Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143682.roa
File: AS143682.roa (raw, json)
Hash identifier: 98HJ6kTK3PP3kEW0wjbdD/b8aZexsxuc/8Mslh0+7X8=
Subject key identifier: A9:D7:B9:0D:49:72:66:CF:4E:AC:92:8F:75:95:33:53:3F:5E:66:81
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 39F507080996E87692730D1085BBE6C0F308F088
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143682.roa
Signing time: Tue 26 May 2026 06:30:25 +0000
ROA not before: Tue 26 May 2026 06:25:25 +0000
ROA not after: Tue 25 May 2027 06:30:25 +0000
asID: 143682
IP address blocks: 240a:a408::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:f5:07:08:09:96:e8:76:92:73:0d:10:85:bb:e6:c0:f3:08:f0:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:25:25 2026 GMT
Not After : May 25 06:30:25 2027 GMT
Subject: CN=A9D7B90D497266CF4EAC928F759533533F5E6681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:64:26:01:a9:10:89:e5:0e:75:f8:2d:0a:f9:
a8:3f:93:2c:89:19:45:b4:56:e4:25:b1:32:26:22:
64:90:76:d7:b1:03:ce:ad:78:a9:c9:1e:b0:5c:67:
3d:79:8c:39:1a:19:ca:6f:59:63:cb:0f:ef:70:c3:
7a:29:2a:6d:51:51:23:6f:40:cc:20:33:8d:45:63:
94:14:a6:37:45:74:95:1a:5d:80:66:9e:14:b2:38:
59:a0:16:88:a3:35:ac:8d:4f:c2:2a:73:f2:72:c8:
d3:57:54:a6:83:68:29:69:ee:b3:1a:ad:5b:f9:32:
a8:d7:a2:27:49:2c:3a:3c:c6:ec:18:ed:7c:7a:04:
c3:b8:bb:a5:a3:0b:d3:c4:ae:80:61:81:d1:65:1c:
eb:a1:22:b1:63:92:e7:71:d9:4e:09:cb:0b:15:a4:
8f:32:bb:b5:9e:d3:10:a1:ae:0c:56:fb:e3:14:da:
6a:d5:42:a7:2b:e1:d9:93:46:60:1c:cd:f2:e1:a6:
c4:f0:3e:e9:6a:0b:b5:48:8f:47:37:72:13:cb:9d:
a1:34:0f:77:c9:ec:04:b8:3f:5e:12:c7:78:c6:91:
eb:97:74:9b:91:2c:ce:89:d7:05:70:6b:62:69:77:
3f:d0:38:60:48:f4:c6:15:a5:3a:ea:e4:e3:da:0e:
c7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D7:B9:0D:49:72:66:CF:4E:AC:92:8F:75:95:33:53:3F:5E:66:81
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143682.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a408::/32
Signature Algorithm: sha256WithRSAEncryption
a8:6a:15:ba:72:d3:4b:4d:84:40:e4:f5:52:55:78:fc:f6:33:
62:35:ad:a0:bb:8c:ea:4d:25:4d:74:20:fd:0d:af:a9:7a:ad:
dc:33:e2:c8:b0:f6:ff:f4:36:68:e2:ae:54:44:3f:5b:ab:35:
64:0a:77:bc:f7:c0:4f:98:cf:f1:9a:af:5b:9e:61:4f:ca:43:
71:e5:02:f3:98:0e:c1:a5:d5:ae:68:1b:b7:bd:f7:ac:a0:f6:
2f:8e:ce:b6:0b:2b:5f:29:f1:5a:06:31:76:ea:46:42:8e:e5:
24:39:2c:63:28:cc:5e:2e:f4:76:7a:f0:40:0d:a4:21:18:bc:
ee:56:bd:7e:7c:60:68:41:d5:87:95:40:14:5b:ac:fa:eb:c7:
b6:b8:95:b5:7a:61:b1:f9:49:02:68:f4:f4:ae:ee:7e:d3:7a:
8f:14:16:1b:b2:9b:24:b2:37:78:3a:b5:62:e2:23:43:19:71:
70:d1:9b:29:ba:e5:d0:fd:2c:74:f8:ac:47:65:c1:b9:53:69:
b6:71:f1:8b:af:f1:39:fe:cb:1a:e1:67:cd:10:35:e8:23:f7:
49:00:c0:7f:73:e1:9b:4b:96:da:7b:54:64:a0:73:cb:6b:6a:
34:b9:64:ab:bf:54:c3:ee:6b:bf:44:1a:f6:69:94:37:60:64:
09:1c:5f:68
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUOfUHCAmW6HaScw0QhbvmwPMI8IgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwNjI1MjVaFw0yNzA1MjUwNjMwMjVaMDMxMTAvBgNV
BAMTKEE5RDdCOTBENDk3MjY2Q0Y0RUFDOTI4Rjc1OTUzMzUzM0Y1RTY2ODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrZCYBqRCJ5Q51+C0K+ag/kyyJ
GUW0VuQlsTImImSQdtexA86teKnJHrBcZz15jDkaGcpvWWPLD+9ww3opKm1RUSNv
QMwgM41FY5QUpjdFdJUaXYBmnhSyOFmgFoijNayNT8Iqc/JyyNNXVKaDaClp7rMa
rVv5MqjXoidJLDo8xuwY7Xx6BMO4u6WjC9PEroBhgdFlHOuhIrFjkudx2U4JywsV
pI8yu7We0xChrgxW++MU2mrVQqcr4dmTRmAczfLhpsTwPulqC7VIj0c3chPLnaE0
D3fJ7AS4P14Sx3jGkeuXdJuRLM6J1wVwa2Jpdz/QOGBI9MYVpTrq5OPaDscJAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUqde5DUlyZs9OrJKPdZUzUz9eZoEwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzNjgyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqkCDANBgkqhkiG9w0BAQsFAAOCAQEAqGoV
unLTS02EQOT1UlV4/PYzYjWtoLuM6k0lTXQg/Q2vqXqt3DPiyLD2//Q2aOKuVEQ/
W6s1ZAp3vPfAT5jP8ZqvW55hT8pDceUC85gOwaXVrmgbt733rKD2L47OtgsrXynx
WgYxdupGQo7lJDksYyjMXi70dnrwQA2kIRi87la9fnxgaEHVh5VAFFus+uvHtriV
tXphsflJAmj09K7uftN6jxQWG7KbJLI3eDq1YuIjQxlxcNGbKbrl0P0sdPisR2XB
uVNptnHxi6/xOf7LGuFnzRA16CP3SQDAf3Phm0uW2ntUZKBzy2tqNLlkq79Uw+5r
v0Qa9mmUN2BkCRxfaA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:09 2026 by rpki-client