Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143596.roa
File: AS143596.roa (raw, json)
Hash identifier: INjUi4N7rlR/vxJjU4gYfoTu2xMpWh9E6zIFVsn+leU=
Subject key identifier: 7A:D8:86:3C:32:0F:31:90:A2:ED:7F:05:1E:B4:A2:0A:06:AA:A1:E0
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 349FFA2647EF9C1B40288B37917737A88EB6D42C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143596.roa
Signing time: Tue 26 May 2026 02:35:00 +0000
ROA not before: Tue 26 May 2026 02:30:00 +0000
ROA not after: Tue 25 May 2027 02:35:00 +0000
asID: 143596
IP address blocks: 240a:a3b2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:9f:fa:26:47:ef:9c:1b:40:28:8b:37:91:77:37:a8:8e:b6:d4:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:00 2026 GMT
Not After : May 25 02:35:00 2027 GMT
Subject: CN=7AD8863C320F3190A2ED7F051EB4A20A06AAA1E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ab:6b:17:52:d9:93:e5:78:de:4f:79:e1:00:
1b:63:13:af:e0:85:07:f2:e5:86:77:99:c6:50:0d:
5c:38:13:83:ae:3a:40:15:15:9d:b1:3c:cc:97:5a:
dc:9d:63:9e:50:79:7d:36:32:ea:91:27:bc:c1:50:
a6:49:53:79:d8:a0:bf:9e:c2:0e:a2:a9:64:b2:b2:
dd:c9:28:99:04:8a:8a:eb:3f:3d:80:cf:7a:bf:45:
aa:00:ed:54:71:ff:75:6e:fb:c5:c1:77:10:ed:2d:
4e:47:08:5a:3a:37:38:76:69:07:8e:37:3e:76:c1:
c8:8a:d5:bc:7e:b6:47:51:02:e8:2a:99:8a:53:82:
f6:05:d4:43:1f:e8:1f:32:0b:e0:20:14:59:cb:2e:
45:87:cf:b3:88:3f:01:76:35:bd:47:c3:88:0a:5e:
5b:9c:07:d1:f1:bc:12:3f:d1:9b:fb:b8:eb:23:c1:
a7:87:f3:ff:2d:8f:eb:7f:10:94:b7:ec:8e:25:a2:
4d:69:8c:ab:c1:4a:cc:a1:45:30:82:1e:16:c5:b5:
55:5c:51:ab:e2:87:5f:34:c9:84:1c:23:86:17:e7:
48:64:f1:39:8d:46:ba:6d:b1:83:26:2e:dc:a9:65:
6f:72:69:6f:fd:ee:7c:71:cb:c1:21:47:3e:82:21:
7e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D8:86:3C:32:0F:31:90:A2:ED:7F:05:1E:B4:A2:0A:06:AA:A1:E0
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143596.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3b2::/32
Signature Algorithm: sha256WithRSAEncryption
7d:9a:85:1d:96:33:29:31:de:f9:94:a5:ea:d7:b5:c4:71:47:
be:82:51:39:0d:1a:80:92:cf:b2:3a:f1:c4:3a:73:c2:f3:89:
e5:81:d3:d4:75:84:31:97:49:dd:93:47:38:94:f9:a0:ae:f4:
a8:58:e3:89:dc:27:14:cd:2c:ba:53:4c:17:49:ca:54:16:13:
9a:ec:12:71:f6:fb:c3:50:9e:9c:0e:29:30:93:5e:a7:1d:58:
ff:b7:9c:e5:5a:2d:fc:ff:dc:86:1c:77:af:a1:62:5a:fe:cf:
3e:50:d4:9f:24:40:db:f6:16:d5:09:ae:03:92:d7:6d:83:a3:
fc:96:a5:54:31:12:5f:04:30:e1:95:6f:4c:c1:43:db:a1:97:
67:e9:cf:37:09:a9:47:d7:45:59:51:3e:6c:d5:9d:e3:6e:3c:
7d:66:e0:5c:bf:32:e5:a7:d8:86:f4:85:0d:8c:87:38:6f:fa:
ed:38:f0:2a:29:7c:3f:18:36:d1:69:cd:09:9e:a9:46:4a:1d:
30:67:59:f0:1d:90:84:30:6c:65:d1:89:1d:3e:ee:85:6e:f8:
c1:5a:f5:c4:2c:7f:31:ae:a9:6f:4e:97:ae:ac:cc:bd:d3:67:
c0:17:31:62:8c:2a:fc:3a:cf:d1:0d:7a:e4:b2:d8:8a:df:fd:
66:fb:f4:c8
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUNJ/6JkfvnBtAKIs3kXc3qI621CwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMjMwMDBaFw0yNzA1MjUwMjM1MDBaMDMxMTAvBgNV
BAMTKDdBRDg4NjNDMzIwRjMxOTBBMkVEN0YwNTFFQjRBMjBBMDZBQUExRTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyq2sXUtmT5XjeT3nhABtjE6/g
hQfy5YZ3mcZQDVw4E4OuOkAVFZ2xPMyXWtydY55QeX02MuqRJ7zBUKZJU3nYoL+e
wg6iqWSyst3JKJkEiorrPz2Az3q/RaoA7VRx/3Vu+8XBdxDtLU5HCFo6Nzh2aQeO
Nz52wciK1bx+tkdRAugqmYpTgvYF1EMf6B8yC+AgFFnLLkWHz7OIPwF2Nb1Hw4gK
XlucB9HxvBI/0Zv7uOsjwaeH8/8tj+t/EJS37I4lok1pjKvBSsyhRTCCHhbFtVVc
Uavih180yYQcI4YX50hk8TmNRrptsYMmLtypZW9yaW/97nxxy8EhRz6CIX79AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUetiGPDIPMZCi7X8FHrSiCgaqoeAwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzNTk2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqjsjANBgkqhkiG9w0BAQsFAAOCAQEAfZqF
HZYzKTHe+ZSl6te1xHFHvoJROQ0agJLPsjrxxDpzwvOJ5YHT1HWEMZdJ3ZNHOJT5
oK70qFjjidwnFM0sulNMF0nKVBYTmuwScfb7w1CenA4pMJNepx1Y/7ec5Vot/P/c
hhx3r6FiWv7PPlDUnyRA2/YW1QmuA5LXbYOj/JalVDESXwQw4ZVvTMFD26GXZ+nP
NwmpR9dFWVE+bNWd4248fWbgXL8y5afYhvSFDYyHOG/67TjwKil8Pxg20WnNCZ6p
RkodMGdZ8B2QhDBsZdGJHT7uhW74wVr1xCx/Ma6pb06XrqzMvdNnwBcxYowq/DrP
0Q165LLYit/9Zvv0yA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:34 2026 by rpki-client