Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143718.roa
File: AS143718.roa (raw, json)
Hash identifier: lVfgYa7VjQNBnr6itWjXuqwNFJU1qp7DvMSsUSJNYJ8=
Subject key identifier: AC:64:0A:02:51:CE:F5:66:71:38:7C:E6:46:58:C1:F8:5F:CA:5A:9D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 05340E2CED2F57E73DBD795DF5C1094992AD176F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143718.roa
Signing time: Fri 22 May 2026 06:46:28 +0000
ROA not before: Fri 22 May 2026 06:41:28 +0000
ROA not after: Fri 21 May 2027 06:46:28 +0000
asID: 143718
IP address blocks: 240a:a42c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:34:0e:2c:ed:2f:57:e7:3d:bd:79:5d:f5:c1:09:49:92:ad:17:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:28 2026 GMT
Not After : May 21 06:46:28 2027 GMT
Subject: CN=AC640A0251CEF56671387CE64658C1F85FCA5A9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:04:c8:af:fa:3c:0d:45:32:c1:4b:e3:97:72:
58:d1:e2:a2:e4:ed:ab:67:f0:86:ea:09:f2:5d:eb:
82:f1:80:51:3a:3f:19:a8:60:9a:af:73:5f:b7:ba:
27:a8:34:d4:5b:37:53:c9:6c:c5:f6:fd:80:c4:e5:
0f:7a:af:4f:4b:79:79:f5:ac:a2:51:0e:ce:8c:0d:
84:33:39:d2:9e:c7:07:70:6b:2e:ef:21:17:f5:1c:
a1:5f:a9:ad:d7:07:dd:bb:4f:f9:eb:60:36:ae:a6:
38:61:9b:a8:d3:ae:40:42:39:14:ab:c5:a1:a8:ae:
78:8e:c8:f6:d0:91:eb:78:ef:d5:a8:ba:8a:eb:05:
87:e5:07:49:fd:e1:93:45:13:c0:64:0c:07:f7:94:
72:bd:ef:d2:3f:2b:b4:cb:43:da:82:08:99:79:93:
bb:54:ca:aa:e1:3f:31:a3:be:d1:d3:0a:64:4a:2b:
b8:7c:86:05:07:ed:47:ba:f4:e1:7a:17:8c:c2:10:
54:a4:1a:46:aa:6e:a6:2b:c9:52:6c:3b:37:16:a4:
4a:0a:34:cf:36:e8:d5:a4:60:54:1f:58:5d:1f:d7:
10:f9:16:ae:e7:1d:92:20:13:40:9e:ae:6b:da:0e:
c7:bf:d8:de:4c:4f:3e:e9:82:8e:74:6e:1e:48:01:
18:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:64:0A:02:51:CE:F5:66:71:38:7C:E6:46:58:C1:F8:5F:CA:5A:9D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143718.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a42c::/32
Signature Algorithm: sha256WithRSAEncryption
a7:78:d5:2e:74:c7:2d:d1:34:4e:e7:ac:fb:37:b6:0d:d1:a3:
0b:58:f5:24:0d:ee:a8:9c:97:90:a2:6b:e1:f4:e5:0f:02:63:
af:9c:c0:31:55:96:36:c6:e6:90:14:3d:df:d4:fb:ee:5d:e0:
b0:00:ce:ca:48:3d:07:eb:76:82:51:f5:6f:e5:f2:cf:b5:75:
9a:8c:f2:44:68:4c:f6:68:c3:18:da:95:55:93:25:3d:e8:56:
48:a9:cf:f7:6a:7f:56:85:c5:11:9d:7f:d8:ba:22:ea:3b:5e:
42:99:92:ec:01:a2:27:e0:77:1a:d5:1c:46:29:65:8a:da:4b:
f4:ef:83:17:a6:34:7e:4b:d7:81:9e:31:45:90:4b:21:9b:b9:
a5:98:3f:ab:ca:39:3b:d0:9f:ee:2c:67:d7:9d:84:17:dd:35:
05:ca:58:89:e2:df:47:fd:05:aa:21:b1:ca:26:65:98:cd:00:
9e:a3:ab:80:18:7f:c8:c1:63:e5:4e:77:f0:24:c5:60:70:22:
cd:4f:51:74:28:96:38:26:09:57:1d:45:3d:ff:67:9d:b3:e2:
4c:c7:ee:ea:f7:84:5c:2e:ae:4a:54:c5:33:4d:a4:9d:f3:00:
5c:dc:25:2c:36:de:c5:cc:d2:d6:d2:f6:f7:89:6d:7a:d4:97:
62:e8:55:25
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUBTQOLO0vV+c9vXld9cEJSZKtF28wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjQxMjhaFw0yNzA1MjEwNjQ2MjhaMDMxMTAvBgNV
BAMTKEFDNjQwQTAyNTFDRUY1NjY3MTM4N0NFNjQ2NThDMUY4NUZDQTVBOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIBMiv+jwNRTLBS+OXcljR4qLk
7atn8IbqCfJd64LxgFE6PxmoYJqvc1+3uieoNNRbN1PJbMX2/YDE5Q96r09LeXn1
rKJRDs6MDYQzOdKexwdway7vIRf1HKFfqa3XB927T/nrYDaupjhhm6jTrkBCORSr
xaGorniOyPbQket479WouorrBYflB0n94ZNFE8BkDAf3lHK979I/K7TLQ9qCCJl5
k7tUyqrhPzGjvtHTCmRKK7h8hgUH7Ue69OF6F4zCEFSkGkaqbqYryVJsOzcWpEoK
NM826NWkYFQfWF0f1xD5Fq7nHZIgE0CermvaDse/2N5MTz7pgo50bh5IARizAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUrGQKAlHO9WZxOHzmRljB+F/KWp0wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzNzE4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqkLDANBgkqhkiG9w0BAQsFAAOCAQEAp3jV
LnTHLdE0Tues+ze2DdGjC1j1JA3uqJyXkKJr4fTlDwJjr5zAMVWWNsbmkBQ939T7
7l3gsADOykg9B+t2glH1b+Xyz7V1mozyRGhM9mjDGNqVVZMlPehWSKnP92p/VoXF
EZ1/2Loi6jteQpmS7AGiJ+B3GtUcRillitpL9O+DF6Y0fkvXgZ4xRZBLIZu5pZg/
q8o5O9Cf7ixn152EF901BcpYieLfR/0FqiGxyiZlmM0AnqOrgBh/yMFj5U538CTF
YHAizU9RdCiWOCYJVx1FPf9nnbPiTMfu6veEXC6uSlTFM02knfMAXNwlLDbexczS
1tL294ltetSXYuhVJQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:22 2026 by rpki-client