Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143751.roa
File: AS143751.roa (raw, json)
Hash identifier: ytvXEJc4HcBBbRR+Duvjs2fUgViI4YqO8pPVTSZ2s9Y=
Subject key identifier: BB:B1:14:BC:66:86:0D:51:36:B1:C3:6F:00:B4:C4:FC:62:A0:F8:4D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0AEFBCA4FC1C31760E2409E3F82E7C48433BBF63
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143751.roa
Signing time: Mon 25 May 2026 03:19:25 +0000
ROA not before: Mon 25 May 2026 03:14:25 +0000
ROA not after: Mon 24 May 2027 03:19:25 +0000
asID: 143751
IP address blocks: 240a:a44d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:ef:bc:a4:fc:1c:31:76:0e:24:09:e3:f8:2e:7c:48:43:3b:bf:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:25 2026 GMT
Not After : May 24 03:19:25 2027 GMT
Subject: CN=BBB114BC66860D5136B1C36F00B4C4FC62A0F84D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:af:2b:5d:15:ec:49:8e:ce:c8:7e:40:6f:e4:
83:b1:b9:0d:44:92:7a:d3:6d:41:f1:e2:e4:a4:55:
3d:d9:29:43:ab:e9:6f:f9:86:5b:58:51:a6:aa:93:
ec:ab:41:08:30:10:3e:0c:6d:70:d8:14:3d:61:ad:
23:bd:8c:82:5e:04:ec:c7:34:b5:76:d4:b2:9a:39:
51:68:68:99:56:69:b0:ef:2d:6f:2c:0b:b1:be:54:
34:9d:b5:f7:af:48:cb:f6:b7:b7:c4:d3:bd:b5:12:
a6:28:3f:fc:c1:36:6c:6c:7d:17:91:a4:15:bd:fb:
48:b7:4d:e9:4b:f7:4b:fe:67:3a:3f:81:5d:48:4a:
de:2a:c5:cc:7b:78:f5:ac:aa:97:01:1c:88:6a:d3:
8e:85:de:3d:a4:09:16:6e:21:93:01:45:9a:6b:fb:
c4:6a:72:6f:34:b1:83:f1:a0:89:d0:ba:78:91:02:
90:1a:cc:a4:77:f8:7f:b2:33:ec:ca:54:bd:6c:72:
41:c2:8f:85:c6:a8:68:a8:f8:0c:4c:52:6a:ed:2a:
0f:0b:21:47:df:e1:84:bf:8e:e1:99:d5:61:e4:b8:
79:32:17:64:09:fc:64:84:ad:33:6e:19:88:70:17:
ed:f7:fc:05:50:6c:c8:0c:47:19:31:b8:4f:bb:d5:
32:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:B1:14:BC:66:86:0D:51:36:B1:C3:6F:00:B4:C4:FC:62:A0:F8:4D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143751.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a44d::/32
Signature Algorithm: sha256WithRSAEncryption
83:9f:02:2e:20:15:4c:10:e3:63:dc:8d:7c:33:37:13:c0:0b:
a4:04:ae:e6:e5:7e:b0:e2:a2:e5:45:7b:b3:c9:59:4b:bd:be:
d6:a8:36:33:1f:26:46:7b:a5:c3:31:a6:0f:94:61:f4:f9:2e:
eb:49:0d:f2:06:25:58:0b:08:80:c0:d8:12:e2:00:ea:45:b3:
c5:a1:31:4f:b2:88:73:88:c1:83:30:b6:ae:e9:e1:91:00:42:
4e:f2:48:f0:93:53:88:40:d2:0f:d7:26:25:46:a4:fe:e1:d0:
11:32:ef:fa:9b:67:0c:74:58:97:7a:63:81:28:e1:a6:28:72:
fa:84:af:fd:00:4a:c7:15:ee:c7:fc:50:05:d8:97:37:96:c5:
16:6f:37:a4:b6:7f:6e:f5:05:f1:d9:31:f9:f6:55:2e:46:32:
16:a1:51:fc:df:0b:cc:df:08:08:d1:67:65:d7:67:69:85:ce:
de:01:03:1f:b2:ec:85:4e:2b:9b:a3:c0:43:bd:04:d8:60:88:
34:c6:26:8f:cb:06:8d:52:05:98:e3:aa:93:a4:ee:19:c5:52:
47:8f:9c:30:92:f6:fc:b7:e5:48:44:c7:9d:99:f4:26:5c:66:
90:c6:f9:69:05:f4:38:81:cd:15:13:c6:a0:d6:d2:ce:d5:97:
3e:6f:60:98
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUCu+8pPwcMXYOJAnj+C58SEM7v2MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMzE0MjVaFw0yNzA1MjQwMzE5MjVaMDMxMTAvBgNV
BAMTKEJCQjExNEJDNjY4NjBENTEzNkIxQzM2RjAwQjRDNEZDNjJBMEY4NEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDerytdFexJjs7IfkBv5IOxuQ1E
knrTbUHx4uSkVT3ZKUOr6W/5hltYUaaqk+yrQQgwED4MbXDYFD1hrSO9jIJeBOzH
NLV21LKaOVFoaJlWabDvLW8sC7G+VDSdtfevSMv2t7fE0721EqYoP/zBNmxsfReR
pBW9+0i3TelL90v+Zzo/gV1ISt4qxcx7ePWsqpcBHIhq046F3j2kCRZuIZMBRZpr
+8Rqcm80sYPxoInQuniRApAazKR3+H+yM+zKVL1sckHCj4XGqGio+AxMUmrtKg8L
IUff4YS/juGZ1WHkuHkyF2QJ/GSErTNuGYhwF+33/AVQbMgMRxkxuE+71TIvAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUu7EUvGaGDVE2scNvALTE/GKg+E0wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzNzUxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqkTTANBgkqhkiG9w0BAQsFAAOCAQEAg58C
LiAVTBDjY9yNfDM3E8ALpASu5uV+sOKi5UV7s8lZS72+1qg2Mx8mRnulwzGmD5Rh
9Pku60kN8gYlWAsIgMDYEuIA6kWzxaExT7KIc4jBgzC2runhkQBCTvJI8JNTiEDS
D9cmJUak/uHQETLv+ptnDHRYl3pjgSjhpihy+oSv/QBKxxXux/xQBdiXN5bFFm83
pLZ/bvUF8dkx+fZVLkYyFqFR/N8LzN8ICNFnZddnaYXO3gEDH7LshU4rm6PAQ70E
2GCINMYmj8sGjVIFmOOqk6TuGcVSR4+cMJL2/LflSETHnZn0JlxmkMb5aQX0OIHN
FRPGoNbSztWXPm9gmA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:56 2026 by rpki-client