Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143712.roa
File: AS143712.roa (raw, json)
Hash identifier: LeCEYYaTQjZE8y1gjDRTDoGcF4TmjeRRhQCK8Syog+Q=
Subject key identifier: BB:B9:54:66:62:E1:B5:D5:D7:4F:53:BD:5F:22:EF:E3:00:07:D6:71
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 073F0E40344A322B89D13902647C8A988197E2C9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143712.roa
Signing time: Fri 22 May 2026 06:27:51 +0000
ROA not before: Fri 22 May 2026 06:22:51 +0000
ROA not after: Fri 21 May 2027 06:27:51 +0000
asID: 143712
IP address blocks: 240a:a426::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:3f:0e:40:34:4a:32:2b:89:d1:39:02:64:7c:8a:98:81:97:e2:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:22:51 2026 GMT
Not After : May 21 06:27:51 2027 GMT
Subject: CN=BBB9546662E1B5D5D74F53BD5F22EFE30007D671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:46:3d:99:94:d8:b1:95:31:73:ca:7c:c7:9b:
69:e5:c6:b8:ed:a3:ed:5d:c6:6c:ab:6d:07:59:41:
c2:6b:a3:33:89:1d:c3:c0:58:99:ef:ab:f4:9c:01:
85:25:4d:7f:2d:a0:03:59:f6:8e:d9:64:7c:26:ce:
35:35:a2:5e:63:92:bd:e9:bc:34:21:ae:de:f4:81:
97:d0:13:cf:3c:02:24:bf:11:de:04:8b:1c:ce:16:
93:e1:ba:9f:92:b8:70:fd:19:4e:7b:76:d7:a7:58:
4b:e7:60:1a:93:f1:26:35:3e:3b:f5:7b:7a:b8:7e:
80:b0:d3:74:43:b7:a8:61:0e:ee:83:a5:5e:71:b3:
b6:dd:12:f8:96:76:01:3f:99:7f:07:67:a8:ad:d9:
46:97:a5:a3:16:db:31:56:6b:8f:26:61:87:28:61:
e6:f9:43:e7:d1:24:e6:e0:5a:a1:4d:51:02:9c:ea:
0b:91:06:30:27:f2:97:1a:7a:77:96:c1:04:f9:90:
8a:e9:90:1f:07:91:26:79:76:ae:07:d7:d4:d8:b1:
93:16:61:3f:62:ef:fe:2b:f2:5e:f0:08:08:0f:71:
19:40:66:65:aa:70:42:e5:c2:c6:12:36:79:ca:86:
35:27:69:90:74:98:5a:d6:cb:70:5c:1b:2f:fa:d7:
e2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:B9:54:66:62:E1:B5:D5:D7:4F:53:BD:5F:22:EF:E3:00:07:D6:71
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143712.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a426::/32
Signature Algorithm: sha256WithRSAEncryption
03:c3:67:f3:b3:21:9d:74:13:a3:12:36:09:57:9d:12:5a:73:
7a:66:de:3c:1d:bd:a8:6f:d7:16:94:bf:be:61:1f:58:70:9d:
8e:a7:d7:a6:98:17:ec:3d:ca:b3:5e:8a:b8:14:c8:2e:f1:c0:
d0:03:b2:de:6f:ee:28:b4:5f:dc:75:27:cf:33:74:43:64:cf:
17:86:ea:fe:ae:3a:bb:6d:10:28:e7:07:11:4f:24:22:9d:27:
57:64:d7:6b:f5:ab:24:65:ae:e0:c1:11:8d:94:e5:3c:11:15:
b5:36:a2:c7:d6:55:08:28:71:db:16:96:58:61:a8:60:48:84:
3e:26:94:d6:80:15:b2:81:e9:8e:2d:76:cc:74:2f:34:27:d0:
82:af:f4:8a:0a:e2:ef:72:41:4c:85:a9:34:4d:f7:af:7a:07:
57:b8:41:1c:69:d1:26:5e:8a:b5:af:3d:7f:4f:e0:a7:02:d2:
ca:fd:bc:f1:07:4c:64:ec:89:19:f2:b5:24:6d:a7:49:e2:c6:
bc:18:fd:b5:b6:f1:57:81:12:45:d4:c3:e1:96:29:c7:be:3d:
06:d5:66:bf:08:c2:7d:96:db:67:ab:79:e6:54:b4:0b:9a:8a:
64:50:06:78:e4:54:28:45:4d:22:6a:89:4f:36:56:7b:b6:d1:
68:83:44:f9
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUBz8OQDRKMiuJ0TkCZHyKmIGX4skwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjIyNTFaFw0yNzA1MjEwNjI3NTFaMDMxMTAvBgNV
BAMTKEJCQjk1NDY2NjJFMUI1RDVENzRGNTNCRDVGMjJFRkUzMDAwN0Q2NzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDARj2ZlNixlTFzynzHm2nlxrjt
o+1dxmyrbQdZQcJrozOJHcPAWJnvq/ScAYUlTX8toANZ9o7ZZHwmzjU1ol5jkr3p
vDQhrt70gZfQE888AiS/Ed4EixzOFpPhup+SuHD9GU57dtenWEvnYBqT8SY1Pjv1
e3q4foCw03RDt6hhDu6DpV5xs7bdEviWdgE/mX8HZ6it2UaXpaMW2zFWa48mYYco
Yeb5Q+fRJObgWqFNUQKc6guRBjAn8pcaeneWwQT5kIrpkB8HkSZ5dq4H19TYsZMW
YT9i7/4r8l7wCAgPcRlAZmWqcELlwsYSNnnKhjUnaZB0mFrWy3BcGy/61+KnAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUu7lUZmLhtdXXT1O9XyLv4wAH1nEwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzNzEyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqkJjANBgkqhkiG9w0BAQsFAAOCAQEAA8Nn
87MhnXQToxI2CVedElpzembePB29qG/XFpS/vmEfWHCdjqfXppgX7D3Ks16KuBTI
LvHA0AOy3m/uKLRf3HUnzzN0Q2TPF4bq/q46u20QKOcHEU8kIp0nV2TXa/WrJGWu
4MERjZTlPBEVtTaix9ZVCChx2xaWWGGoYEiEPiaU1oAVsoHpji12zHQvNCfQgq/0
igri73JBTIWpNE33r3oHV7hBHGnRJl6Kta89f0/gpwLSyv288QdMZOyJGfK1JG2n
SeLGvBj9tbbxV4ESRdTD4ZYpx749BtVmvwjCfZbbZ6t55lS0C5qKZFAGeORUKEVN
ImqJTzZWe7bRaINE+Q==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:01 2026 by rpki-client