Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143612.roa
File: AS143612.roa (raw, json)
Hash identifier: NHNQmpIv4xhEFwvsoqVcBArBfi4iiBUH3re6SihE7pU=
Subject key identifier: 4F:F8:44:9B:48:3A:0D:4E:D5:36:44:27:E3:AE:7B:D8:8E:E7:CB:B7
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 24093120DF71120234DF5102A9EAC447F73FE6AE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143612.roa
Signing time: Fri 22 May 2026 02:48:01 +0000
ROA not before: Fri 22 May 2026 02:43:01 +0000
ROA not after: Fri 21 May 2027 02:48:01 +0000
asID: 143612
IP address blocks: 240a:a3c2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:09:31:20:df:71:12:02:34:df:51:02:a9:ea:c4:47:f7:3f:e6:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:43:01 2026 GMT
Not After : May 21 02:48:01 2027 GMT
Subject: CN=4FF8449B483A0D4ED5364427E3AE7BD88EE7CBB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:25:9c:9e:49:1e:73:45:72:61:cd:d2:07:e9:
2b:9a:9e:6d:b0:b9:ea:3a:02:b8:a9:2b:dc:19:29:
48:a0:81:99:11:38:3c:4d:2d:0b:37:b7:7f:a2:19:
1a:00:4a:b9:30:d0:2a:eb:04:67:73:51:43:32:b8:
dc:f2:6c:dd:48:f1:4b:03:74:b6:26:34:6b:ea:09:
71:1c:98:4a:c5:0b:17:50:c9:b6:61:aa:b9:e2:5d:
14:dd:be:1f:8b:9a:0b:1c:e2:4e:1a:04:d7:9f:f3:
03:54:95:14:87:a3:d6:eb:af:c3:7e:85:bb:3d:54:
8a:0f:71:8c:6d:93:2a:cc:35:90:5b:12:f6:b8:55:
06:26:84:53:ae:c4:ad:a7:77:67:99:39:64:19:48:
a8:82:3b:2a:3d:08:8e:6f:ed:c3:b9:88:51:63:ed:
8e:dc:3f:8f:9a:2c:2c:99:4d:58:fe:5c:90:17:a4:
93:ed:3e:34:e6:d4:4e:06:f1:33:55:8a:e0:62:1c:
3b:6e:d7:b3:9d:2f:82:32:21:46:ad:22:4c:a8:54:
93:58:09:ce:bd:c4:dd:02:ad:13:4e:b0:81:77:6b:
34:e1:51:12:52:da:c3:70:e8:8c:11:80:2e:72:6a:
ba:6a:d4:64:c0:bb:72:65:02:3b:86:47:64:c3:a7:
4b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F8:44:9B:48:3A:0D:4E:D5:36:44:27:E3:AE:7B:D8:8E:E7:CB:B7
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143612.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3c2::/32
Signature Algorithm: sha256WithRSAEncryption
8a:88:02:fd:37:fb:bc:f5:61:b1:ee:ae:58:78:45:b4:42:0f:
18:5f:f9:62:6b:6f:1c:6c:06:8d:69:cb:b7:e6:c2:3c:4d:42:
74:50:5f:8b:0c:0d:76:d7:ac:e3:de:87:9f:b0:7e:89:e6:c8:
ae:c5:3e:d1:22:f1:d8:b7:fb:c7:bf:7e:82:a1:1f:3c:38:13:
a2:6c:dd:55:ee:56:93:d9:e8:eb:0b:9c:9c:e1:4f:4e:b1:3d:
a4:03:a7:50:b3:a4:d8:cd:47:20:a6:aa:9a:29:dd:5d:ff:dd:
12:5b:38:72:d2:30:b3:53:2f:e9:2b:72:11:00:05:8d:da:ed:
c8:68:3f:bc:48:3a:3d:c2:ab:fe:7e:9f:2b:77:17:82:8e:29:
1c:37:ee:85:af:dd:59:44:48:82:92:54:5f:00:46:1a:c5:cb:
7a:e3:5c:e4:1c:51:93:e6:87:59:ba:5e:2d:fd:64:49:db:40:
49:03:d4:29:35:34:51:4c:ad:63:72:31:a1:31:bb:b5:09:2d:
af:f6:bd:57:f0:5d:f4:9e:c0:f6:e6:45:9a:11:98:4a:1b:69:
f5:38:f9:c8:18:fd:f0:96:71:95:22:67:e5:27:27:86:13:47:
ed:9c:e3:09:7d:f4:cc:10:43:45:1e:ca:56:23:59:06:a6:e1:
b8:2e:ce:71
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUJAkxIN9xEgI031ECqerER/c/5q4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwMjQzMDFaFw0yNzA1MjEwMjQ4MDFaMDMxMTAvBgNV
BAMTKDRGRjg0NDlCNDgzQTBENEVENTM2NDQyN0UzQUU3QkQ4OEVFN0NCQjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmJZyeSR5zRXJhzdIH6Suanm2w
ueo6AripK9wZKUiggZkRODxNLQs3t3+iGRoASrkw0CrrBGdzUUMyuNzybN1I8UsD
dLYmNGvqCXEcmErFCxdQybZhqrniXRTdvh+Lmgsc4k4aBNef8wNUlRSHo9brr8N+
hbs9VIoPcYxtkyrMNZBbEva4VQYmhFOuxK2nd2eZOWQZSKiCOyo9CI5v7cO5iFFj
7Y7cP4+aLCyZTVj+XJAXpJPtPjTm1E4G8TNViuBiHDtu17OdL4IyIUatIkyoVJNY
Cc69xN0CrRNOsIF3azThURJS2sNw6IwRgC5yarpq1GTAu3JlAjuGR2TDp0vNAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUT/hEm0g6DU7VNkQn46572I7ny7cwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzNjEyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqjwjANBgkqhkiG9w0BAQsFAAOCAQEAiogC
/Tf7vPVhse6uWHhFtEIPGF/5YmtvHGwGjWnLt+bCPE1CdFBfiwwNdtes496Hn7B+
iebIrsU+0SLx2Lf7x79+gqEfPDgTomzdVe5Wk9no6wucnOFPTrE9pAOnULOk2M1H
IKaqmindXf/dEls4ctIws1Mv6StyEQAFjdrtyGg/vEg6PcKr/n6fK3cXgo4pHDfu
ha/dWURIgpJUXwBGGsXLeuNc5BxRk+aHWbpeLf1kSdtASQPUKTU0UUytY3IxoTG7
tQktr/a9V/Bd9J7A9uZFmhGYShtp9Tj5yBj98JZxlSJn5ScnhhNH7ZzjCX30zBBD
RR7KViNZBqbhuC7OcQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:32 2026 by rpki-client