Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143723.roa
File: AS143723.roa (raw, json)
Hash identifier: tlF9kkcw6uMO0dbxeXFc17dRwcDnpJZ7EBq1dmEo9Js=
Subject key identifier: 8D:7C:AA:57:A1:08:69:10:81:70:0B:73:CC:7D:62:F1:7D:B1:45:F4
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 137C5162F0F2AF0BEB25D1491127BD6B14B08047
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143723.roa
Signing time: Mon 25 May 2026 01:51:30 +0000
ROA not before: Mon 25 May 2026 01:46:30 +0000
ROA not after: Mon 24 May 2027 01:51:30 +0000
asID: 143723
IP address blocks: 240a:a431::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:7c:51:62:f0:f2:af:0b:eb:25:d1:49:11:27:bd:6b:14:b0:80:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:30 2026 GMT
Not After : May 24 01:51:30 2027 GMT
Subject: CN=8D7CAA57A108691081700B73CC7D62F17DB145F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ff:b7:21:09:05:e2:c5:e4:29:9c:ea:5a:0a:
90:8a:d6:06:81:a1:c4:7c:5b:38:3c:65:86:30:e1:
ae:ae:9a:0c:4c:2f:48:c3:ba:40:dc:cd:02:4e:46:
10:16:3e:ee:cd:ba:93:c0:0f:52:de:06:64:09:d2:
a3:c5:6c:16:b0:ce:06:92:48:51:7f:d7:7c:bb:8d:
26:b6:5a:ae:eb:9b:87:fe:c3:99:ce:b6:78:68:28:
15:4f:d2:e3:ab:de:37:75:e4:5e:c3:14:f6:6d:00:
5f:fb:db:55:5f:35:f1:2f:9a:12:60:1b:1f:6e:ab:
c8:80:a8:ef:6a:9b:12:69:54:05:5c:4d:a7:c9:c8:
37:01:b3:f9:ab:51:34:14:df:73:d6:f5:b6:97:59:
80:f5:57:59:ea:3c:18:f3:1a:63:cf:74:0e:98:0d:
db:0c:8d:06:98:be:5b:4d:48:6a:34:bc:36:39:15:
09:50:d6:52:a7:8f:7d:54:7b:33:5b:b8:1b:df:e1:
db:c3:07:ba:23:8a:ed:fb:76:a7:ea:b7:2c:fc:a1:
65:96:ba:e4:a5:5c:62:22:44:1d:30:4a:38:d2:8c:
93:bf:d0:2e:57:39:e6:b9:f6:59:62:e6:fc:95:9b:
2b:75:b0:6f:95:69:5a:55:2f:67:e2:a9:6f:c0:2c:
db:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:7C:AA:57:A1:08:69:10:81:70:0B:73:CC:7D:62:F1:7D:B1:45:F4
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143723.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a431::/32
Signature Algorithm: sha256WithRSAEncryption
1e:fb:28:fa:72:70:3f:f3:59:4e:e5:77:f9:e8:f5:45:50:0c:
be:11:8d:5a:e4:9d:33:cc:93:25:2e:2f:ab:87:8a:79:2f:2c:
07:99:29:1c:f9:f1:53:58:5c:1f:0d:d0:d7:6c:bf:e5:cd:7c:
67:a0:93:8e:e7:02:3a:de:59:9b:9c:46:c9:a3:0a:41:6d:d3:
8b:33:00:ac:eb:4e:71:9f:95:c3:ea:5f:7b:cf:10:3d:6e:4e:
84:94:02:27:74:de:9c:62:b0:54:9f:56:ea:eb:45:f9:9a:e3:
d0:69:04:ea:84:31:06:64:64:79:83:90:c7:76:7a:db:57:9b:
45:94:c5:ce:25:a6:1a:db:d3:7a:c9:11:fd:8a:14:49:99:bc:
0a:3f:ce:8d:59:5f:13:97:50:d0:46:ca:3d:52:3d:cf:4c:d9:
33:33:3a:26:72:44:69:14:cb:a7:d1:70:f2:43:36:4f:17:d7:
30:9d:28:35:dc:f1:bd:52:2d:b9:4d:7a:b1:f8:3a:1e:68:05:
ec:bd:c3:68:d2:a2:81:c3:30:14:87:ed:1f:1f:9e:8b:d5:18:
3f:f2:02:8a:a7:37:8d:f2:1f:17:a7:7f:47:94:2e:bf:9c:74:
f2:44:86:7a:4f:0b:01:5a:a5:0c:2e:b8:e7:48:19:6d:a5:31:
4a:ae:85:3e
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUE3xRYvDyrwvrJdFJESe9axSwgEcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTQ2MzBaFw0yNzA1MjQwMTUxMzBaMDMxMTAvBgNV
BAMTKDhEN0NBQTU3QTEwODY5MTA4MTcwMEI3M0NDN0Q2MkYxN0RCMTQ1RjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ/7chCQXixeQpnOpaCpCK1gaB
ocR8Wzg8ZYYw4a6umgxML0jDukDczQJORhAWPu7NupPAD1LeBmQJ0qPFbBawzgaS
SFF/13y7jSa2Wq7rm4f+w5nOtnhoKBVP0uOr3jd15F7DFPZtAF/721VfNfEvmhJg
Gx9uq8iAqO9qmxJpVAVcTafJyDcBs/mrUTQU33PW9baXWYD1V1nqPBjzGmPPdA6Y
DdsMjQaYvltNSGo0vDY5FQlQ1lKnj31UezNbuBvf4dvDB7ojiu37dqfqtyz8oWWW
uuSlXGIiRB0wSjjSjJO/0C5XOea59lli5vyVmyt1sG+VaVpVL2fiqW/ALNtfAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUjXyqV6EIaRCBcAtzzH1i8X2xRfQwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzNzIzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqkMTANBgkqhkiG9w0BAQsFAAOCAQEAHvso
+nJwP/NZTuV3+ej1RVAMvhGNWuSdM8yTJS4vq4eKeS8sB5kpHPnxU1hcHw3Q12y/
5c18Z6CTjucCOt5Zm5xGyaMKQW3TizMArOtOcZ+Vw+pfe88QPW5OhJQCJ3TenGKw
VJ9W6utF+Zrj0GkE6oQxBmRkeYOQx3Z621ebRZTFziWmGtvTeskR/YoUSZm8Cj/O
jVlfE5dQ0EbKPVI9z0zZMzM6JnJEaRTLp9Fw8kM2TxfXMJ0oNdzxvVItuU16sfg6
HmgF7L3DaNKigcMwFIftHx+ei9UYP/ICiqc3jfIfF6d/R5Quv5x08kSGek8LAVql
DC6450gZbaUxSq6FPg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:24 2026 by rpki-client