Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143649.roa
File: AS143649.roa (raw, json)
Hash identifier: +RqmHtVLoZ0M3NSnCzvbDBhUyWihdxhIY0TZHzt9mxA=
Subject key identifier: 07:19:C1:28:08:01:42:95:09:2D:FD:26:F1:08:9B:54:46:EE:E1:F2
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0BE58D8011420C3AB0EC9D7867FA4F8B8F029E51
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143649.roa
Signing time: Fri 22 May 2026 07:32:07 +0000
ROA not before: Fri 22 May 2026 07:27:07 +0000
ROA not after: Fri 21 May 2027 07:32:07 +0000
asID: 143649
IP address blocks: 240a:a3e7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:e5:8d:80:11:42:0c:3a:b0:ec:9d:78:67:fa:4f:8b:8f:02:9e:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:07 2026 GMT
Not After : May 21 07:32:07 2027 GMT
Subject: CN=0719C12808014295092DFD26F1089B5446EEE1F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d0:8b:e0:cd:f0:25:a3:a8:7a:9c:cb:99:87:
9e:59:bb:07:0f:b7:10:49:8c:fb:82:3e:1a:a8:d3:
89:f1:cb:b6:20:18:38:94:2d:2e:bb:13:c3:a6:13:
c5:aa:f4:95:63:85:3d:fa:6d:09:47:10:59:ca:b7:
28:4b:79:27:c0:51:70:86:86:ec:e3:b8:4d:8c:0d:
cb:33:e4:80:c0:19:76:e3:31:32:45:7c:e9:03:b4:
c3:d1:0d:41:05:f9:95:d0:34:85:06:99:d6:c7:46:
f2:c3:76:d5:90:cd:f1:f1:96:01:d7:bd:bb:b7:21:
9d:55:4f:f9:d4:6a:34:f6:d7:8e:7b:53:62:9d:fb:
8e:7f:ec:8c:c2:b7:1b:67:bc:7e:e5:ea:ed:51:6d:
e5:e5:b9:62:68:1b:66:1a:0a:d9:df:8a:87:78:75:
cd:ca:ea:9b:e6:80:ee:1a:48:e2:db:eb:0e:42:6e:
54:f9:15:83:9a:76:31:ad:70:90:c7:e4:b6:80:78:
a6:cc:3c:45:c2:13:9e:16:a5:97:61:bb:66:ad:b9:
65:ed:3d:01:5e:c6:a8:43:66:c7:39:1f:74:3f:2c:
39:e5:af:41:50:38:20:f0:80:79:ef:21:4f:bc:19:
23:54:d8:fe:ee:9d:16:ec:1f:5d:b8:3c:cd:06:71:
75:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:19:C1:28:08:01:42:95:09:2D:FD:26:F1:08:9B:54:46:EE:E1:F2
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143649.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3e7::/32
Signature Algorithm: sha256WithRSAEncryption
b6:c3:98:29:fd:51:1a:12:83:11:f7:3a:d9:cd:67:ff:4a:a2:
05:27:90:0c:e3:8d:57:5c:a1:d1:62:22:92:31:67:ea:63:5c:
70:cd:3d:8c:8b:77:ce:4e:08:e3:9c:cd:8d:5f:4c:f0:61:79:
71:3d:99:f4:e0:42:95:ad:62:83:5e:3f:f8:4e:09:d3:8c:1f:
4d:9a:67:cf:11:82:51:0f:4d:56:33:84:8e:09:75:54:9b:9f:
ef:5a:70:d8:3e:20:af:93:fc:65:99:0a:fc:76:bf:cb:97:be:
fa:e9:f4:e4:6e:a9:41:66:7f:7a:64:e2:da:8a:3e:5d:53:83:
48:8e:01:79:ef:74:38:76:6a:c9:6d:f1:53:ca:d5:1a:90:3a:
32:4e:79:ca:c6:23:6b:1c:96:c2:5b:fb:e8:f8:b7:ba:71:76:
44:58:3e:9f:82:a9:2c:ab:7b:29:27:96:31:4b:ca:d2:b9:b1:
73:ea:c9:cb:58:08:ef:ec:98:95:ff:11:54:90:e4:c8:c2:11:
26:d0:be:94:e9:f8:3f:b4:40:35:8a:6e:e0:ec:8c:31:1a:85:
e6:4e:b3:57:a9:61:7f:43:a7:62:dd:7d:81:78:bc:f2:3c:55:
97:7f:01:9e:0e:82:32:78:52:b2:a0:84:ec:b1:58:92:3a:dc:
17:a9:44:e9
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUC+WNgBFCDDqw7J14Z/pPi48CnlEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzI3MDdaFw0yNzA1MjEwNzMyMDdaMDMxMTAvBgNV
BAMTKDA3MTlDMTI4MDgwMTQyOTUwOTJERkQyNkYxMDg5QjU0NDZFRUUxRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa0IvgzfAlo6h6nMuZh55ZuwcP
txBJjPuCPhqo04nxy7YgGDiULS67E8OmE8Wq9JVjhT36bQlHEFnKtyhLeSfAUXCG
huzjuE2MDcsz5IDAGXbjMTJFfOkDtMPRDUEF+ZXQNIUGmdbHRvLDdtWQzfHxlgHX
vbu3IZ1VT/nUajT21457U2Kd+45/7IzCtxtnvH7l6u1RbeXluWJoG2YaCtnfiod4
dc3K6pvmgO4aSOLb6w5CblT5FYOadjGtcJDH5LaAeKbMPEXCE54WpZdhu2atuWXt
PQFexqhDZsc5H3Q/LDnlr0FQOCDwgHnvIU+8GSNU2P7unRbsH124PM0GcXXDAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUBxnBKAgBQpUJLf0m8QibVEbu4fIwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzNjQ5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqj5zANBgkqhkiG9w0BAQsFAAOCAQEAtsOY
Kf1RGhKDEfc62c1n/0qiBSeQDOONV1yh0WIikjFn6mNccM09jIt3zk4I45zNjV9M
8GF5cT2Z9OBCla1ig14/+E4J04wfTZpnzxGCUQ9NVjOEjgl1VJuf71pw2D4gr5P8
ZZkK/Ha/y5e++un05G6pQWZ/emTi2oo+XVODSI4Bee90OHZqyW3xU8rVGpA6Mk55
ysYjaxyWwlv76Pi3unF2RFg+n4KpLKt7KSeWMUvK0rmxc+rJy1gI7+yYlf8RVJDk
yMIRJtC+lOn4P7RANYpu4OyMMRqF5k6zV6lhf0OnYt19gXi88jxVl38Bng6CMnhS
sqCE7LFYkjrcF6lE6Q==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:49 2026 by rpki-client