Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143641.roa
File: AS143641.roa (raw, json)
Hash identifier: 4bI6KTAlFMNatcji9BK1oAGgOcG77flD8eexjvz2SBU=
Subject key identifier: 46:E1:DC:52:5F:80:B2:A6:C8:7B:CA:98:AA:F3:14:DB:91:9F:CF:26
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 371E9C478259AEA49FCD10E8E2502254444ED07E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143641.roa
Signing time: Mon 25 May 2026 01:38:42 +0000
ROA not before: Mon 25 May 2026 01:33:42 +0000
ROA not after: Mon 24 May 2027 01:38:42 +0000
asID: 143641
IP address blocks: 240a:a3df::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:1e:9c:47:82:59:ae:a4:9f:cd:10:e8:e2:50:22:54:44:4e:d0:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:42 2026 GMT
Not After : May 24 01:38:42 2027 GMT
Subject: CN=46E1DC525F80B2A6C87BCA98AAF314DB919FCF26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8e:7c:8d:e4:e7:05:42:09:0c:90:f8:4c:04:
b0:ff:c2:82:d8:af:0c:59:46:90:f5:a3:76:82:0f:
fb:da:73:ab:34:9a:8b:d5:29:e1:dd:d4:da:55:87:
4a:03:47:b1:fe:8c:22:1b:da:30:1f:ed:55:db:ae:
9f:99:7b:97:3f:82:2f:24:58:ba:1f:56:21:d0:a1:
75:27:c3:e6:a3:f9:71:e5:f2:72:6a:dc:94:95:9d:
5f:7c:a7:7e:9c:4c:c9:7f:d5:36:92:e3:df:a5:1d:
9a:a9:3b:47:4f:89:5f:4e:57:7d:42:0e:37:86:42:
c6:54:f4:b4:98:5b:83:16:5a:33:5c:d4:41:9f:8e:
c7:9c:a5:a3:36:de:10:9a:29:33:e1:fb:c1:7f:f0:
df:cc:ff:f8:69:5b:41:8d:e3:0d:c7:c5:5f:89:0f:
7b:ef:4a:4b:16:e2:5f:d2:8a:75:a8:eb:b9:c3:21:
9e:7b:fd:dc:3b:50:94:b9:af:fe:68:f3:8a:5a:4e:
d6:26:6c:5e:8b:c7:f8:10:0a:3c:70:84:fa:2e:95:
7e:86:09:89:ef:26:a1:dc:e1:ca:95:85:a5:83:25:
d6:8f:26:65:c2:8f:8c:a8:63:d9:b3:48:5d:54:c0:
6c:f2:f1:2c:df:e9:2c:6a:28:31:05:71:e2:43:e8:
d1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E1:DC:52:5F:80:B2:A6:C8:7B:CA:98:AA:F3:14:DB:91:9F:CF:26
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143641.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3df::/32
Signature Algorithm: sha256WithRSAEncryption
67:79:ef:ef:fd:42:14:a0:63:d1:5c:87:01:8b:ed:2c:0b:35:
e9:31:99:60:ee:fa:a8:51:e7:c8:5f:ca:11:28:ed:0c:73:4f:
5e:bb:5f:ae:68:f9:5b:b3:bf:cf:10:59:68:96:fb:dd:12:c5:
e4:ad:a9:b1:df:e1:76:8b:ea:4d:37:ce:9e:26:20:84:6d:87:
74:ad:1a:26:8a:9b:4e:60:98:8b:0f:a3:41:43:fb:40:02:15:
cb:c6:d0:e7:2c:4d:30:95:58:68:eb:a3:2e:e0:ce:6f:07:7e:
14:df:29:8b:22:aa:f2:85:28:ce:cc:86:1d:b8:54:27:38:f4:
3f:92:ac:26:6d:70:e2:8f:2a:49:89:c6:b2:0e:11:b4:5c:af:
14:59:dc:15:02:f1:0e:44:2c:90:5d:74:e4:be:10:c9:70:14:
59:4c:2d:2e:8e:2b:44:ca:64:0d:87:42:46:48:02:2d:18:6f:
24:1f:0e:e6:44:21:a2:26:1c:9f:87:98:d4:d9:a4:9f:6a:3e:
80:bc:3b:55:a8:b3:47:28:50:af:70:40:90:d9:91:45:38:96:
77:8b:25:f5:49:32:7d:56:26:77:b0:b5:ed:23:34:93:7c:52:
69:22:21:58:f0:00:e9:60:b1:8d:31:96:f7:98:7a:44:e5:1d:
db:86:b0:69
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUNx6cR4JZrqSfzRDo4lAiVERO0H4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTMzNDJaFw0yNzA1MjQwMTM4NDJaMDMxMTAvBgNV
BAMTKDQ2RTFEQzUyNUY4MEIyQTZDODdCQ0E5OEFBRjMxNERCOTE5RkNGMjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKjnyN5OcFQgkMkPhMBLD/woLY
rwxZRpD1o3aCD/vac6s0movVKeHd1NpVh0oDR7H+jCIb2jAf7VXbrp+Ze5c/gi8k
WLofViHQoXUnw+aj+XHl8nJq3JSVnV98p36cTMl/1TaS49+lHZqpO0dPiV9OV31C
DjeGQsZU9LSYW4MWWjNc1EGfjsecpaM23hCaKTPh+8F/8N/M//hpW0GN4w3HxV+J
D3vvSksW4l/SinWo67nDIZ57/dw7UJS5r/5o84paTtYmbF6Lx/gQCjxwhPoulX6G
CYnvJqHc4cqVhaWDJdaPJmXCj4yoY9mzSF1UwGzy8Szf6SxqKDEFceJD6NEtAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQURuHcUl+AsqbIe8qYqvMU25GfzyYwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzNjQxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqj3zANBgkqhkiG9w0BAQsFAAOCAQEAZ3nv
7/1CFKBj0VyHAYvtLAs16TGZYO76qFHnyF/KESjtDHNPXrtfrmj5W7O/zxBZaJb7
3RLF5K2psd/hdovqTTfOniYghG2HdK0aJoqbTmCYiw+jQUP7QAIVy8bQ5yxNMJVY
aOujLuDObwd+FN8piyKq8oUozsyGHbhUJzj0P5KsJm1w4o8qSYnGsg4RtFyvFFnc
FQLxDkQskF105L4QyXAUWUwtLo4rRMpkDYdCRkgCLRhvJB8O5kQhoiYcn4eY1Nmk
n2o+gLw7VaizRyhQr3BAkNmRRTiWd4sl9UkyfVYmd7C17SM0k3xSaSIhWPAA6WCx
jTGW95h6ROUd24awaQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:22 2026 by rpki-client