Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143665.roa
File: AS143665.roa (raw, json)
Hash identifier: t8VMg+NuoRlsqOE6uNN1I2GlGpD0mgLtyQ/MC7amed0=
Subject key identifier: 8C:95:84:0E:63:0F:45:B6:0C:5D:E4:9B:25:68:BE:69:7F:87:AC:DA
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6D366AFA695357164EDBD52CEE0E197051CBA655
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143665.roa
Signing time: Fri 22 May 2026 04:27:10 +0000
ROA not before: Fri 22 May 2026 04:22:10 +0000
ROA not after: Fri 21 May 2027 04:27:10 +0000
asID: 143665
IP address blocks: 240a:a3f7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:36:6a:fa:69:53:57:16:4e:db:d5:2c:ee:0e:19:70:51:cb:a6:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:22:10 2026 GMT
Not After : May 21 04:27:10 2027 GMT
Subject: CN=8C95840E630F45B60C5DE49B2568BE697F87ACDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8a:0d:c9:25:78:72:9a:26:a6:65:56:2a:2a:
c1:c9:2f:c1:3d:74:58:78:03:b3:a0:64:81:72:11:
36:21:22:ec:0d:d3:8e:0d:83:85:fa:19:52:2f:78:
ca:ee:8b:73:54:d2:62:43:51:eb:aa:2c:b9:d5:15:
12:09:01:63:3c:a4:c3:02:fb:52:5d:f2:82:3f:76:
ef:0b:2e:17:cc:4d:40:b9:08:78:a0:aa:be:a4:62:
af:43:e1:9f:7d:ba:9e:d9:83:5e:dd:59:f0:2b:5f:
fb:6f:d6:4a:3b:a6:8e:fc:d0:70:c2:fa:a1:0b:25:
4a:3e:ca:74:af:07:cb:f4:49:7d:d3:84:a1:14:88:
f0:d7:30:c1:c2:d7:d2:55:99:ad:f8:6f:ec:75:d5:
49:ca:4a:68:12:1d:9c:be:cc:29:5b:08:0e:34:4d:
c2:35:0d:f7:bb:03:30:c6:f4:68:08:de:00:88:f8:
f0:39:70:66:6b:1c:b6:f0:c9:02:ac:85:00:4b:61:
3e:1b:c9:40:64:8b:4f:a8:45:66:7e:2d:0e:8b:cd:
35:e6:ed:5b:55:3d:ad:ae:6d:53:11:dc:03:95:d1:
e4:17:e6:1a:94:4e:c9:a8:86:cc:8e:61:44:06:91:
fe:d7:6f:8a:2c:37:eb:48:29:30:35:76:e0:35:32:
1b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:95:84:0E:63:0F:45:B6:0C:5D:E4:9B:25:68:BE:69:7F:87:AC:DA
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143665.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3f7::/32
Signature Algorithm: sha256WithRSAEncryption
45:f8:da:e2:0c:16:f1:23:fe:32:ea:08:d3:35:54:6e:b0:14:
0a:f9:d0:bd:41:5e:62:f2:fd:cf:5d:94:14:e3:8f:02:e0:7f:
6f:cc:10:a3:46:1f:75:6c:c2:fc:d4:de:53:c3:2a:e3:4f:34:
66:99:cc:81:58:71:74:f3:e0:75:08:2f:89:ba:c9:3d:45:e9:
c7:99:78:29:d7:7b:b5:73:9c:27:28:e5:70:5c:97:23:ec:b1:
9f:a9:cb:76:8a:96:f4:5b:67:0b:0b:ba:41:8d:4c:3c:16:80:
4d:f7:ed:9b:1e:88:54:f6:76:c1:8a:a9:5e:d2:83:e6:54:92:
5b:8e:50:8e:0d:17:29:06:23:4c:ec:79:6c:94:15:ff:02:c0:
ab:f8:14:05:d6:17:d2:cb:06:70:e7:6b:df:b8:3b:14:92:2c:
fe:0f:12:f0:21:89:b0:c0:b6:40:78:17:5d:47:45:fc:46:b0:
81:35:c0:cd:b0:fb:cb:0c:df:f3:e3:11:8a:d8:6f:5b:9a:83:
88:69:4f:90:0c:81:81:87:b4:6f:03:08:23:dd:90:db:94:9a:
bb:e5:7b:63:6f:9a:74:a0:fb:19:6d:bd:a1:04:6d:8f:f5:ab:
3b:07:71:15:a0:b6:02:fd:00:39:33:e5:bd:fa:9c:8d:47:13:
e9:24:18:bf
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUbTZq+mlTVxZO29Us7g4ZcFHLplUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNDIyMTBaFw0yNzA1MjEwNDI3MTBaMDMxMTAvBgNV
BAMTKDhDOTU4NDBFNjMwRjQ1QjYwQzVERTQ5QjI1NjhCRTY5N0Y4N0FDREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcig3JJXhymiamZVYqKsHJL8E9
dFh4A7OgZIFyETYhIuwN044Ng4X6GVIveMrui3NU0mJDUeuqLLnVFRIJAWM8pMMC
+1Jd8oI/du8LLhfMTUC5CHigqr6kYq9D4Z99up7Zg17dWfArX/tv1ko7po780HDC
+qELJUo+ynSvB8v0SX3ThKEUiPDXMMHC19JVma34b+x11UnKSmgSHZy+zClbCA40
TcI1Dfe7AzDG9GgI3gCI+PA5cGZrHLbwyQKshQBLYT4byUBki0+oRWZ+LQ6LzTXm
7VtVPa2ubVMR3AOV0eQX5hqUTsmohsyOYUQGkf7Xb4osN+tIKTA1duA1MhsBAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUjJWEDmMPRbYMXeSbJWi+aX+HrNowHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzNjY1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqj9zANBgkqhkiG9w0BAQsFAAOCAQEARfja
4gwW8SP+MuoI0zVUbrAUCvnQvUFeYvL9z12UFOOPAuB/b8wQo0YfdWzC/NTeU8Mq
4080ZpnMgVhxdPPgdQgvibrJPUXpx5l4Kdd7tXOcJyjlcFyXI+yxn6nLdoqW9Ftn
Cwu6QY1MPBaATfftmx6IVPZ2wYqpXtKD5lSSW45Qjg0XKQYjTOx5bJQV/wLAq/gU
BdYX0ssGcOdr37g7FJIs/g8S8CGJsMC2QHgXXUdF/EawgTXAzbD7ywzf8+MRithv
W5qDiGlPkAyBgYe0bwMII92Q25Sau+V7Y2+adKD7GW29oQRtj/WrOwdxFaC2Av0A
OTPlvfqcjUcT6SQYvw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:53 2026 by rpki-client