Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143614.roa
File: AS143614.roa (raw, json)
Hash identifier: CKf47Fe+mN+3bDz0hoh07u9wp3+agObiQk61hKWI484=
Subject key identifier: 9D:C0:F8:1D:54:EE:8F:9B:5E:30:93:50:DF:05:F4:A9:FD:85:8D:56
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4952314E644D8C04BE7E705A12594244C3B2C525
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143614.roa
Signing time: Fri 22 May 2026 06:27:42 +0000
ROA not before: Fri 22 May 2026 06:22:42 +0000
ROA not after: Fri 21 May 2027 06:27:42 +0000
asID: 143614
IP address blocks: 240a:a3c4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:52:31:4e:64:4d:8c:04:be:7e:70:5a:12:59:42:44:c3:b2:c5:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:22:42 2026 GMT
Not After : May 21 06:27:42 2027 GMT
Subject: CN=9DC0F81D54EE8F9B5E309350DF05F4A9FD858D56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:94:b0:4b:07:96:2f:bc:2f:16:63:49:18:d1:
59:a7:75:af:d1:7e:4f:54:0c:55:fb:cb:fc:5a:cf:
c6:1b:be:0b:eb:6e:15:a6:3e:4c:47:f5:cc:14:e6:
50:78:d9:0e:b6:2e:b8:13:ba:8e:d8:f0:1b:82:59:
f7:85:88:7d:14:2a:59:3c:3f:b5:f3:da:61:a2:3b:
77:c6:50:ac:74:c3:8c:62:83:0f:e9:43:50:ec:9a:
f9:4f:78:7c:dd:12:5a:cd:dd:b8:60:4e:d8:5c:d5:
9c:6d:ff:14:8f:6d:6d:4a:03:13:b7:2a:b0:6d:21:
c9:95:8b:5d:89:15:ca:cf:6a:a4:1f:9e:5d:ea:ea:
2d:24:87:47:77:de:cc:9c:8a:cb:43:89:47:4b:81:
13:89:4c:87:70:17:82:48:9c:6a:ce:40:5d:51:05:
3c:cb:cf:ec:d3:71:98:38:91:e9:91:8f:5e:21:9f:
1a:3e:df:08:77:8b:b5:16:e4:64:76:ed:b7:03:1b:
be:e7:76:2a:4f:3b:a3:ab:80:03:ed:34:73:ac:9c:
7b:52:c3:48:bb:89:5e:e5:9b:58:21:fa:da:68:ee:
f2:bb:9b:da:63:c7:de:5b:d3:ad:f9:1f:a3:36:f9:
34:a3:61:5f:ea:54:84:e8:6f:fc:64:ba:70:bd:64:
f3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C0:F8:1D:54:EE:8F:9B:5E:30:93:50:DF:05:F4:A9:FD:85:8D:56
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143614.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3c4::/32
Signature Algorithm: sha256WithRSAEncryption
60:23:9f:86:bd:48:e3:27:e4:79:58:52:97:a9:1f:8e:32:29:
9d:9a:f3:60:40:44:f8:c9:45:c9:af:31:73:63:b1:b1:d8:04:
e7:dc:3b:93:38:fd:ad:cf:65:00:04:c0:b5:57:ff:fa:c2:70:
71:6d:1c:90:df:ba:79:0a:91:77:1d:57:2a:1c:a8:9a:aa:91:
81:27:c4:1a:72:9a:4c:c6:98:37:af:5d:f0:3f:05:8f:69:61:
7b:e0:2f:33:49:b1:29:0e:59:f4:0c:12:2c:d4:8f:12:ab:8d:
12:ff:f9:76:b3:ed:53:44:64:a7:62:e8:42:7a:d0:79:9b:ef:
19:af:1e:a5:c3:77:ec:6d:8c:ae:d7:b1:6d:15:5d:92:cf:4d:
af:6d:0d:a4:2d:6a:f4:11:20:2a:01:bd:c5:41:dc:b0:98:dc:
79:b7:28:3b:4b:e4:65:7e:07:ef:f1:fb:0e:82:0a:dc:24:57:
67:4d:17:61:64:ae:3a:54:17:8a:7e:bf:f0:15:4b:a1:2e:83:
90:5d:81:f5:54:2d:38:7c:94:19:5a:cb:07:b6:57:12:26:49:
68:a4:d8:54:31:33:c3:db:6c:7d:0d:03:75:14:cb:be:22:d9:
87:38:d3:7b:02:7f:72:a8:79:4b:1e:d6:6d:ed:d7:9d:e8:d3:
4b:e7:b8:8c
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUSVIxTmRNjAS+fnBaEllCRMOyxSUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjIyNDJaFw0yNzA1MjEwNjI3NDJaMDMxMTAvBgNV
BAMTKDlEQzBGODFENTRFRThGOUI1RTMwOTM1MERGMDVGNEE5RkQ4NThENTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdlLBLB5YvvC8WY0kY0Vmnda/R
fk9UDFX7y/xaz8YbvgvrbhWmPkxH9cwU5lB42Q62LrgTuo7Y8BuCWfeFiH0UKlk8
P7Xz2mGiO3fGUKx0w4xigw/pQ1DsmvlPeHzdElrN3bhgTthc1Zxt/xSPbW1KAxO3
KrBtIcmVi12JFcrPaqQfnl3q6i0kh0d33sycistDiUdLgROJTIdwF4JInGrOQF1R
BTzLz+zTcZg4kemRj14hnxo+3wh3i7UW5GR27bcDG77ndipPO6OrgAPtNHOsnHtS
w0i7iV7lm1gh+tpo7vK7m9pjx95b0635H6M2+TSjYV/qVITob/xkunC9ZPPbAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUncD4HVTuj5teMJNQ3wX0qf2FjVYwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzNjE0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqjxDANBgkqhkiG9w0BAQsFAAOCAQEAYCOf
hr1I4yfkeVhSl6kfjjIpnZrzYEBE+MlFya8xc2OxsdgE59w7kzj9rc9lAATAtVf/
+sJwcW0ckN+6eQqRdx1XKhyomqqRgSfEGnKaTMaYN69d8D8Fj2lhe+AvM0mxKQ5Z
9AwSLNSPEquNEv/5drPtU0Rkp2LoQnrQeZvvGa8epcN37G2MrtexbRVdks9Nr20N
pC1q9BEgKgG9xUHcsJjcebcoO0vkZX4H7/H7DoIK3CRXZ00XYWSuOlQXin6/8BVL
oS6DkF2B9VQtOHyUGVrLB7ZXEiZJaKTYVDEzw9tsfQ0DdRTLviLZhzjTewJ/cqh5
Sx7Wbe3XnejTS+e4jA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:14 2026 by rpki-client