Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143538.roa
File: AS143538.roa (raw, json)
Hash identifier: MRPIprk7vIu7/wKHU9G6Kgn1t0CmStedxJVFAgTx+2Q=
Subject key identifier: C3:2E:06:F0:C6:F7:08:EE:65:F4:90:F6:45:83:75:A3:00:D1:E0:2E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1FAA4B17E81BB4CD154EFE35EA77FB38C5A0CC1D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143538.roa
Signing time: Fri 22 May 2026 04:08:27 +0000
ROA not before: Fri 22 May 2026 04:03:27 +0000
ROA not after: Fri 21 May 2027 04:08:27 +0000
asID: 143538
IP address blocks: 240a:a378::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:aa:4b:17:e8:1b:b4:cd:15:4e:fe:35:ea:77:fb:38:c5:a0:cc:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:27 2026 GMT
Not After : May 21 04:08:27 2027 GMT
Subject: CN=C32E06F0C6F708EE65F490F6458375A300D1E02E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:43:b1:f2:45:96:bc:4e:4a:61:1b:b0:b9:ca:
1b:da:38:d3:fd:c3:78:cd:42:df:94:d8:d4:38:ce:
32:09:4d:3e:09:75:45:ed:37:48:59:ea:37:a1:82:
c5:a9:b0:48:21:1f:92:fc:24:53:ad:c6:e4:a6:bc:
fe:a9:2e:ae:6c:07:14:3e:02:ee:91:86:fd:d3:dd:
e8:3a:30:f9:42:73:b4:59:a8:a4:e6:88:60:ad:38:
53:f9:4b:35:2d:b7:23:80:81:c8:e1:02:99:4c:81:
e3:8b:66:4a:cc:d1:8f:a0:bc:f4:86:7e:8b:f5:0e:
9f:c3:5c:42:95:50:1d:84:fb:15:45:9c:9d:f9:d6:
c9:fd:e8:4a:ea:ab:2d:23:ff:67:3a:13:99:cb:e3:
32:9a:56:14:9d:7f:c0:4b:ce:ca:00:8b:5b:11:7b:
5c:97:3b:ab:8d:52:97:df:ec:90:a0:98:7a:2d:39:
f0:44:b5:fb:21:2d:f6:b5:e5:c2:41:d0:3b:89:98:
7d:d8:b0:d5:d3:bc:25:6c:5b:42:9c:4a:1d:5d:83:
7a:58:6e:47:b9:58:dc:43:2d:6e:de:00:d1:a2:0a:
39:17:8d:b8:cb:1e:f3:61:60:e4:53:17:02:c6:76:
06:46:df:62:f2:e6:fd:1d:16:ec:6d:b5:8e:af:a3:
86:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:2E:06:F0:C6:F7:08:EE:65:F4:90:F6:45:83:75:A3:00:D1:E0:2E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a378::/32
Signature Algorithm: sha256WithRSAEncryption
4a:d5:d1:cf:5e:81:b6:aa:a6:ab:25:47:a5:c7:eb:b0:9f:5a:
bc:cb:b0:f3:76:f5:a0:cf:d2:b1:13:4f:cb:73:cd:5e:81:50:
ff:d8:ed:4b:f5:43:2b:94:ac:9d:24:f4:1e:a2:46:7a:03:0d:
2a:1d:e5:90:a9:35:fb:f9:0f:94:a5:ed:28:a7:41:54:1c:60:
57:b3:72:10:4c:b3:35:5f:dd:68:ae:49:ad:d6:90:46:49:e4:
a1:11:52:b8:9a:22:65:c3:fa:75:0a:aa:90:76:ff:52:a2:c2:
ba:a6:c3:d6:35:85:b2:21:c7:7b:16:69:53:3d:81:33:82:02:
90:ae:f5:a9:2c:68:11:a7:89:dd:15:fe:ae:8d:3c:48:ed:d6:
6e:b0:76:68:6e:de:1a:8a:ab:d7:24:f9:78:74:d3:b0:04:23:
0c:b2:ba:a1:3d:55:d9:ea:b3:d6:fa:46:9b:49:f2:c1:16:88:
9a:5d:37:4b:b4:7b:8a:11:1e:ca:ce:9f:07:e7:f5:be:16:bb:
d4:48:fd:9e:e4:8f:c4:58:7a:66:81:28:9b:dd:55:23:40:46:
86:d0:9c:9a:57:15:0c:b6:f8:d3:58:ae:c8:b7:a8:41:48:9e:
6c:7d:af:41:02:f0:dc:03:d2:cd:b3:09:0f:48:c4:57:6c:20:
2f:47:a2:dc
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUH6pLF+gbtM0VTv416nf7OMWgzB0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNDAzMjdaFw0yNzA1MjEwNDA4MjdaMDMxMTAvBgNV
BAMTKEMzMkUwNkYwQzZGNzA4RUU2NUY0OTBGNjQ1ODM3NUEzMDBEMUUwMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQQ7HyRZa8TkphG7C5yhvaONP9
w3jNQt+U2NQ4zjIJTT4JdUXtN0hZ6jehgsWpsEghH5L8JFOtxuSmvP6pLq5sBxQ+
Au6Rhv3T3eg6MPlCc7RZqKTmiGCtOFP5SzUttyOAgcjhAplMgeOLZkrM0Y+gvPSG
fov1Dp/DXEKVUB2E+xVFnJ351sn96Erqqy0j/2c6E5nL4zKaVhSdf8BLzsoAi1sR
e1yXO6uNUpff7JCgmHotOfBEtfshLfa15cJB0DuJmH3YsNXTvCVsW0KcSh1dg3pY
bke5WNxDLW7eANGiCjkXjbjLHvNhYORTFwLGdgZG32Ly5v0dFuxttY6vo4bNAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUwy4G8Mb3CO5l9JD2RYN1owDR4C4wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqjeDANBgkqhkiG9w0BAQsFAAOCAQEAStXR
z16BtqqmqyVHpcfrsJ9avMuw83b1oM/SsRNPy3PNXoFQ/9jtS/VDK5SsnST0HqJG
egMNKh3lkKk1+/kPlKXtKKdBVBxgV7NyEEyzNV/daK5JrdaQRknkoRFSuJoiZcP6
dQqqkHb/UqLCuqbD1jWFsiHHexZpUz2BM4ICkK71qSxoEaeJ3RX+ro08SO3WbrB2
aG7eGoqr1yT5eHTTsAQjDLK6oT1V2eqz1vpGm0nywRaIml03S7R7ihEeys6fB+f1
vha71Ej9nuSPxFh6ZoEom91VI0BGhtCcmlcVDLb401iuyLeoQUiebH2vQQLw3APS
zbMJD0jEV2wgL0ei3A==
-----END CERTIFICATE-----
Generated at Wed Jun 17 11:24:30 2026 by rpki-client