Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143532.roa
File: AS143532.roa (raw, json)
Hash identifier: xEW1e6jFcDUoUR/O/v29GBxW5RKhHfMGwsdqdV7J/64=
Subject key identifier: 63:41:25:BB:15:F8:6B:A6:8A:CE:0F:D6:1A:3B:7A:96:D3:C2:9E:05
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 117C981A022E70DA92D71BC71F8A633F377D9D92
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143532.roa
Signing time: Fri 22 May 2026 07:32:25 +0000
ROA not before: Fri 22 May 2026 07:27:25 +0000
ROA not after: Fri 21 May 2027 07:32:25 +0000
asID: 143532
IP address blocks: 240a:a372::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:7c:98:1a:02:2e:70:da:92:d7:1b:c7:1f:8a:63:3f:37:7d:9d:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:25 2026 GMT
Not After : May 21 07:32:25 2027 GMT
Subject: CN=634125BB15F86BA68ACE0FD61A3B7A96D3C29E05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:23:f2:02:69:f6:36:cb:ac:9d:5c:58:67:70:
5d:8e:55:b9:44:82:14:00:3b:55:52:0d:c8:44:8c:
dd:47:f7:cb:43:13:96:1f:8c:68:ca:0a:11:53:75:
15:27:04:e9:5a:06:c6:01:95:e3:3d:2b:f4:08:e7:
e7:f3:d6:91:75:22:19:24:fa:62:e6:cb:ae:0f:dc:
79:bf:8e:c0:2a:e0:ed:9a:c6:57:db:cb:a8:19:27:
e3:de:2d:44:6e:02:65:a0:29:85:59:db:a0:db:f3:
fd:d4:95:c7:b6:db:57:73:56:95:4c:50:83:6d:36:
70:e8:9c:87:12:a3:66:6d:c9:7a:8c:75:a7:d5:f3:
fb:28:fc:e3:b7:fb:5b:21:01:25:ca:fe:df:e8:72:
8d:05:75:54:26:e9:4b:7f:88:6e:45:32:43:b0:d5:
7d:c8:b1:4a:7f:22:d8:7b:42:51:33:34:4c:37:d5:
f0:45:84:e8:60:e9:bb:79:00:76:9f:cb:25:d0:e0:
80:38:4f:34:dd:df:73:dd:f9:64:63:7f:63:e4:07:
d6:c5:3b:5f:dd:8e:ec:d3:6f:74:04:3a:a0:19:f4:
bc:5e:ac:0c:66:f5:ff:79:f7:90:00:fb:ba:7f:c4:
dc:ec:b0:5d:a4:58:85:2d:3c:a4:61:f9:ef:65:82:
72:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:41:25:BB:15:F8:6B:A6:8A:CE:0F:D6:1A:3B:7A:96:D3:C2:9E:05
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a372::/32
Signature Algorithm: sha256WithRSAEncryption
77:f4:cf:ae:45:6c:1e:de:78:7a:79:9a:19:c8:74:87:3a:f9:
db:af:1e:3a:1e:51:9c:7b:f2:27:6f:7f:42:e0:d6:a7:7a:40:
44:50:04:89:cf:8d:da:97:c2:e4:52:82:f7:1a:b2:24:cd:aa:
84:1e:9d:34:a4:b4:b6:59:4d:0c:2b:fe:02:45:d9:39:5c:cc:
b3:65:d2:11:9b:f8:b6:8c:5f:50:98:db:e4:fc:3f:48:06:96:
4b:00:5b:68:47:93:48:5e:0f:4b:fa:9b:ae:45:81:95:47:1d:
1b:66:03:8e:3f:bc:7a:05:22:d2:7e:49:34:2c:5d:72:37:fa:
a3:41:ba:88:a3:a3:8b:ca:58:21:80:46:5b:75:ca:73:18:e0:
5d:2b:2a:9f:cb:87:43:2e:9b:52:bd:2d:c0:d3:e9:eb:6c:1f:
31:a9:2b:06:4d:7c:09:6c:4a:a8:e5:75:b0:fe:51:44:fc:43:
2b:cb:1d:d6:80:77:29:f2:5c:55:01:5a:e4:e6:7d:41:88:79:
31:cc:9a:32:51:93:a8:3a:11:a7:39:90:eb:02:a7:d4:a2:f6:
96:d5:4e:bb:32:e3:07:52:e2:3e:96:0e:90:8b:bd:5d:37:e3:
2b:35:2a:bc:15:35:e8:41:44:d4:c4:36:9f:e7:bf:ac:cf:d9:
37:85:41:35
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUEXyYGgIucNqS1xvHH4pjPzd9nZIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzI3MjVaFw0yNzA1MjEwNzMyMjVaMDMxMTAvBgNV
BAMTKDYzNDEyNUJCMTVGODZCQTY4QUNFMEZENjFBM0I3QTk2RDNDMjlFMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5I/ICafY2y6ydXFhncF2OVblE
ghQAO1VSDchEjN1H98tDE5YfjGjKChFTdRUnBOlaBsYBleM9K/QI5+fz1pF1Ihkk
+mLmy64P3Hm/jsAq4O2axlfby6gZJ+PeLURuAmWgKYVZ26Db8/3Ulce221dzVpVM
UINtNnDonIcSo2ZtyXqMdafV8/so/OO3+1shASXK/t/oco0FdVQm6Ut/iG5FMkOw
1X3IsUp/Ith7QlEzNEw31fBFhOhg6bt5AHafyyXQ4IA4TzTd33Pd+WRjf2PkB9bF
O1/djuzTb3QEOqAZ9LxerAxm9f9595AA+7p/xNzssF2kWIUtPKRh+e9lgnLjAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUY0EluxX4a6aKzg/WGjt6ltPCngUwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqjcjANBgkqhkiG9w0BAQsFAAOCAQEAd/TP
rkVsHt54enmaGch0hzr5268eOh5RnHvyJ29/QuDWp3pARFAEic+N2pfC5FKC9xqy
JM2qhB6dNKS0tllNDCv+AkXZOVzMs2XSEZv4toxfUJjb5Pw/SAaWSwBbaEeTSF4P
S/qbrkWBlUcdG2YDjj+8egUi0n5JNCxdcjf6o0G6iKOji8pYIYBGW3XKcxjgXSsq
n8uHQy6bUr0twNPp62wfMakrBk18CWxKqOV1sP5RRPxDK8sd1oB3KfJcVQFa5OZ9
QYh5McyaMlGTqDoRpzmQ6wKn1KL2ltVOuzLjB1LiPpYOkIu9XTfjKzUqvBU16EFE
1MQ2n+e/rM/ZN4VBNQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:14 2026 by rpki-client