Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143576.roa
File: AS143576.roa (raw, json)
Hash identifier: q+sda6glfyU3bzZ+QrVbhqU3qtlx07AwFHeIAGLWaTw=
Subject key identifier: FE:60:D7:2E:60:BD:8B:6D:54:F9:54:56:D4:AD:39:AF:4A:D6:B9:DB
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3A07A0EF25B8C0DE32A11DD9B652951AA6E72C6C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143576.roa
Signing time: Fri 22 May 2026 07:40:41 +0000
ROA not before: Fri 22 May 2026 07:35:41 +0000
ROA not after: Fri 21 May 2027 07:40:41 +0000
asID: 143576
IP address blocks: 240a:a39e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:07:a0:ef:25:b8:c0:de:32:a1:1d:d9:b6:52:95:1a:a6:e7:2c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:35:41 2026 GMT
Not After : May 21 07:40:41 2027 GMT
Subject: CN=FE60D72E60BD8B6D54F95456D4AD39AF4AD6B9DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:02:bc:7f:64:8d:c0:30:e0:3c:b1:5f:63:43:
39:fb:f9:11:6f:79:1e:9f:3b:60:fe:cc:a6:d1:74:
ce:14:79:4d:e2:ef:27:4f:42:ef:2d:80:69:29:0e:
f1:e2:9e:6c:ce:1a:c8:39:09:23:13:14:7a:91:2c:
66:09:fa:d8:42:2d:59:94:ae:8d:d4:ac:a2:8f:08:
14:68:c5:6e:43:c7:17:12:d7:59:c3:13:5d:dd:1c:
48:61:8b:1b:84:45:7f:3a:db:55:36:d3:e0:fe:e1:
2a:3f:88:3d:d0:41:84:b0:7e:0d:35:a6:2e:2a:05:
29:91:cf:ac:1f:73:80:de:7c:75:3c:2d:bd:4e:2b:
11:67:f3:1a:66:51:72:88:d6:9b:6e:64:d7:6b:41:
dd:c4:0a:84:29:bc:ac:0c:8f:5f:77:ab:9c:57:2e:
33:22:b7:24:60:1f:5e:0c:f4:72:20:0b:7a:37:99:
2c:49:29:cf:c5:47:87:a7:2e:57:7a:b9:9b:fb:99:
8c:d0:3a:30:80:44:d4:95:b8:5f:ba:ce:97:f0:eb:
0e:b8:7e:48:11:36:95:28:88:a5:52:51:d6:d2:75:
0e:9f:6f:8d:0b:4a:67:52:e9:da:b8:ba:41:56:d2:
3e:aa:2a:19:2c:17:ca:b0:5c:10:41:f7:ca:79:e9:
8e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:60:D7:2E:60:BD:8B:6D:54:F9:54:56:D4:AD:39:AF:4A:D6:B9:DB
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143576.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a39e::/32
Signature Algorithm: sha256WithRSAEncryption
b6:32:36:12:11:48:b5:e3:2a:27:4b:30:dd:a3:48:31:fd:83:
1e:5e:6b:1c:1e:2b:8d:85:a0:c1:1d:be:7c:c2:88:0d:1b:c0:
09:93:59:fe:ad:8f:37:dc:98:52:0c:70:20:57:86:97:cb:87:
b4:4c:d0:ed:92:9e:27:a7:15:eb:f7:12:dc:5a:04:11:b3:e6:
2a:51:bd:30:4a:d2:39:ae:d3:0a:26:8f:da:88:d2:cb:2e:16:
e4:6a:b8:e8:d4:54:66:8c:80:6c:59:98:50:3d:8f:2d:22:f1:
6b:74:c9:90:29:7d:f2:0a:24:6e:3e:ef:7d:0d:f6:d6:f1:e6:
f3:4d:68:34:47:7f:a3:0f:7f:ce:65:99:4f:30:9d:40:cb:98:
5a:06:2a:d0:dd:66:bb:97:00:46:7a:d4:75:c5:a4:0a:ac:2f:
e7:c0:6c:83:b2:29:e2:e8:42:c5:e3:6b:00:91:ba:f2:c7:b4:
90:b9:01:e1:dd:62:6c:6e:ec:73:37:1e:11:af:72:7f:90:4b:
e4:39:28:af:40:d2:14:e9:dc:60:54:bc:80:cf:e5:47:0f:3a:
69:bf:2a:5a:e9:99:8f:0d:0c:5d:18:84:33:a5:40:66:5f:d5:
9c:96:d1:b3:43:1b:c8:ea:ef:ba:d5:2b:67:0d:f9:2e:71:0e:
19:72:ff:13
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUOgeg7yW4wN4yoR3ZtlKVGqbnLGwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzM1NDFaFw0yNzA1MjEwNzQwNDFaMDMxMTAvBgNV
BAMTKEZFNjBENzJFNjBCRDhCNkQ1NEY5NTQ1NkQ0QUQzOUFGNEFENkI5REIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZArx/ZI3AMOA8sV9jQzn7+RFv
eR6fO2D+zKbRdM4UeU3i7ydPQu8tgGkpDvHinmzOGsg5CSMTFHqRLGYJ+thCLVmU
ro3UrKKPCBRoxW5DxxcS11nDE13dHEhhixuERX8621U20+D+4So/iD3QQYSwfg01
pi4qBSmRz6wfc4DefHU8Lb1OKxFn8xpmUXKI1ptuZNdrQd3ECoQpvKwMj193q5xX
LjMityRgH14M9HIgC3o3mSxJKc/FR4enLld6uZv7mYzQOjCARNSVuF+6zpfw6w64
fkgRNpUoiKVSUdbSdQ6fb40LSmdS6dq4ukFW0j6qKhksF8qwXBBB98p56Y7JAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU/mDXLmC9i21U+VRW1K05r0rWudswHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzNTc2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqjnjANBgkqhkiG9w0BAQsFAAOCAQEAtjI2
EhFIteMqJ0sw3aNIMf2DHl5rHB4rjYWgwR2+fMKIDRvACZNZ/q2PN9yYUgxwIFeG
l8uHtEzQ7ZKeJ6cV6/cS3FoEEbPmKlG9MErSOa7TCiaP2ojSyy4W5Gq46NRUZoyA
bFmYUD2PLSLxa3TJkCl98gokbj7vfQ321vHm801oNEd/ow9/zmWZTzCdQMuYWgYq
0N1mu5cARnrUdcWkCqwv58Bsg7Ip4uhCxeNrAJG68se0kLkB4d1ibG7sczceEa9y
f5BL5Dkor0DSFOncYFS8gM/lRw86ab8qWumZjw0MXRiEM6VAZl/VnJbRs0MbyOrv
utUrZw35LnEOGXL/Ew==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:33 2026 by rpki-client