Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143679.roa
File: AS143679.roa (raw, json)
Hash identifier: yy9x5Ee6dXq9W3fD4KcTKEWu950B3fKXnW6Dt0NM/1I=
Subject key identifier: 68:6C:06:03:73:19:B9:9E:C0:26:A9:A2:A5:8D:90:84:D7:B2:15:7E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0C6FABC1100933C8AC4F5347875FCAEDBABBB68D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143679.roa
Signing time: Fri 22 May 2026 02:47:38 +0000
ROA not before: Fri 22 May 2026 02:42:38 +0000
ROA not after: Fri 21 May 2027 02:47:38 +0000
asID: 143679
IP address blocks: 240a:a405::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:6f:ab:c1:10:09:33:c8:ac:4f:53:47:87:5f:ca:ed:ba:bb:b6:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:38 2026 GMT
Not After : May 21 02:47:38 2027 GMT
Subject: CN=686C06037319B99EC026A9A2A58D9084D7B2157E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2e:bb:b0:df:7f:46:3e:8e:06:46:c1:f1:48:
b6:68:5a:4b:0d:33:45:09:7a:2f:bb:5a:66:29:a4:
9a:46:22:13:82:c6:40:35:3a:5a:5e:89:c4:74:9e:
ab:ec:8f:8b:71:da:d4:f2:8d:2b:f3:90:98:9f:09:
fc:2d:05:01:34:88:38:0b:3c:af:33:e5:44:42:90:
ac:b3:51:36:9e:d0:33:93:3c:11:6d:e4:55:18:6b:
0b:a6:ad:d5:69:a5:96:9f:c1:d1:8c:57:4f:79:9d:
c1:f3:15:6a:28:6f:e3:c2:1f:dd:c1:5f:5b:d3:d5:
01:55:1b:8a:f6:0e:fb:29:bb:ca:c5:f6:1b:62:a2:
07:3a:50:31:45:bf:00:fd:3a:6a:43:80:d6:eb:82:
c2:77:f2:a9:8e:fb:23:ce:a2:b4:fe:dd:f9:56:f6:
b5:67:e6:e3:6e:b3:e7:6a:ca:35:12:d9:69:93:75:
d5:b3:4d:1c:ca:0f:3f:be:5d:a0:88:e7:fd:3d:18:
2c:df:d1:00:5b:77:aa:f5:2b:11:94:dd:dc:03:1e:
09:7c:17:d5:76:b1:e4:0d:04:fe:d5:9d:c3:45:80:
94:7a:45:f5:09:a1:25:a4:07:e5:6f:84:08:40:17:
ce:60:48:fa:a9:87:71:e1:ce:a9:e5:59:14:c8:0f:
f0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:6C:06:03:73:19:B9:9E:C0:26:A9:A2:A5:8D:90:84:D7:B2:15:7E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143679.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a405::/32
Signature Algorithm: sha256WithRSAEncryption
ac:6f:54:ee:6d:8f:67:ce:ad:e4:aa:df:a3:8d:9c:0f:af:5a:
9e:45:21:fc:f0:46:1f:81:8c:2a:d1:e4:3e:e9:7a:12:e7:b5:
8a:66:54:a8:d9:bb:24:53:59:1d:e8:e0:b2:64:b2:ca:8a:06:
55:f5:26:9e:31:81:48:22:d2:d2:6f:92:f0:cd:c7:14:2f:3c:
0f:e1:4e:85:ca:73:1d:57:0d:49:ab:87:c5:bf:9d:db:dc:7a:
06:8b:8b:1f:de:db:d0:54:e0:f6:24:54:7e:15:5f:cb:2d:ef:
c3:7e:2f:b9:44:26:4f:08:18:13:a7:f2:ba:54:3a:a0:fb:51:
a5:98:5b:6e:4b:0a:a1:27:64:e6:db:83:ed:36:1f:81:3a:d8:
35:41:00:e9:84:cd:5e:96:d0:59:27:ef:c1:13:ea:85:af:3d:
5f:87:ae:26:15:57:c9:88:3b:55:4e:95:53:d4:da:29:91:d2:
55:12:89:19:65:7f:18:c4:ce:dc:dc:47:4b:8c:88:d2:73:7d:
18:38:c0:57:97:7a:28:15:fe:dc:f9:6b:43:5c:f5:ad:67:4a:
54:ea:5d:dc:92:a3:61:c1:75:f2:b1:d0:af:44:cd:ca:aa:16:
ec:7d:83:1a:02:b3:db:0a:22:f0:22:45:29:b6:40:a9:57:c4:
cc:9f:1a:81
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUDG+rwRAJM8isT1NHh1/K7bq7to0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwMjQyMzhaFw0yNzA1MjEwMjQ3MzhaMDMxMTAvBgNV
BAMTKDY4NkMwNjAzNzMxOUI5OUVDMDI2QTlBMkE1OEQ5MDg0RDdCMjE1N0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Lruw339GPo4GRsHxSLZoWksN
M0UJei+7WmYppJpGIhOCxkA1OlpeicR0nqvsj4tx2tTyjSvzkJifCfwtBQE0iDgL
PK8z5URCkKyzUTae0DOTPBFt5FUYawumrdVppZafwdGMV095ncHzFWoob+PCH93B
X1vT1QFVG4r2Dvspu8rF9htiogc6UDFFvwD9OmpDgNbrgsJ38qmO+yPOorT+3flW
9rVn5uNus+dqyjUS2WmTddWzTRzKDz++XaCI5/09GCzf0QBbd6r1KxGU3dwDHgl8
F9V2seQNBP7VncNFgJR6RfUJoSWkB+VvhAhAF85gSPqph3HhzqnlWRTID/BPAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUaGwGA3MZuZ7AJqmipY2QhNeyFX4wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzNjc5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqkBTANBgkqhkiG9w0BAQsFAAOCAQEArG9U
7m2PZ86t5Krfo42cD69ankUh/PBGH4GMKtHkPul6Eue1imZUqNm7JFNZHejgsmSy
yooGVfUmnjGBSCLS0m+S8M3HFC88D+FOhcpzHVcNSauHxb+d29x6BouLH97b0FTg
9iRUfhVfyy3vw34vuUQmTwgYE6fyulQ6oPtRpZhbbksKoSdk5tuD7TYfgTrYNUEA
6YTNXpbQWSfvwRPqha89X4euJhVXyYg7VU6VU9TaKZHSVRKJGWV/GMTO3NxHS4yI
0nN9GDjAV5d6KBX+3PlrQ1z1rWdKVOpd3JKjYcF18rHQr0TNyqoW7H2DGgKz2woi
8CJFKbZAqVfEzJ8agQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:23 2026 by rpki-client