Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143574.roa
File: AS143574.roa (raw, json)
Hash identifier: hcp+8jBHF6q6y8MBnaQk3qS7RUzrAmQtnNm0HkBW99o=
Subject key identifier: 8E:4D:29:67:0C:05:D7:66:63:11:1D:68:44:8A:86:D0:D5:9A:C3:9F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4DD43498370CBA112613BB18A54FE311C1876F6F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143574.roa
Signing time: Tue 26 May 2026 06:30:47 +0000
ROA not before: Tue 26 May 2026 06:25:47 +0000
ROA not after: Tue 25 May 2027 06:30:47 +0000
asID: 143574
IP address blocks: 240a:a39c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:d4:34:98:37:0c:ba:11:26:13:bb:18:a5:4f:e3:11:c1:87:6f:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:25:47 2026 GMT
Not After : May 25 06:30:47 2027 GMT
Subject: CN=8E4D29670C05D76663111D68448A86D0D59AC39F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:b2:35:37:92:9a:ea:ab:a3:dd:f0:80:f9:1d:
4b:97:9e:21:de:f7:91:70:9b:93:25:98:b3:ad:c5:
84:5a:56:2c:4c:7a:3e:5f:02:f2:07:8c:bf:a8:ff:
60:a9:c4:2c:8f:63:1a:79:8f:c0:de:bd:22:15:41:
0a:d8:d7:4b:20:8a:ce:58:52:41:e2:20:62:78:64:
7c:72:ab:e5:84:75:80:7c:8f:1d:30:7a:f7:06:aa:
cb:d3:b7:69:7f:c3:9c:9e:94:89:22:83:08:21:f6:
80:d3:4c:20:a0:a5:46:c9:68:2a:cd:31:58:81:96:
ce:7e:a7:7e:b1:34:58:d8:b7:8d:4b:5c:99:7f:a9:
ba:45:b0:c6:38:76:38:50:b2:6a:dc:51:4e:5e:a8:
62:8a:88:3d:8e:76:36:7e:5f:b2:71:ed:b7:32:8d:
d0:0c:fa:d8:55:12:2b:93:18:47:cc:1a:c5:31:4e:
1e:01:db:0c:e1:e6:ae:6f:fc:72:cd:ae:92:e0:e2:
5a:30:4d:d5:37:5f:8f:33:b7:a0:fe:92:13:3e:10:
ec:22:93:79:3b:b1:ee:33:68:99:72:c2:83:38:3a:
65:7f:78:99:19:cb:68:2a:53:ef:67:d3:8a:de:64:
b0:f7:b3:ac:24:f3:87:cc:e7:7a:3e:f7:f8:7f:da:
35:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:4D:29:67:0C:05:D7:66:63:11:1D:68:44:8A:86:D0:D5:9A:C3:9F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143574.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a39c::/32
Signature Algorithm: sha256WithRSAEncryption
03:22:d2:c5:44:54:f1:ab:fe:9c:cd:5d:8c:d4:bf:ec:51:50:
35:4f:9a:64:8d:f5:27:84:a8:97:13:bc:67:19:98:a6:fe:44:
77:e4:8e:48:17:91:ed:cd:23:97:9b:d3:ac:13:12:a3:47:f5:
eb:a7:5d:91:6a:fd:74:47:0f:1d:64:f7:61:e6:fe:9e:32:1d:
f8:f9:a2:c8:10:25:cf:50:4f:74:ab:de:da:d1:d4:e1:53:aa:
88:05:f1:f7:3f:0a:bf:a0:35:44:07:c3:91:f0:81:5c:62:cb:
8b:0e:4f:9d:8a:d2:95:6c:8a:d0:dd:4c:0f:98:b0:dd:a7:0c:
20:58:0d:27:8b:c8:08:bf:38:d3:56:0d:87:71:0d:72:96:a3:
03:28:1e:ca:55:34:ac:88:a8:28:fc:3a:6b:c6:96:59:11:e5:
49:23:96:b7:81:1e:dc:a4:7b:b7:67:8b:26:00:ee:6e:d9:2d:
74:4c:5f:23:33:47:01:3d:e3:af:1a:4b:32:1f:12:bc:ff:46:
58:a3:0a:2c:7b:99:8a:29:0b:f0:07:7b:ae:94:4c:64:1b:66:
bc:08:25:69:c8:88:4e:0f:bb:b3:b8:49:4d:1f:5e:22:ea:24:
d1:11:09:ad:2b:d5:2f:8c:50:23:68:ac:78:7f:20:dc:31:64:
9a:50:90:29
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUTdQ0mDcMuhEmE7sYpU/jEcGHb28wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwNjI1NDdaFw0yNzA1MjUwNjMwNDdaMDMxMTAvBgNV
BAMTKDhFNEQyOTY3MEMwNUQ3NjY2MzExMUQ2ODQ0OEE4NkQwRDU5QUMzOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5sjU3kprqq6Pd8ID5HUuXniHe
95Fwm5MlmLOtxYRaVixMej5fAvIHjL+o/2CpxCyPYxp5j8DevSIVQQrY10sgis5Y
UkHiIGJ4ZHxyq+WEdYB8jx0wevcGqsvTt2l/w5yelIkigwgh9oDTTCCgpUbJaCrN
MViBls5+p36xNFjYt41LXJl/qbpFsMY4djhQsmrcUU5eqGKKiD2OdjZ+X7Jx7bcy
jdAM+thVEiuTGEfMGsUxTh4B2wzh5q5v/HLNrpLg4lowTdU3X48zt6D+khM+EOwi
k3k7se4zaJlywoM4OmV/eJkZy2gqU+9n04reZLD3s6wk84fM53o+9/h/2jWRAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUjk0pZwwF12ZjER1oRIqG0NWaw58wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzNTc0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqjnDANBgkqhkiG9w0BAQsFAAOCAQEAAyLS
xURU8av+nM1djNS/7FFQNU+aZI31J4SolxO8ZxmYpv5Ed+SOSBeR7c0jl5vTrBMS
o0f166ddkWr9dEcPHWT3Yeb+njId+PmiyBAlz1BPdKve2tHU4VOqiAXx9z8Kv6A1
RAfDkfCBXGLLiw5PnYrSlWyK0N1MD5iw3acMIFgNJ4vICL8401YNh3ENcpajAyge
ylU0rIioKPw6a8aWWRHlSSOWt4Ee3KR7t2eLJgDubtktdExfIzNHAT3jrxpLMh8S
vP9GWKMKLHuZiikL8Ad7rpRMZBtmvAglaciITg+7s7hJTR9eIuok0REJrSvVL4xQ
I2iseH8g3DFkmlCQKQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:46 2026 by rpki-client