Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143739.roa
File: AS143739.roa (raw, json)
Hash identifier: Tt0ScsOtjgv/Z6rxHA3TVa3fDfMabUgpeaSbyFnSFdQ=
Subject key identifier: 66:D7:08:23:C9:5A:30:AF:2D:96:82:48:AD:42:ED:9F:55:EF:F3:8B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 77DDB403C87935FA9C0ABB2A3B53D129B04120AD
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143739.roa
Signing time: Tue 26 May 2026 06:31:02 +0000
ROA not before: Tue 26 May 2026 06:26:02 +0000
ROA not after: Tue 25 May 2027 06:31:02 +0000
asID: 143739
IP address blocks: 240a:a441::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:dd:b4:03:c8:79:35:fa:9c:0a:bb:2a:3b:53:d1:29:b0:41:20:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:26:02 2026 GMT
Not After : May 25 06:31:02 2027 GMT
Subject: CN=66D70823C95A30AF2D968248AD42ED9F55EFF38B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c5:f6:ae:09:12:8b:a5:20:c0:bf:a6:cb:1c:
06:dc:cf:72:68:82:c2:ee:85:95:2d:aa:12:06:8d:
12:06:8c:03:e4:eb:72:eb:10:a0:af:01:88:39:be:
01:3e:8d:ed:ba:2d:55:27:34:f3:85:07:34:c2:10:
53:9e:15:ee:98:c5:aa:c0:10:e4:45:3a:e6:ee:f2:
ac:b9:f8:ca:e2:0c:46:7f:8b:46:1a:61:ed:bb:84:
3e:b8:73:99:5d:90:0d:fa:9d:d4:67:8e:75:33:5e:
46:5e:40:6f:96:a3:58:72:5f:c5:f7:51:b4:9f:1f:
52:0f:4b:4d:91:c4:24:ae:46:64:fa:46:74:c7:63:
7d:4f:79:ad:0f:0a:47:6f:49:7a:4b:96:47:50:fe:
26:ed:be:8f:46:a2:15:24:3a:f9:b5:84:9e:58:3d:
9f:94:d4:57:ad:05:52:2e:6e:a3:18:3a:df:54:da:
3c:76:b9:30:38:37:f3:23:fd:af:cc:ad:30:da:2b:
b7:f2:37:ff:14:ae:2b:20:fc:11:fa:58:50:ac:9a:
fa:51:ad:ae:16:60:73:45:9c:01:08:4e:02:31:4f:
ef:64:ef:04:55:17:b0:f7:82:3d:b9:f2:6f:57:be:
86:c2:5b:b1:27:b5:af:6a:84:00:ea:3f:c8:8d:cf:
73:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D7:08:23:C9:5A:30:AF:2D:96:82:48:AD:42:ED:9F:55:EF:F3:8B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a441::/32
Signature Algorithm: sha256WithRSAEncryption
a9:94:a8:51:7f:ab:c1:fb:a6:68:ee:2e:80:96:fe:96:fe:23:
ef:59:c2:84:a1:c5:93:37:1a:32:17:50:42:81:30:bb:1b:42:
32:3b:e6:74:c7:93:f7:58:8a:d7:20:71:bd:2a:cf:22:28:f3:
32:e5:3b:ad:05:5b:c7:64:1a:35:c0:ef:ed:02:6c:b4:78:50:
8f:3d:c9:99:01:9e:11:5b:33:c7:59:83:7b:cd:e7:6b:97:7c:
a6:6e:4a:55:31:cf:ed:7b:35:fa:90:e6:59:a5:79:6d:24:9b:
1f:57:d1:83:9f:83:cb:00:18:c5:dc:26:b2:cc:8d:a6:fb:29:
45:03:e1:60:fd:b7:c9:5b:81:0b:48:e5:b7:2e:6c:71:36:5d:
19:74:c0:fb:a8:1d:17:20:a7:41:38:a5:c7:42:89:88:ff:73:
07:b9:0e:d1:f9:1d:94:e0:60:6f:e0:03:f4:35:c8:3d:67:62:
d6:79:05:60:55:70:23:8e:6f:45:b3:93:b0:11:3a:a3:fc:27:
42:c5:ad:32:58:6f:29:8c:eb:52:95:cf:2c:45:dc:b6:c8:1e:
76:fd:8a:04:5c:33:ea:e1:c5:d6:cd:f9:06:67:14:82:a2:92:
a2:ad:43:a5:09:af:9d:e9:12:80:f4:da:de:9a:75:28:74:6a:
b1:69:e4:83
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUd920A8h5NfqcCrsqO1PRKbBBIK0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwNjI2MDJaFw0yNzA1MjUwNjMxMDJaMDMxMTAvBgNV
BAMTKDY2RDcwODIzQzk1QTMwQUYyRDk2ODI0OEFENDJFRDlGNTVFRkYzOEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQxfauCRKLpSDAv6bLHAbcz3Jo
gsLuhZUtqhIGjRIGjAPk63LrEKCvAYg5vgE+je26LVUnNPOFBzTCEFOeFe6YxarA
EORFOubu8qy5+MriDEZ/i0YaYe27hD64c5ldkA36ndRnjnUzXkZeQG+Wo1hyX8X3
UbSfH1IPS02RxCSuRmT6RnTHY31Pea0PCkdvSXpLlkdQ/ibtvo9GohUkOvm1hJ5Y
PZ+U1FetBVIubqMYOt9U2jx2uTA4N/Mj/a/MrTDaK7fyN/8Urisg/BH6WFCsmvpR
ra4WYHNFnAEITgIxT+9k7wRVF7D3gj258m9XvobCW7Enta9qhADqP8iNz3NxAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUZtcII8laMK8tloJIrULtn1Xv84swHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqkQTANBgkqhkiG9w0BAQsFAAOCAQEAqZSo
UX+rwfumaO4ugJb+lv4j71nChKHFkzcaMhdQQoEwuxtCMjvmdMeT91iK1yBxvSrP
IijzMuU7rQVbx2QaNcDv7QJstHhQjz3JmQGeEVszx1mDe83na5d8pm5KVTHP7Xs1
+pDmWaV5bSSbH1fRg5+DywAYxdwmssyNpvspRQPhYP23yVuBC0jlty5scTZdGXTA
+6gdFyCnQTilx0KJiP9zB7kO0fkdlOBgb+AD9DXIPWdi1nkFYFVwI45vRbOTsBE6
o/wnQsWtMlhvKYzrUpXPLEXctsgedv2KBFwz6uHF1s35BmcUgqKSoq1DpQmvnekS
gPTa3pp1KHRqsWnkgw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:39:00 2026 by rpki-client