Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143627.roa
File: AS143627.roa (raw, json)
Hash identifier: DLVaQvt2/Gjt8xRvVbbiHxqCsD5+yZAntMpj5x9YQzc=
Subject key identifier: 39:A2:44:80:E3:8C:27:AA:93:10:1A:70:55:85:E5:19:3E:71:03:13
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5A6F30CBC72C650539205D08F565F6D770428A26
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143627.roa
Signing time: Fri 22 May 2026 06:05:15 +0000
ROA not before: Fri 22 May 2026 06:00:15 +0000
ROA not after: Fri 21 May 2027 06:05:15 +0000
asID: 143627
IP address blocks: 240a:a3d1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:6f:30:cb:c7:2c:65:05:39:20:5d:08:f5:65:f6:d7:70:42:8a:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:15 2026 GMT
Not After : May 21 06:05:15 2027 GMT
Subject: CN=39A24480E38C27AA93101A705585E5193E710313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:25:0c:fd:a6:85:f8:15:bd:07:27:5a:d5:e4:
bb:f8:0e:7e:66:1e:71:cf:70:36:c6:65:f7:a4:0b:
f0:63:9b:c1:c4:e9:2a:2b:2c:9a:aa:46:16:3b:7f:
cd:9f:ff:41:08:88:20:78:31:91:f2:5b:a9:be:ee:
30:bc:e4:6c:8a:17:c3:a3:dc:dd:4f:43:45:a9:91:
a5:53:5b:64:e4:d4:bf:a8:17:60:a8:89:e4:f3:85:
4c:4f:c3:56:57:ea:8c:99:85:b6:b0:ef:fb:07:f3:
a5:fc:36:32:fe:ab:5b:d7:81:d4:30:83:fa:17:33:
ce:f5:6f:38:3d:e3:fb:c7:c2:e6:8c:89:c3:d6:7a:
40:98:51:7c:0a:25:9c:34:70:b3:88:68:41:fe:12:
2f:3d:03:a6:d8:f0:ae:dc:13:83:20:30:6e:06:fa:
81:48:0c:39:b3:ed:05:32:96:e1:1a:a1:e5:da:60:
11:8a:42:c7:9f:64:71:76:08:1b:73:f4:2e:c4:cc:
3b:5f:ca:f7:3c:b7:0d:79:a9:20:c9:0c:97:b7:8a:
d5:2f:62:c9:1f:cd:55:4e:be:77:30:ab:30:a2:f2:
b7:bd:33:dd:92:be:9c:5c:a7:a0:f8:f7:63:6b:3a:
65:2c:d5:da:48:3b:51:54:62:24:3d:01:f5:53:41:
92:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A2:44:80:E3:8C:27:AA:93:10:1A:70:55:85:E5:19:3E:71:03:13
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143627.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3d1::/32
Signature Algorithm: sha256WithRSAEncryption
23:f1:bf:b5:56:63:d9:9f:27:d5:f1:06:b1:8c:0f:b7:6d:b1:
14:6f:83:05:5c:61:94:c0:49:55:dd:55:4a:93:ad:ba:28:ab:
f1:6f:b9:ac:78:bc:b8:ae:ef:26:31:b8:b8:a3:95:b6:10:f9:
44:b9:ca:54:38:0b:8c:b6:8a:32:56:db:74:d9:4b:02:4c:0b:
21:b9:e7:28:00:8e:7c:35:1b:c6:17:ca:34:53:1f:58:88:9f:
c5:98:e6:32:49:df:67:c6:06:63:20:ae:1d:c2:b1:97:79:9c:
fb:e1:82:0e:73:fb:5a:66:d5:dc:70:8a:b8:d1:d8:5b:d9:48:
74:50:d1:46:9f:b5:d3:5e:ec:60:aa:8b:fc:ad:a5:c5:9b:e2:
a6:e2:e6:97:30:b6:56:84:bb:a8:72:63:6e:a2:5d:2c:39:ea:
10:42:14:4c:00:df:8b:92:a4:50:2e:8a:df:0e:b3:7c:04:81:
b8:3b:3c:2a:ab:cb:c4:e8:35:38:3a:b6:be:18:a7:e5:9b:33:
eb:fd:8a:dd:4e:d9:da:dd:bb:ba:a6:e9:ae:d0:e1:c6:57:6b:
84:76:b7:b9:a1:b3:78:1f:87:1d:bc:8f:fd:c2:38:b1:1c:38:
fd:7d:65:a8:c0:26:0b:39:22:b6:4c:15:5a:e8:2e:70:3e:44:
7a:e7:93:cc
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUWm8wy8csZQU5IF0I9WX213BCiiYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjAwMTVaFw0yNzA1MjEwNjA1MTVaMDMxMTAvBgNV
BAMTKDM5QTI0NDgwRTM4QzI3QUE5MzEwMUE3MDU1ODVFNTE5M0U3MTAzMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPJQz9poX4Fb0HJ1rV5Lv4Dn5m
HnHPcDbGZfekC/Bjm8HE6SorLJqqRhY7f82f/0EIiCB4MZHyW6m+7jC85GyKF8Oj
3N1PQ0WpkaVTW2Tk1L+oF2CoieTzhUxPw1ZX6oyZhbaw7/sH86X8NjL+q1vXgdQw
g/oXM871bzg94/vHwuaMicPWekCYUXwKJZw0cLOIaEH+Ei89A6bY8K7cE4MgMG4G
+oFIDDmz7QUyluEaoeXaYBGKQsefZHF2CBtz9C7EzDtfyvc8tw15qSDJDJe3itUv
YskfzVVOvncwqzCi8re9M92Svpxcp6D492NrOmUs1dpIO1FUYiQ9AfVTQZLTAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUOaJEgOOMJ6qTEBpwVYXlGT5xAxMwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzNjI3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqj0TANBgkqhkiG9w0BAQsFAAOCAQEAI/G/
tVZj2Z8n1fEGsYwPt22xFG+DBVxhlMBJVd1VSpOtuiir8W+5rHi8uK7vJjG4uKOV
thD5RLnKVDgLjLaKMlbbdNlLAkwLIbnnKACOfDUbxhfKNFMfWIifxZjmMknfZ8YG
YyCuHcKxl3mc++GCDnP7WmbV3HCKuNHYW9lIdFDRRp+1017sYKqL/K2lxZvipuLm
lzC2VoS7qHJjbqJdLDnqEEIUTADfi5KkUC6K3w6zfASBuDs8KqvLxOg1ODq2vhin
5Zsz6/2K3U7Z2t27uqbprtDhxldrhHa3uaGzeB+HHbyP/cI4sRw4/X1lqMAmCzki
tkwVWugucD5EeueTzA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:00 2026 by rpki-client