Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143685.roa
File: AS143685.roa (raw, json)
Hash identifier: f2+Fqe+FMYQpSkTULMln3tRP5k5vOJpNiu8UcINnkr4=
Subject key identifier: 93:F9:50:92:19:1A:3A:52:08:FB:D0:E1:C0:0B:3E:1C:4F:78:24:7B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0C4AF4633C3C2C4C9737F0691849835E0236EC55
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143685.roa
Signing time: Fri 22 May 2026 02:48:08 +0000
ROA not before: Fri 22 May 2026 02:43:08 +0000
ROA not after: Fri 21 May 2027 02:48:08 +0000
asID: 143685
IP address blocks: 240a:a40b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:4a:f4:63:3c:3c:2c:4c:97:37:f0:69:18:49:83:5e:02:36:ec:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:43:08 2026 GMT
Not After : May 21 02:48:08 2027 GMT
Subject: CN=93F95092191A3A5208FBD0E1C00B3E1C4F78247B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:70:de:33:8c:e3:56:1f:f4:e6:82:dc:da:4b:
cc:45:51:92:e3:cc:04:84:92:f5:38:e3:f1:c9:ad:
74:e9:0c:38:1b:9b:8c:9a:9b:7d:b7:6e:ca:61:a8:
9c:c9:a5:9c:ec:f3:45:cf:73:97:2b:d1:82:5d:23:
ba:f6:11:a8:5d:17:cb:b5:e9:86:0d:01:6b:c1:ed:
24:38:08:31:ec:8a:e4:27:a4:90:f1:af:8c:f1:5c:
3a:bb:38:9c:b5:38:84:9e:c8:39:3d:78:18:54:05:
06:d6:b6:62:a5:14:69:50:bd:b7:8d:64:28:8a:1b:
82:9a:12:80:3f:c8:99:c0:28:56:01:0c:a1:68:67:
42:65:2f:aa:ed:de:d0:9d:3c:e0:4b:67:7e:e5:58:
fb:96:82:9e:a3:d9:f0:19:5b:5d:10:92:dc:d0:c8:
01:34:6a:7a:66:86:b9:06:cd:d8:61:12:f0:c9:04:
6b:24:8c:05:c7:fa:97:30:7e:53:cd:af:70:f6:d1:
e5:69:4e:65:4c:c1:43:44:2e:16:50:e4:5e:e9:58:
ab:4f:37:66:94:0d:9e:0f:36:4c:fa:3c:85:3f:81:
d8:1d:e1:29:7c:e7:a5:66:de:13:c4:76:28:73:d7:
f0:6d:d6:95:4a:78:68:78:80:2d:72:5d:5b:fc:d3:
56:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F9:50:92:19:1A:3A:52:08:FB:D0:E1:C0:0B:3E:1C:4F:78:24:7B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143685.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a40b::/32
Signature Algorithm: sha256WithRSAEncryption
a1:d9:bb:c2:ca:93:c4:ac:78:7e:b9:ac:3e:2f:d1:e4:06:22:
c1:13:10:8a:37:d3:43:9c:d8:f7:40:10:6f:7a:66:c9:06:f4:
84:9c:56:9c:69:04:a5:3b:e7:61:79:67:91:b6:30:5d:71:6e:
30:27:b4:d6:9b:6a:c4:9f:0d:90:3d:39:c4:e6:d2:37:7d:d8:
1a:ca:33:44:32:26:e2:2b:47:29:b4:b1:0c:4d:13:f3:8a:f1:
03:fe:d4:a2:fb:7d:14:44:c3:3a:f0:8b:2c:d6:ce:cd:c4:f0:
36:f1:00:f7:22:28:ff:7c:6d:73:ec:7f:81:8a:ba:17:36:cb:
cd:f1:5e:50:6a:d0:13:23:35:22:91:38:13:45:67:06:b7:c4:
b9:92:8e:ad:9a:95:2b:aa:a3:ed:7e:5f:12:f0:18:6a:b0:b6:
ba:99:61:fa:59:90:e6:e1:10:d2:02:34:d6:0b:e5:c0:d9:2f:
a5:09:0c:c9:3f:43:ee:9a:aa:3b:ae:5c:4f:eb:f8:44:70:f9:
96:2f:34:74:7c:2f:23:db:d9:3d:6a:10:ca:85:b1:13:22:01:
9b:ed:7f:b4:e8:ee:14:e8:29:06:13:c6:4e:06:f6:30:a6:16:
59:d7:0d:fe:32:29:d2:ab:b1:1b:88:9e:67:37:f4:bd:1c:b9:
d4:d8:bb:f1
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUDEr0Yzw8LEyXN/BpGEmDXgI27FUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwMjQzMDhaFw0yNzA1MjEwMjQ4MDhaMDMxMTAvBgNV
BAMTKDkzRjk1MDkyMTkxQTNBNTIwOEZCRDBFMUMwMEIzRTFDNEY3ODI0N0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhcN4zjONWH/TmgtzaS8xFUZLj
zASEkvU44/HJrXTpDDgbm4yam323bsphqJzJpZzs80XPc5cr0YJdI7r2EahdF8u1
6YYNAWvB7SQ4CDHsiuQnpJDxr4zxXDq7OJy1OISeyDk9eBhUBQbWtmKlFGlQvbeN
ZCiKG4KaEoA/yJnAKFYBDKFoZ0JlL6rt3tCdPOBLZ37lWPuWgp6j2fAZW10QktzQ
yAE0anpmhrkGzdhhEvDJBGskjAXH+pcwflPNr3D20eVpTmVMwUNELhZQ5F7pWKtP
N2aUDZ4PNkz6PIU/gdgd4Sl856Vm3hPEdihz1/Bt1pVKeGh4gC1yXVv801b1AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUk/lQkhkaOlII+9DhwAs+HE94JHswHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzNjg1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqkCzANBgkqhkiG9w0BAQsFAAOCAQEAodm7
wsqTxKx4frmsPi/R5AYiwRMQijfTQ5zY90AQb3pmyQb0hJxWnGkEpTvnYXlnkbYw
XXFuMCe01ptqxJ8NkD05xObSN33YGsozRDIm4itHKbSxDE0T84rxA/7Uovt9FETD
OvCLLNbOzcTwNvEA9yIo/3xtc+x/gYq6FzbLzfFeUGrQEyM1IpE4E0VnBrfEuZKO
rZqVK6qj7X5fEvAYarC2uplh+lmQ5uEQ0gI01gvlwNkvpQkMyT9D7pqqO65cT+v4
RHD5li80dHwvI9vZPWoQyoWxEyIBm+1/tOjuFOgpBhPGTgb2MKYWWdcN/jIp0qux
G4ieZzf0vRy51Ni78Q==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:50 2026 by rpki-client