Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143647.roa
File: AS143647.roa (raw, json)
Hash identifier: 2L8UZGIvQTJmJcDWCkg0uJkQihiNs2KJedyMhU48YpY=
Subject key identifier: 37:EF:38:69:7F:99:D2:C8:13:3B:14:7A:7A:CB:94:94:C2:A6:42:D5
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 28C29AC0CD1205D3AAC5397F87E37340572FC1B7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143647.roa
Signing time: Fri 22 May 2026 06:58:16 +0000
ROA not before: Fri 22 May 2026 06:53:16 +0000
ROA not after: Fri 21 May 2027 06:58:16 +0000
asID: 143647
IP address blocks: 240a:a3e5::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:c2:9a:c0:cd:12:05:d3:aa:c5:39:7f:87:e3:73:40:57:2f:c1:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:16 2026 GMT
Not After : May 21 06:58:16 2027 GMT
Subject: CN=37EF38697F99D2C8133B147A7ACB9494C2A642D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:98:4e:93:06:fb:f1:b8:39:a6:e7:34:77:b8:
22:09:8a:90:72:b5:22:12:ab:f3:7f:46:07:a9:96:
08:84:b0:ba:e1:33:ad:04:84:e4:7d:b4:77:44:f7:
3d:9e:6f:c1:ab:2d:4e:96:76:52:8c:fb:9b:8a:85:
2a:e3:ff:5b:b1:ed:60:f6:90:b9:d9:26:5b:a5:d1:
57:d7:da:8c:d9:e6:7f:2b:21:f1:fd:66:75:2e:17:
4a:6f:86:fc:e7:9e:d9:7a:48:b0:dc:ee:52:4d:d4:
67:53:f4:e5:dc:f7:70:5a:7b:da:99:d2:a6:92:3a:
e6:54:53:89:4c:d8:d8:63:f5:82:22:6d:86:85:c5:
61:7d:fc:33:96:be:8c:4e:e1:88:3e:5c:6c:0f:ad:
91:55:a3:40:80:53:19:f5:af:6e:b2:79:b0:32:2d:
62:97:f3:3b:14:a9:2e:68:f7:b4:07:09:bd:31:cf:
02:61:df:04:e5:65:c4:d0:ae:51:bd:30:7d:02:62:
d4:61:c8:2b:6e:a0:22:2e:78:62:d0:27:56:2e:9b:
78:a3:67:2a:68:41:b3:0d:d6:97:f6:70:3c:5b:a5:
01:ef:9e:e2:b3:ed:64:d7:44:56:5b:30:19:a9:40:
84:fa:e2:ef:b2:ed:26:43:d9:ed:53:45:65:99:b4:
97:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:EF:38:69:7F:99:D2:C8:13:3B:14:7A:7A:CB:94:94:C2:A6:42:D5
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143647.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3e5::/32
Signature Algorithm: sha256WithRSAEncryption
67:3e:15:4e:8d:2e:6b:38:84:70:f3:51:b4:9d:cc:f2:8e:38:
4d:3b:33:e3:03:1c:ed:a3:52:71:15:d1:d7:23:be:99:01:05:
b2:b0:1b:15:69:40:17:42:1b:82:94:e2:ca:f7:93:be:86:4d:
06:2c:c8:a4:3f:33:f1:4a:1c:7f:14:d3:4b:bf:81:80:54:ce:
0e:47:af:86:60:30:37:ac:6d:76:86:e1:a7:3d:f0:ed:58:d2:
eb:9d:8f:e1:f8:91:5f:2c:bb:c0:17:b5:60:ae:0d:53:47:99:
9a:27:e5:bf:8d:f4:6b:1b:45:7a:10:d9:bd:c4:15:03:8f:a2:
a4:5c:91:ba:bd:09:3a:ed:51:37:82:a7:2a:dd:2c:f9:57:04:
75:2d:dd:04:b5:11:a0:ff:90:aa:40:df:62:a4:5e:fd:30:d4:
03:4a:06:49:08:b7:87:c4:41:ff:a2:9c:65:7f:fa:e0:44:91:
a4:fd:f2:8d:be:b8:fe:8b:c3:b8:79:b7:a3:da:57:b3:e7:03:
b0:40:6f:af:31:a7:87:ea:73:16:2e:c4:52:a6:b1:46:c7:2c:
63:68:c4:96:a3:9d:24:87:88:e7:b3:43:71:64:7a:6d:f8:46:
30:3f:00:73:0d:93:6e:f5:66:a5:92:a3:f2:9d:c9:76:3d:2c:
80:99:9e:d0
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUKMKawM0SBdOqxTl/h+NzQFcvwbcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjUzMTZaFw0yNzA1MjEwNjU4MTZaMDMxMTAvBgNV
BAMTKDM3RUYzODY5N0Y5OUQyQzgxMzNCMTQ3QTdBQ0I5NDk0QzJBNjQyRDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBmE6TBvvxuDmm5zR3uCIJipBy
tSISq/N/RgeplgiEsLrhM60EhOR9tHdE9z2eb8GrLU6WdlKM+5uKhSrj/1ux7WD2
kLnZJlul0VfX2ozZ5n8rIfH9ZnUuF0pvhvznntl6SLDc7lJN1GdT9OXc93Bae9qZ
0qaSOuZUU4lM2Nhj9YIibYaFxWF9/DOWvoxO4Yg+XGwPrZFVo0CAUxn1r26yebAy
LWKX8zsUqS5o97QHCb0xzwJh3wTlZcTQrlG9MH0CYtRhyCtuoCIueGLQJ1Yum3ij
ZypoQbMN1pf2cDxbpQHvnuKz7WTXRFZbMBmpQIT64u+y7SZD2e1TRWWZtJdDAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUN+84aX+Z0sgTOxR6esuUlMKmQtUwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzNjQ3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqj5TANBgkqhkiG9w0BAQsFAAOCAQEAZz4V
To0uaziEcPNRtJ3M8o44TTsz4wMc7aNScRXR1yO+mQEFsrAbFWlAF0IbgpTiyveT
voZNBizIpD8z8UocfxTTS7+BgFTODkevhmAwN6xtdobhpz3w7VjS652P4fiRXyy7
wBe1YK4NU0eZmiflv430axtFehDZvcQVA4+ipFyRur0JOu1RN4KnKt0s+VcEdS3d
BLURoP+QqkDfYqRe/TDUA0oGSQi3h8RB/6KcZX/64ESRpP3yjb64/ovDuHm3o9pX
s+cDsEBvrzGnh+pzFi7EUqaxRscsY2jElqOdJIeI57NDcWR6bfhGMD8Acw2TbvVm
pZKj8p3Jdj0sgJme0A==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:07 2026 by rpki-client