Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143662.roa
File: AS143662.roa (raw, json)
Hash identifier: rpmRZ3QpVRO+vCga8PxAVyWHdK2upNeqjE+F/DjcOEs=
Subject key identifier: E6:A3:C4:1B:37:AF:F8:8C:C4:2A:45:30:BA:3B:FD:B7:93:FD:3B:39
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5984221B872BC2F2BEDDA337FD613DCA31FF4CD8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143662.roa
Signing time: Mon 25 May 2026 06:28:42 +0000
ROA not before: Mon 25 May 2026 06:23:42 +0000
ROA not after: Mon 24 May 2027 06:28:42 +0000
asID: 143662
IP address blocks: 240a:a3f4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:84:22:1b:87:2b:c2:f2:be:dd:a3:37:fd:61:3d:ca:31:ff:4c:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:42 2026 GMT
Not After : May 24 06:28:42 2027 GMT
Subject: CN=E6A3C41B37AFF88CC42A4530BA3BFDB793FD3B39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f3:eb:93:66:0c:b4:9b:3b:e9:92:36:47:b1:
9d:ef:6e:13:1c:19:55:51:62:e3:0f:74:c6:84:43:
64:ee:20:0e:b4:33:87:13:a9:42:d0:c4:0e:a2:c0:
48:76:83:a8:be:48:88:1a:9c:52:7e:a8:17:74:3e:
95:55:13:4d:5f:bc:2b:d5:50:39:b6:4e:1f:cc:9c:
41:2d:99:3b:56:f0:c6:99:5e:b3:ce:cd:d0:19:7d:
6f:6f:a1:8c:2a:e1:c3:cb:81:29:1f:47:ee:1c:65:
70:50:be:71:48:d8:9c:20:19:7e:09:3f:1c:ad:b3:
62:98:e3:60:f1:e4:dc:d9:6d:91:60:50:60:4b:ff:
17:b1:16:55:1d:4a:94:c1:7e:01:fb:c1:2b:52:39:
75:52:74:51:97:8b:a3:c9:31:4b:a6:18:b5:36:79:
27:14:99:66:6b:b7:bf:a0:ea:36:4e:e0:9f:ee:44:
de:b3:a5:7d:ce:cb:f4:fd:a9:86:b6:a6:00:1e:68:
72:c1:57:90:e0:51:a1:d2:3b:23:d5:6c:bb:2e:e6:
99:b2:d4:2c:9b:00:f9:0d:e5:cf:1e:55:9b:eb:44:
5c:3f:68:f2:f8:c1:93:6e:fe:4d:b2:3d:92:8f:f1:
89:0e:4d:94:e7:00:02:06:85:1d:89:80:ba:a6:cf:
88:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A3:C4:1B:37:AF:F8:8C:C4:2A:45:30:BA:3B:FD:B7:93:FD:3B:39
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143662.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3f4::/32
Signature Algorithm: sha256WithRSAEncryption
09:f7:1d:7f:ac:55:1e:8a:e3:2e:f2:34:13:d6:38:e1:11:46:
40:d9:86:23:67:7e:0b:63:27:e9:27:e5:d9:73:94:79:9e:4a:
b1:f6:42:08:69:e6:f6:ce:7b:50:38:46:70:a1:0f:2d:15:01:
b8:ea:9a:de:19:43:0a:f4:e5:62:46:d6:bc:41:3e:ab:5f:85:
2e:59:0d:4e:ad:46:9e:df:53:70:86:4b:5e:9d:f6:ec:82:8d:
74:67:b4:58:24:5d:49:f5:57:29:0d:b8:55:ac:45:90:8b:68:
a9:be:b7:a6:94:9d:9d:2d:c7:31:0c:91:21:9f:d0:4b:9e:7e:
21:e9:1d:76:38:65:cf:92:97:f5:3d:e2:35:03:79:39:e6:ba:
db:88:34:80:89:74:47:4e:00:af:11:19:ba:49:0f:22:64:a1:
4f:fb:27:04:ed:3b:37:72:87:4c:fa:d3:e3:29:b1:b3:4f:78:
d0:af:86:7d:b3:16:47:71:54:a3:39:33:ca:75:07:52:1b:bb:
e9:02:88:d5:5f:49:ff:de:ee:09:b1:61:fc:bc:f9:c0:c9:dc:
63:48:62:5c:44:e0:81:be:10:a0:f1:29:06:cb:97:1c:be:6d:
4b:a2:2f:87:ef:7c:b8:9a:37:a7:2d:c9:38:11:e4:05:b6:e7:
59:42:aa:e3
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUWYQiG4crwvK+3aM3/WE9yjH/TNgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwNjIzNDJaFw0yNzA1MjQwNjI4NDJaMDMxMTAvBgNV
BAMTKEU2QTNDNDFCMzdBRkY4OENDNDJBNDUzMEJBM0JGREI3OTNGRDNCMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCO8+uTZgy0mzvpkjZHsZ3vbhMc
GVVRYuMPdMaEQ2TuIA60M4cTqULQxA6iwEh2g6i+SIganFJ+qBd0PpVVE01fvCvV
UDm2Th/MnEEtmTtW8MaZXrPOzdAZfW9voYwq4cPLgSkfR+4cZXBQvnFI2JwgGX4J
Pxyts2KY42Dx5NzZbZFgUGBL/xexFlUdSpTBfgH7wStSOXVSdFGXi6PJMUumGLU2
eScUmWZrt7+g6jZO4J/uRN6zpX3Oy/T9qYa2pgAeaHLBV5DgUaHSOyPVbLsu5pmy
1CybAPkN5c8eVZvrRFw/aPL4wZNu/k2yPZKP8YkOTZTnAAIGhR2JgLqmz4hzAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU5qPEGzev+IzEKkUwujv9t5P9OzkwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzNjYyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqj9DANBgkqhkiG9w0BAQsFAAOCAQEACfcd
f6xVHorjLvI0E9Y44RFGQNmGI2d+C2Mn6Sfl2XOUeZ5KsfZCCGnm9s57UDhGcKEP
LRUBuOqa3hlDCvTlYkbWvEE+q1+FLlkNTq1Gnt9TcIZLXp327IKNdGe0WCRdSfVX
KQ24VaxFkItoqb63ppSdnS3HMQyRIZ/QS55+Iekddjhlz5KX9T3iNQN5Oea624g0
gIl0R04ArxEZukkPImShT/snBO07N3KHTPrT4ymxs0940K+GfbMWR3FUozkzynUH
Uhu76QKI1V9J/97uCbFh/Lz5wMncY0hiXETggb4QoPEpBsuXHL5tS6Ivh+98uJo3
py3JOBHkBbbnWUKq4w==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:08 2026 by rpki-client