Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143691.roa
File: AS143691.roa (raw, json)
Hash identifier: FgMsiP/XDGwctSMcxeS4xVYa3ESX/3nglcs+7gIy3II=
Subject key identifier: 90:F6:36:24:9C:D5:A1:BB:24:CF:A6:89:E6:11:17:A6:8D:AA:EF:F7
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 538D16949D69B920522BC4105F90C7164ED66706
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143691.roa
Signing time: Tue 26 May 2026 02:35:17 +0000
ROA not before: Tue 26 May 2026 02:30:17 +0000
ROA not after: Tue 25 May 2027 02:35:17 +0000
asID: 143691
IP address blocks: 240a:a411::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:8d:16:94:9d:69:b9:20:52:2b:c4:10:5f:90:c7:16:4e:d6:67:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:17 2026 GMT
Not After : May 25 02:35:17 2027 GMT
Subject: CN=90F636249CD5A1BB24CFA689E61117A68DAAEFF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2c:f9:ed:db:d0:37:32:bd:5a:1b:3b:8b:56:
34:f7:ad:99:b9:60:6a:25:d5:20:0b:b9:77:78:bb:
0c:d6:7a:a3:4b:87:f9:65:c7:78:e1:cd:62:81:30:
4a:11:f2:68:ed:da:8f:36:a6:6d:93:cd:04:4e:5f:
23:5f:36:80:99:5e:c6:24:d0:5b:8c:3b:4b:98:37:
a3:5f:e3:17:4b:cd:bd:a0:0c:60:6b:28:40:17:65:
74:81:f7:76:3e:fa:f7:c0:1b:f3:6a:d2:01:bf:23:
f9:88:d8:6b:6e:86:cf:ba:14:bf:f4:39:e8:c2:d6:
bd:5c:17:c2:46:f5:ca:af:58:41:de:c4:c9:0e:eb:
39:6f:56:a9:8a:a5:e9:66:c0:1d:8f:b7:f5:f1:e0:
cc:18:4b:eb:53:20:2d:9b:df:79:de:17:02:d6:58:
2c:09:f4:05:69:88:d9:06:68:a2:ac:58:f6:f4:73:
7f:64:79:73:cd:a5:3a:97:ed:bd:d5:23:e8:69:b1:
f8:90:19:44:f4:01:37:cc:d7:b1:d7:33:a9:f9:0c:
16:be:54:6d:02:29:98:f1:b0:4b:be:47:46:81:57:
71:dc:e7:54:d9:73:01:48:a1:ba:d5:07:ec:2b:12:
d8:f7:be:86:e3:bd:eb:98:a2:cb:69:55:57:d3:c5:
ef:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F6:36:24:9C:D5:A1:BB:24:CF:A6:89:E6:11:17:A6:8D:AA:EF:F7
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143691.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a411::/32
Signature Algorithm: sha256WithRSAEncryption
47:4d:db:7f:49:f1:21:06:a2:fd:74:ad:61:ed:9f:0e:d0:2a:
3c:d0:ea:f8:75:38:49:d9:57:b7:cb:88:90:f2:c2:ad:a5:f3:
8e:b0:22:f7:83:de:ca:c1:d0:00:3c:47:40:ed:3a:2e:96:d5:
9d:4c:38:52:d7:7c:7f:3d:0e:9f:82:73:be:de:2f:05:46:52:
0a:1e:9a:59:df:a6:43:1d:63:28:d1:bc:84:5c:0e:aa:7e:d7:
58:78:79:ce:9c:d1:78:95:33:33:aa:40:a6:9c:78:1a:d9:fc:
5b:fd:5f:92:fd:0a:9a:6e:a8:f6:85:13:f4:ea:48:4b:56:33:
47:bb:39:78:b6:b3:c9:85:55:8b:d0:0a:a2:ea:ac:78:63:c7:
ed:ae:f6:0b:79:37:21:16:35:44:80:74:57:2f:a7:3e:67:30:
3e:20:88:23:30:cf:57:31:e4:e7:68:ac:d6:d5:1b:e8:d2:4e:
a2:b1:63:9c:3d:f6:13:9c:0a:22:a5:13:36:65:4b:91:19:ce:
b7:fc:d8:44:72:95:10:0f:17:d2:42:cd:de:a3:64:69:4c:b9:
68:86:01:43:c9:f3:0d:35:cc:1f:3f:00:c3:c7:eb:03:0b:59:
89:fc:e2:f6:77:21:9d:31:e0:40:94:d5:c7:c7:44:de:ea:2b:
40:70:f3:a1
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUU40WlJ1puSBSK8QQX5DHFk7WZwYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMjMwMTdaFw0yNzA1MjUwMjM1MTdaMDMxMTAvBgNV
BAMTKDkwRjYzNjI0OUNENUExQkIyNENGQTY4OUU2MTExN0E2OERBQUVGRjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxLPnt29A3Mr1aGzuLVjT3rZm5
YGol1SALuXd4uwzWeqNLh/llx3jhzWKBMEoR8mjt2o82pm2TzQROXyNfNoCZXsYk
0FuMO0uYN6Nf4xdLzb2gDGBrKEAXZXSB93Y++vfAG/Nq0gG/I/mI2Gtuhs+6FL/0
OejC1r1cF8JG9cqvWEHexMkO6zlvVqmKpelmwB2Pt/Xx4MwYS+tTIC2b33neFwLW
WCwJ9AVpiNkGaKKsWPb0c39keXPNpTqX7b3VI+hpsfiQGUT0ATfM17HXM6n5DBa+
VG0CKZjxsEu+R0aBV3Hc51TZcwFIobrVB+wrEtj3vobjveuYostpVVfTxe8zAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUkPY2JJzVobskz6aJ5hEXpo2q7/cwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzNjkxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqkETANBgkqhkiG9w0BAQsFAAOCAQEAR03b
f0nxIQai/XStYe2fDtAqPNDq+HU4SdlXt8uIkPLCraXzjrAi94PeysHQADxHQO06
LpbVnUw4Utd8fz0On4Jzvt4vBUZSCh6aWd+mQx1jKNG8hFwOqn7XWHh5zpzReJUz
M6pAppx4Gtn8W/1fkv0Kmm6o9oUT9OpIS1YzR7s5eLazyYVVi9AKouqseGPH7a72
C3k3IRY1RIB0Vy+nPmcwPiCIIzDPVzHk52is1tUb6NJOorFjnD32E5wKIqUTNmVL
kRnOt/zYRHKVEA8X0kLN3qNkaUy5aIYBQ8nzDTXMHz8Aw8frAwtZifzi9nchnTHg
QJTVx8dE3uorQHDzoQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:54 2026 by rpki-client