Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143724.roa
File: AS143724.roa (raw, json)
Hash identifier: Tw6DFmboIJoGTF0ldHIF5anphbjtr1tUE92HIPFzigM=
Subject key identifier: 49:F1:4A:9A:06:30:4E:C7:21:5A:3D:E2:A2:DF:4C:E3:45:CA:F7:68
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7EB680B02D21DA04DE07040A7AA5187C3CF80B3F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143724.roa
Signing time: Fri 22 May 2026 04:08:23 +0000
ROA not before: Fri 22 May 2026 04:03:23 +0000
ROA not after: Fri 21 May 2027 04:08:23 +0000
asID: 143724
IP address blocks: 240a:a432::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:b6:80:b0:2d:21:da:04:de:07:04:0a:7a:a5:18:7c:3c:f8:0b:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:23 2026 GMT
Not After : May 21 04:08:23 2027 GMT
Subject: CN=49F14A9A06304EC7215A3DE2A2DF4CE345CAF768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:08:8a:63:57:57:60:f4:f7:85:5a:43:ca:d6:
a5:96:b0:f3:cc:46:60:70:c7:e4:16:18:71:2d:b1:
09:0f:0e:ae:76:d5:c2:73:65:d7:be:6b:61:d4:91:
57:7b:52:c2:02:80:80:70:b0:2e:fa:e7:b3:63:d1:
af:f2:7a:b9:84:65:98:9d:09:75:b3:5e:ef:94:7c:
42:40:ce:f4:76:ee:41:26:61:02:09:ed:f8:ed:b8:
e7:5e:0b:6c:d7:87:a1:78:5e:14:4e:13:c3:d0:ed:
41:96:fe:e8:25:67:23:54:71:b4:f0:90:e4:ca:59:
5b:76:15:4a:df:80:a0:5c:82:b7:70:8e:b2:05:a8:
ce:fb:f4:7a:5a:5d:6f:13:42:9d:d7:7e:ff:7c:6d:
3f:45:2b:e0:20:b8:a3:e5:71:51:84:98:31:8c:06:
46:28:fb:37:58:8f:d0:dd:17:33:bc:15:49:03:f8:
95:71:a3:2b:04:62:17:88:31:64:68:08:b5:8a:64:
d1:a6:70:59:2c:2c:c0:22:6e:99:c5:c4:21:5f:02:
2c:d6:a7:77:3e:fb:db:f4:73:d8:4a:cb:98:be:99:
da:59:a2:5b:f6:19:78:47:3c:b0:53:21:d3:65:c2:
48:6a:06:9d:5c:d9:94:fc:07:95:17:12:2f:b7:ae:
c6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F1:4A:9A:06:30:4E:C7:21:5A:3D:E2:A2:DF:4C:E3:45:CA:F7:68
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143724.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a432::/32
Signature Algorithm: sha256WithRSAEncryption
22:42:8a:7f:87:cd:71:60:32:a6:f4:1c:0f:55:08:49:b4:37:
85:18:96:d4:67:e9:fc:a9:77:32:89:40:bb:aa:af:62:45:63:
75:76:ac:ad:5e:9d:c1:63:18:60:57:0f:e2:cb:c3:96:9a:9a:
c1:1e:2a:01:9b:21:95:72:e1:b2:e0:19:74:2e:53:f8:41:d0:
92:58:bd:ea:84:55:15:04:41:a0:a7:3e:5d:4b:6c:65:92:b8:
01:fb:92:5d:90:1c:8b:d4:52:ae:0a:32:fc:15:d9:b0:7a:6a:
39:97:1d:25:f8:3f:c4:26:63:4e:08:4b:4f:c3:23:4a:4b:6e:
e5:1c:35:dd:62:58:18:23:ad:eb:9a:30:f5:c1:3e:83:34:fc:
75:97:7f:1e:56:34:7b:3d:e9:e4:47:ce:e9:7a:c9:bd:d2:36:
74:05:b7:39:94:12:95:3a:0f:99:d0:39:b9:a1:6b:d6:bf:2b:
14:c7:c6:a5:11:2a:84:b2:6c:48:6e:19:bb:19:93:c6:f3:87:
b6:9a:7e:0b:80:6b:79:6c:b2:63:d0:c1:a7:78:23:38:6c:52:
d7:65:71:af:d3:ce:d1:24:5c:3b:03:25:e9:ae:59:6f:aa:7d:
cd:cd:11:1b:01:75:6f:82:c0:17:eb:72:d8:e4:52:9f:77:10:
23:3a:fc:ef
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUfraAsC0h2gTeBwQKeqUYfDz4Cz8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNDAzMjNaFw0yNzA1MjEwNDA4MjNaMDMxMTAvBgNV
BAMTKDQ5RjE0QTlBMDYzMDRFQzcyMTVBM0RFMkEyREY0Q0UzNDVDQUY3NjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtCIpjV1dg9PeFWkPK1qWWsPPM
RmBwx+QWGHEtsQkPDq521cJzZde+a2HUkVd7UsICgIBwsC7657Nj0a/yermEZZid
CXWzXu+UfEJAzvR27kEmYQIJ7fjtuOdeC2zXh6F4XhROE8PQ7UGW/uglZyNUcbTw
kOTKWVt2FUrfgKBcgrdwjrIFqM779HpaXW8TQp3Xfv98bT9FK+AguKPlcVGEmDGM
BkYo+zdYj9DdFzO8FUkD+JVxoysEYheIMWRoCLWKZNGmcFksLMAibpnFxCFfAizW
p3c++9v0c9hKy5i+mdpZolv2GXhHPLBTIdNlwkhqBp1c2ZT8B5UXEi+3rsbXAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUSfFKmgYwTschWj3iot9M40XK92gwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzNzI0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqkMjANBgkqhkiG9w0BAQsFAAOCAQEAIkKK
f4fNcWAypvQcD1UISbQ3hRiW1Gfp/Kl3MolAu6qvYkVjdXasrV6dwWMYYFcP4svD
lpqawR4qAZshlXLhsuAZdC5T+EHQkli96oRVFQRBoKc+XUtsZZK4AfuSXZAci9RS
rgoy/BXZsHpqOZcdJfg/xCZjTghLT8MjSktu5Rw13WJYGCOt65ow9cE+gzT8dZd/
HlY0ez3p5EfO6XrJvdI2dAW3OZQSlToPmdA5uaFr1r8rFMfGpREqhLJsSG4ZuxmT
xvOHtpp+C4BreWyyY9DBp3gjOGxS12Vxr9PO0SRcOwMl6a5Zb6p9zc0RGwF1b4LA
F+ty2ORSn3cQIzr87w==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:25 2026 by rpki-client