Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143534.roa
File: AS143534.roa (raw, json)
Hash identifier: TyEMqpMNIGeMx0uJ/AFU89SPD0+6POPZ8jE1yHS2OYM=
Subject key identifier: B7:AC:E2:F6:00:70:38:68:AE:51:4D:07:29:B3:22:67:9D:45:AC:E1
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0C808F6B35C9B627504F6363D52C2DEE0689CE12
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143534.roa
Signing time: Mon 25 May 2026 01:51:13 +0000
ROA not before: Mon 25 May 2026 01:46:13 +0000
ROA not after: Mon 24 May 2027 01:51:13 +0000
asID: 143534
IP address blocks: 240a:a374::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:80:8f:6b:35:c9:b6:27:50:4f:63:63:d5:2c:2d:ee:06:89:ce:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:13 2026 GMT
Not After : May 24 01:51:13 2027 GMT
Subject: CN=B7ACE2F600703868AE514D0729B322679D45ACE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:74:55:3c:10:3e:fe:23:40:76:e6:23:07:7b:
ca:e4:4c:bb:f2:00:08:f5:e4:ca:89:63:3f:55:8c:
29:8d:8a:78:bc:26:6c:2b:08:29:51:44:95:8e:db:
c3:61:4d:03:74:fc:f7:c1:8d:f6:ea:4b:ce:83:62:
fc:47:c0:5d:e1:c4:7d:4d:21:b2:cc:b0:eb:00:77:
06:55:ad:2b:b7:7d:04:32:9a:ff:0a:cd:71:61:af:
1e:dd:76:3a:98:e5:57:4b:9a:32:c9:3a:24:70:a6:
08:d3:93:47:c9:d3:44:24:62:a8:e6:37:de:80:84:
34:09:5a:56:0f:81:b5:e1:32:61:b5:01:1b:d8:a6:
2c:53:2e:f5:41:59:f0:6b:3b:e7:9b:8c:cb:51:58:
90:cf:6f:c4:f1:98:6c:ac:65:f0:e8:9b:3d:e5:f7:
db:23:01:04:b1:e9:3a:75:e6:10:bc:0d:98:a3:39:
a1:c0:2c:21:34:4c:f6:2a:53:02:b0:b9:de:04:c4:
e6:11:35:82:a5:24:0d:9e:c0:f6:0e:ee:b4:71:99:
e5:33:6e:b8:01:5d:c7:af:82:a5:10:a3:8b:28:6d:
87:96:e5:2b:85:22:ce:75:17:45:f7:47:59:9d:95:
8e:5b:61:71:54:c2:48:11:b3:c7:6c:cc:a6:c0:96:
de:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:AC:E2:F6:00:70:38:68:AE:51:4D:07:29:B3:22:67:9D:45:AC:E1
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a374::/32
Signature Algorithm: sha256WithRSAEncryption
15:db:91:7d:c8:a9:08:2b:aa:10:ad:7b:31:c0:20:ee:0e:d7:
d0:54:6b:76:32:10:97:b0:ba:e0:13:4c:06:ab:d8:b2:ff:bf:
e3:f1:83:cc:56:4e:5b:b8:d4:57:8f:b1:ad:71:81:7f:48:ba:
f6:94:c3:c5:1b:8e:d6:55:d9:9d:26:b6:78:ac:77:54:6c:1a:
79:39:26:5a:33:cd:c7:20:20:2a:76:4c:30:6d:33:0f:e0:af:
9b:cc:d1:f3:e2:c7:a1:11:3b:7a:54:5a:50:cb:6d:0e:55:62:
45:e0:3e:fc:dd:18:72:30:21:c6:f6:a5:0f:38:5c:fb:71:85:
1e:7f:70:29:0a:14:39:6c:6e:79:4b:07:d0:43:c3:cb:0d:33:
7d:07:ad:f4:93:10:8a:ac:03:46:5c:84:6b:c5:e9:f0:93:a5:
80:ab:9f:65:87:6c:c0:73:53:69:e7:84:4a:af:87:b0:34:91:
8e:7b:8f:82:c5:d6:ee:7e:98:ab:60:f9:35:ea:ac:a5:e5:e4:
e5:c7:74:79:37:a3:1e:5a:d9:b9:7c:67:70:09:8c:71:ad:fe:
b9:bc:bc:a5:87:2c:80:43:0a:97:2e:01:bf:f5:42:79:84:b1:
22:cb:59:22:a5:ea:5f:7e:ec:50:3a:58:82:c3:94:a4:13:d2:
db:8c:de:d8
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUDICPazXJtidQT2Nj1Swt7gaJzhIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTQ2MTNaFw0yNzA1MjQwMTUxMTNaMDMxMTAvBgNV
BAMTKEI3QUNFMkY2MDA3MDM4NjhBRTUxNEQwNzI5QjMyMjY3OUQ0NUFDRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDndFU8ED7+I0B25iMHe8rkTLvy
AAj15MqJYz9VjCmNini8JmwrCClRRJWO28NhTQN0/PfBjfbqS86DYvxHwF3hxH1N
IbLMsOsAdwZVrSu3fQQymv8KzXFhrx7ddjqY5VdLmjLJOiRwpgjTk0fJ00QkYqjm
N96AhDQJWlYPgbXhMmG1ARvYpixTLvVBWfBrO+ebjMtRWJDPb8TxmGysZfDomz3l
99sjAQSx6Tp15hC8DZijOaHALCE0TPYqUwKwud4ExOYRNYKlJA2ewPYO7rRxmeUz
brgBXcevgqUQo4sobYeW5SuFIs51F0X3R1mdlY5bYXFUwkgRs8dszKbAlt6dAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUt6zi9gBwOGiuUU0HKbMiZ51FrOEwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzNTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqjdDANBgkqhkiG9w0BAQsFAAOCAQEAFduR
fcipCCuqEK17McAg7g7X0FRrdjIQl7C64BNMBqvYsv+/4/GDzFZOW7jUV4+xrXGB
f0i69pTDxRuO1lXZnSa2eKx3VGwaeTkmWjPNxyAgKnZMMG0zD+Cvm8zR8+LHoRE7
elRaUMttDlViReA+/N0YcjAhxvalDzhc+3GFHn9wKQoUOWxueUsH0EPDyw0zfQet
9JMQiqwDRlyEa8Xp8JOlgKufZYdswHNTaeeESq+HsDSRjnuPgsXW7n6Yq2D5Neqs
peXk5cd0eTejHlrZuXxncAmMca3+uby8pYcsgEMKly4Bv/VCeYSxIstZIqXqX37s
UDpYgsOUpBPS24ze2A==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:19 2026 by rpki-client