ra70NwISrx+4p7J/wSsuasKU8e+D1R3DpsJ7H503fCsOPP0x
Pzcnfv48Z4QOnsgBfVYfdcDxfiZdzhJkF8Uis/bSMDl3A4VWXVvKnbylaVqnLOVM
3ze9LJBgBafwZwHF0/YwccIiTFiTwHXKs1vL5ewOE0GQomn+W0jPn5FlJYI2fdHK
enwYDI9DjFkDNZOYlL/UUdExPiIJeTm9YLMUcas0zWkqnGusb0tLo9BZ2m+xOXvX
aB2vxZY7p3gUe8w23A==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:57 2026 by rpki-client