Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143658.roa
File: AS143658.roa (raw, json)
Hash identifier: XBpJ4YH9qeyPduZuV8kC75T7GaIswcmDTbA/66D3CWo=
Subject key identifier: 10:4B:02:69:12:80:2E:2C:E4:12:8C:57:A7:A7:18:24:DD:69:4C:E6
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5287BDD1DABBBB28F64ECB929A489F3BDA1FDBB4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143658.roa
Signing time: Fri 22 May 2026 06:27:52 +0000
ROA not before: Fri 22 May 2026 06:22:52 +0000
ROA not after: Fri 21 May 2027 06:27:52 +0000
asID: 143658
IP address blocks: 240a:a3f0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:87:bd:d1:da:bb:bb:28:f6:4e:cb:92:9a:48:9f:3b:da:1f:db:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:22:52 2026 GMT
Not After : May 21 06:27:52 2027 GMT
Subject: CN=104B026912802E2CE4128C57A7A71824DD694CE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a1:d7:fd:40:72:1f:f8:d5:6a:e4:d8:fa:89:
e5:61:7a:ee:43:92:18:ba:4f:3d:a0:50:61:e4:17:
6f:54:f4:39:74:9e:3f:fb:7f:c1:70:48:90:e0:db:
f6:24:16:68:e5:ca:e9:69:de:9c:63:03:0c:6e:29:
ba:2a:57:77:69:a7:d3:84:93:30:89:02:1f:51:88:
15:c5:dc:86:44:bc:ac:ac:24:33:53:18:82:9a:e3:
f9:c3:45:9f:28:ed:2e:3d:63:cb:c5:ce:f9:28:93:
ec:f3:34:18:88:8f:93:a2:4a:f0:1e:f1:9f:fd:40:
7e:3a:87:ee:d4:52:66:01:14:0c:7d:7a:a2:84:25:
d0:4e:df:58:c1:1f:ee:e4:78:9f:15:dd:14:7f:4f:
d8:1a:2e:0d:d2:76:54:be:b2:44:e3:df:44:fb:19:
01:71:b9:81:47:6f:24:3c:21:4d:82:e0:e4:80:dc:
75:6a:ef:fc:b3:cf:ed:a6:d0:25:4d:04:ce:79:75:
f7:8d:28:01:5d:93:c7:ec:0c:8f:fa:39:5f:59:e4:
05:79:2b:e0:c4:ae:33:7c:61:af:0e:d9:ee:13:b0:
50:c7:47:a6:d6:39:92:3f:e2:0f:1c:f6:37:fa:07:
e2:44:30:04:6c:83:01:0b:35:65:48:7a:cd:5c:d5:
55:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:4B:02:69:12:80:2E:2C:E4:12:8C:57:A7:A7:18:24:DD:69:4C:E6
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143658.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3f0::/32
Signature Algorithm: sha256WithRSAEncryption
1a:e7:ef:27:1d:16:c1:a5:e6:b5:4a:52:df:85:a3:2b:fd:a6:
d9:3a:ba:ac:c5:f9:63:50:6b:af:0c:96:ba:7c:96:96:70:b1:
13:36:91:93:47:16:4e:7e:7a:60:8d:02:a8:9c:c5:7d:c4:fa:
f5:cd:3c:91:58:42:2a:55:72:00:dd:a5:19:d5:ed:03:23:b7:
59:9e:5b:ed:11:4a:9f:74:41:f9:47:08:03:21:af:a7:7d:42:
43:b1:bb:9f:b1:2d:b6:0a:23:e9:50:5c:d6:45:d0:42:10:44:
7d:91:ff:44:25:54:5d:6c:c3:b0:1d:7c:cc:fd:2e:14:b0:de:
92:37:67:48:4d:c2:7c:b3:1c:b4:05:6b:55:f0:dc:4d:eb:26:
e0:04:fd:bf:8c:c3:e8:b2:5c:c9:28:3d:05:63:95:e6:53:27:
ed:e4:29:5b:02:90:c3:89:79:de:6b:f5:16:32:3a:60:3f:f1:
15:86:3f:57:7d:f5:87:25:35:3f:11:ed:ff:d6:c6:32:76:dc:
52:25:e0:92:e1:ad:90:03:a6:3f:47:34:6e:87:3f:e3:fb:7a:
9f:13:94:31:77:5c:c7:da:90:bf:e9:f6:36:59:22:7b:7e:3c:
a0:2f:de:16:bd:17:f4:49:a3:90:c8:4e:46:52:c1:d5:07:2e:
0f:88:54:77
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUUoe90dq7uyj2TsuSmkifO9of27QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjIyNTJaFw0yNzA1MjEwNjI3NTJaMDMxMTAvBgNV
BAMTKDEwNEIwMjY5MTI4MDJFMkNFNDEyOEM1N0E3QTcxODI0REQ2OTRDRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0odf9QHIf+NVq5Nj6ieVheu5D
khi6Tz2gUGHkF29U9Dl0nj/7f8FwSJDg2/YkFmjlyulp3pxjAwxuKboqV3dpp9OE
kzCJAh9RiBXF3IZEvKysJDNTGIKa4/nDRZ8o7S49Y8vFzvkok+zzNBiIj5OiSvAe
8Z/9QH46h+7UUmYBFAx9eqKEJdBO31jBH+7keJ8V3RR/T9gaLg3SdlS+skTj30T7
GQFxuYFHbyQ8IU2C4OSA3HVq7/yzz+2m0CVNBM55dfeNKAFdk8fsDI/6OV9Z5AV5
K+DErjN8Ya8O2e4TsFDHR6bWOZI/4g8c9jf6B+JEMARsgwELNWVIes1c1VVpAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUEEsCaRKALizkEoxXp6cYJN1pTOYwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzNjU4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqj8DANBgkqhkiG9w0BAQsFAAOCAQEAGufv
Jx0WwaXmtUpS34WjK/2m2Tq6rMX5Y1BrrwyWunyWlnCxEzaRk0cWTn56YI0CqJzF
fcT69c08kVhCKlVyAN2lGdXtAyO3WZ5b7RFKn3RB+UcIAyGvp31CQ7G7n7Ettgoj
6VBc1kXQQhBEfZH/RCVUXWzDsB18zP0uFLDekjdnSE3CfLMctAVrVfDcTesm4AT9
v4zD6LJcySg9BWOV5lMn7eQpWwKQw4l53mv1FjI6YD/xFYY/V331hyU1PxHt/9bG
MnbcUiXgkuGtkAOmP0c0boc/4/t6nxOUMXdcx9qQv+n2Nlkie348oC/eFr0X9Emj
kMhORlLB1QcuD4hUdw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:13 2026 by rpki-client