Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143625.roa
File: AS143625.roa (raw, json)
Hash identifier: zv0NahmuwQ5Z4OoF+0a0JQ4bBWPFxjfv4H7slvVbxGA=
Subject key identifier: A7:4C:EC:7F:33:52:8C:AB:76:AC:A8:EA:E3:EE:CF:01:E5:5E:C0:20
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4BA25FDE025858FF9A29716380A97903404D93E7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143625.roa
Signing time: Fri 22 May 2026 02:47:35 +0000
ROA not before: Fri 22 May 2026 02:42:35 +0000
ROA not after: Fri 21 May 2027 02:47:35 +0000
asID: 143625
IP address blocks: 240a:a3cf::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:a2:5f:de:02:58:58:ff:9a:29:71:63:80:a9:79:03:40:4d:93:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:35 2026 GMT
Not After : May 21 02:47:35 2027 GMT
Subject: CN=A74CEC7F33528CAB76ACA8EAE3EECF01E55EC020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:20:3b:92:b8:ff:cf:d3:3d:8f:a5:4b:2e:5f:
23:51:2e:4e:c8:7a:90:80:8a:ac:d2:7f:7d:45:b1:
91:b5:42:69:83:21:e5:7d:f0:dd:90:53:9e:93:ce:
1c:27:a0:ac:c0:dc:4b:a2:2e:2d:66:5d:99:26:28:
1a:7d:07:b3:aa:ce:a1:29:1a:d3:8f:83:c7:a0:d5:
1e:ce:56:4e:82:96:35:fd:33:a1:3d:f7:2b:fa:79:
ce:2b:eb:d6:30:0f:08:d8:aa:d2:cc:e2:7b:6a:d5:
ed:e5:86:c8:64:fc:b9:63:ac:ea:18:63:66:64:d7:
d5:89:87:7b:5a:0e:2c:94:c1:66:94:75:1b:c0:47:
82:c0:4f:4a:6c:92:68:26:1e:1f:d0:c3:0c:0b:a7:
ef:b5:7a:61:a1:a8:9d:8d:85:e6:cf:5f:d9:18:93:
da:c6:21:f5:f6:46:84:d1:22:67:fc:ca:0d:37:34:
a3:7d:b3:01:9b:52:32:43:2b:ed:b0:c3:a6:cd:34:
64:75:6a:61:2c:9b:5d:cf:3d:a7:f5:61:d6:0a:b2:
44:b6:22:9a:a2:0a:de:07:95:1d:0b:88:69:31:07:
d9:7e:24:97:80:f3:02:ef:27:04:23:d1:78:56:65:
8d:ed:e5:e9:e7:b9:11:89:3b:1c:59:44:d5:ad:93:
b8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:4C:EC:7F:33:52:8C:AB:76:AC:A8:EA:E3:EE:CF:01:E5:5E:C0:20
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143625.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3cf::/32
Signature Algorithm: sha256WithRSAEncryption
3f:46:f5:01:50:a9:47:02:d4:53:22:45:fd:36:2e:b8:e1:af:
07:d2:b7:b7:09:31:78:ad:66:42:6e:5f:f0:e8:24:d2:7e:ea:
a0:34:e8:4a:1d:a3:48:f5:8e:e6:40:11:fe:92:af:47:14:2e:
4f:c3:65:c9:d8:fa:d1:32:76:8a:a7:8a:1b:8c:74:f2:5a:02:
60:ff:7e:3f:44:c8:2c:fb:09:eb:d1:ed:ff:27:75:5d:8c:3c:
e2:0e:e0:b5:9b:9a:47:91:38:74:00:61:de:70:dd:a3:11:27:
9e:fc:f0:a5:76:37:80:c6:35:a4:4a:b9:b5:f5:f9:44:d9:3c:
90:6b:49:6f:f4:93:a1:ae:99:7e:e5:8e:cc:8a:5f:b1:52:8d:
be:26:86:7b:8b:06:4a:9d:ae:9b:b1:e6:c3:3f:c3:c1:79:d2:
dc:c2:b3:1d:a7:2e:3f:38:7c:fa:7e:a8:7f:a8:5c:66:83:f6:
9e:e6:1d:4b:48:01:63:c4:06:48:91:71:2b:af:f9:29:5a:e0:
98:d4:57:60:99:cf:24:bf:4b:9f:c5:b3:a7:ef:6a:e2:a8:45:
e9:94:55:ec:3d:dd:2b:a7:4f:e0:82:e3:40:2f:7c:c6:72:74:
8b:95:ea:ac:8b:7c:d5:d7:bd:ba:43:23:da:7a:ad:a2:63:e3:
13:ca:94:78
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUS6Jf3gJYWP+aKXFjgKl5A0BNk+cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwMjQyMzVaFw0yNzA1MjEwMjQ3MzVaMDMxMTAvBgNV
BAMTKEE3NENFQzdGMzM1MjhDQUI3NkFDQThFQUUzRUVDRjAxRTU1RUMwMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrIDuSuP/P0z2PpUsuXyNRLk7I
epCAiqzSf31FsZG1QmmDIeV98N2QU56TzhwnoKzA3EuiLi1mXZkmKBp9B7OqzqEp
GtOPg8eg1R7OVk6CljX9M6E99yv6ec4r69YwDwjYqtLM4ntq1e3lhshk/LljrOoY
Y2Zk19WJh3taDiyUwWaUdRvAR4LAT0pskmgmHh/QwwwLp++1emGhqJ2NhebPX9kY
k9rGIfX2RoTRImf8yg03NKN9swGbUjJDK+2ww6bNNGR1amEsm13PPaf1YdYKskS2
IpqiCt4HlR0LiGkxB9l+JJeA8wLvJwQj0XhWZY3t5ennuRGJOxxZRNWtk7jdAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUp0zsfzNSjKt2rKjq4+7PAeVewCAwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzNjI1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqjzzANBgkqhkiG9w0BAQsFAAOCAQEAP0b1
AVCpRwLUUyJF/TYuuOGvB9K3twkxeK1mQm5f8Ogk0n7qoDToSh2jSPWO5kAR/pKv
RxQuT8Nlydj60TJ2iqeKG4x08loCYP9+P0TILPsJ69Ht/yd1XYw84g7gtZuaR5E4
dABh3nDdoxEnnvzwpXY3gMY1pEq5tfX5RNk8kGtJb/SToa6ZfuWOzIpfsVKNviaG
e4sGSp2um7Hmwz/DwXnS3MKzHacuPzh8+n6of6hcZoP2nuYdS0gBY8QGSJFxK6/5
KVrgmNRXYJnPJL9Ln8Wzp+9q4qhF6ZRV7D3dK6dP4ILjQC98xnJ0i5XqrIt81de9
ukMj2nqtomPjE8qUeA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:01 2026 by rpki-client