Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143546.roa
File: AS143546.roa (raw, json)
Hash identifier: GOK8cfwvlZ0wCc8gDNKma/DTDloFD0Mqo2RwCOsWpmY=
Subject key identifier: 4E:6E:F6:E6:B2:B2:2E:E6:36:50:0D:4A:D6:37:F4:B8:05:4F:87:67
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5A5E9959EAC8C99554A7531FB7661B7DB6B00B4B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143546.roa
Signing time: Mon 25 May 2026 06:28:16 +0000
ROA not before: Mon 25 May 2026 06:23:16 +0000
ROA not after: Mon 24 May 2027 06:28:16 +0000
asID: 143546
IP address blocks: 240a:a380::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:5e:99:59:ea:c8:c9:95:54:a7:53:1f:b7:66:1b:7d:b6:b0:0b:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:16 2026 GMT
Not After : May 24 06:28:16 2027 GMT
Subject: CN=4E6EF6E6B2B22EE636500D4AD637F4B8054F8767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4c:7d:15:8c:fc:76:58:6f:38:b9:e3:0b:13:
e9:3f:69:ad:e1:60:5e:3d:c3:30:9b:03:de:3f:af:
58:91:1c:f8:e9:88:6a:54:72:e7:25:2a:40:1f:8f:
61:26:37:37:9b:2d:ae:c3:e1:b4:52:55:33:8e:df:
b7:2e:9f:92:c5:21:52:94:48:5e:27:84:c9:70:41:
f7:8c:0f:d3:2b:05:8c:ca:56:94:ce:97:87:22:04:
a2:26:bf:f8:4c:d6:25:4d:cf:8f:16:8a:21:49:59:
29:fd:52:4a:a1:4d:f0:ec:e4:97:42:93:e5:70:93:
1f:56:2b:64:58:42:6c:92:9c:c1:47:2b:01:9b:3b:
27:57:75:ad:95:9f:1f:c3:de:13:d9:17:3d:8d:86:
fa:93:d1:a9:f6:be:88:f8:05:03:3f:43:0c:b0:e2:
b8:a4:bd:07:2e:ea:9e:3f:be:dd:29:e9:06:30:0e:
8f:c9:5b:08:30:12:8d:72:c3:cd:77:d0:f3:e2:fa:
b5:e2:c6:7c:cd:ab:b5:86:57:21:bc:ce:3d:44:a0:
7d:70:67:c4:46:57:f2:da:6b:4e:77:54:0d:b4:9a:
c4:dc:51:bc:19:68:ae:34:34:51:a0:83:0b:79:f0:
e6:c3:f9:4e:fd:00:6b:b9:cc:e4:56:96:d0:e3:4e:
54:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:6E:F6:E6:B2:B2:2E:E6:36:50:0D:4A:D6:37:F4:B8:05:4F:87:67
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143546.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a380::/32
Signature Algorithm: sha256WithRSAEncryption
7b:d3:f1:7d:8c:a4:93:36:e7:59:d2:7d:13:ed:ff:82:39:9b:
65:c4:f2:4a:0a:4f:0b:85:4e:e0:d8:b0:ef:83:81:0f:54:a1:
b9:ee:c6:1f:68:b3:f7:0c:2c:05:0e:1c:27:6c:60:f3:d9:8a:
b4:ec:ee:33:15:1d:6f:e0:40:38:5a:2e:40:13:65:58:90:6f:
5e:f1:a5:14:cb:aa:89:92:a7:1c:a0:e4:17:04:6e:a6:71:00:
31:0c:f2:93:15:a0:b2:bf:9f:6c:95:d6:83:97:6d:3a:12:2d:
10:8a:b4:6f:2b:df:42:4f:4d:7f:12:78:f5:9b:6b:e8:74:9a:
aa:16:68:ed:a0:a2:f6:91:b3:0d:94:89:40:88:8a:f7:9b:41:
6f:3f:cd:68:04:4d:1d:28:af:15:f1:ae:67:b1:07:0f:89:9b:
42:a2:57:7f:4c:f8:97:15:b7:e3:3e:25:35:4d:3b:49:58:63:
47:4d:54:5a:54:24:d1:f0:4a:66:13:a4:0a:92:eb:ff:00:8d:
48:60:a1:e1:f4:d1:d6:12:f8:65:38:97:7e:05:2d:2f:65:b2:
49:91:32:ee:08:02:ed:c8:cb:56:eb:3a:bb:f7:35:e1:03:76:
10:00:92:7f:13:40:aa:27:e5:1b:7d:41:32:10:1b:69:05:c9:
43:d5:f0:c6
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUWl6ZWerIyZVUp1Mft2YbfbawC0swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwNjIzMTZaFw0yNzA1MjQwNjI4MTZaMDMxMTAvBgNV
BAMTKDRFNkVGNkU2QjJCMjJFRTYzNjUwMEQ0QUQ2MzdGNEI4MDU0Rjg3NjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSTH0VjPx2WG84ueMLE+k/aa3h
YF49wzCbA94/r1iRHPjpiGpUcuclKkAfj2EmNzebLa7D4bRSVTOO37cun5LFIVKU
SF4nhMlwQfeMD9MrBYzKVpTOl4ciBKImv/hM1iVNz48WiiFJWSn9UkqhTfDs5JdC
k+Vwkx9WK2RYQmySnMFHKwGbOydXda2Vnx/D3hPZFz2NhvqT0an2voj4BQM/Qwyw
4rikvQcu6p4/vt0p6QYwDo/JWwgwEo1yw8130PPi+rXixnzNq7WGVyG8zj1EoH1w
Z8RGV/Laa053VA20msTcUbwZaK40NFGggwt58ObD+U79AGu5zORWltDjTlQnAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUTm725rKyLuY2UA1K1jf0uAVPh2cwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzNTQ2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqjgDANBgkqhkiG9w0BAQsFAAOCAQEAe9Px
fYykkzbnWdJ9E+3/gjmbZcTySgpPC4VO4Niw74OBD1Shue7GH2iz9wwsBQ4cJ2xg
89mKtOzuMxUdb+BAOFouQBNlWJBvXvGlFMuqiZKnHKDkFwRupnEAMQzykxWgsr+f
bJXWg5dtOhItEIq0byvfQk9NfxJ49Ztr6HSaqhZo7aCi9pGzDZSJQIiK95tBbz/N
aARNHSivFfGuZ7EHD4mbQqJXf0z4lxW34z4lNU07SVhjR01UWlQk0fBKZhOkCpLr
/wCNSGCh4fTR1hL4ZTiXfgUtL2WySZEy7ggC7cjLVus6u/c14QN2EACSfxNAqifl
G31BMhAbaQXJQ9Xwxg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:04 2026 by rpki-client