Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143752.roa
File: AS143752.roa (raw, json)
Hash identifier: 553kAdhytQ+aif2w99Cgsuvu7gQroD3OkBknyj6A1Sk=
Subject key identifier: AA:04:8B:14:6D:2F:C3:D7:62:76:69:FD:A9:B5:94:3A:EC:26:D6:7D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 178CD5C21BC781C8C860DD2FA196EC7D231A26A5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143752.roa
Signing time: Mon 25 May 2026 06:28:37 +0000
ROA not before: Mon 25 May 2026 06:23:37 +0000
ROA not after: Mon 24 May 2027 06:28:37 +0000
asID: 143752
IP address blocks: 240a:a44e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:8c:d5:c2:1b:c7:81:c8:c8:60:dd:2f:a1:96:ec:7d:23:1a:26:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:37 2026 GMT
Not After : May 24 06:28:37 2027 GMT
Subject: CN=AA048B146D2FC3D7627669FDA9B5943AEC26D67D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1a:3d:ed:35:3e:7b:bb:86:2d:ff:7b:0b:ec:
b1:ca:47:18:41:c4:2c:a6:b0:5d:2b:3d:16:58:da:
48:fd:ff:8d:e6:8b:c8:69:de:ec:37:63:cf:f2:2a:
82:f2:4f:b2:1d:e1:fc:6a:4c:a8:31:b5:75:e2:47:
c6:67:f9:5b:dd:c9:78:27:f9:69:6c:92:83:49:39:
74:0b:a2:69:72:3b:d6:2a:14:79:a5:66:c9:57:45:
03:d7:e9:39:47:83:90:fe:56:74:9c:f4:bf:59:51:
0b:23:ef:f1:1f:c2:e3:32:de:31:02:89:87:bc:70:
e4:14:c4:a1:6e:26:62:df:68:04:2e:e0:8a:e4:99:
9b:53:4b:88:90:2f:8d:dc:48:eb:94:eb:fb:f2:b0:
71:78:39:2f:a9:a1:9d:f2:1f:27:65:c7:22:d3:a0:
4c:bf:3c:70:60:98:c3:ad:3c:66:aa:93:70:3a:77:
c5:97:03:f8:cd:e7:ad:b4:c2:f7:36:0a:b7:fe:3f:
5b:6c:2f:87:e7:6f:85:8f:12:49:6d:e0:a4:85:5f:
dd:a4:15:e1:90:5f:39:32:9d:e0:33:b7:f3:ed:b4:
80:bc:25:a0:0c:a3:cf:2a:79:88:6c:e9:1e:0f:77:
f1:6e:a3:96:52:7a:c9:79:e8:d8:c0:fd:1d:e9:f4:
f9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:04:8B:14:6D:2F:C3:D7:62:76:69:FD:A9:B5:94:3A:EC:26:D6:7D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143752.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a44e::/32
Signature Algorithm: sha256WithRSAEncryption
9e:47:a0:10:8d:41:0b:b9:23:0e:d2:7e:0c:12:60:62:3f:98:
14:13:f0:22:fa:36:d6:c6:2d:b1:f6:1d:4b:87:db:47:c6:1a:
47:a3:3d:6a:12:3d:9c:e7:3a:91:1a:aa:84:72:ae:dd:d9:f2:
24:cd:78:ce:26:cd:56:d2:2b:5d:45:60:01:a6:b1:e7:6f:94:
ac:0b:2f:f7:45:25:0f:72:a2:ee:c5:db:6c:bc:08:57:4b:a4:
da:28:7c:24:75:03:29:94:93:77:3d:ec:b3:a5:f5:d5:4d:ba:
09:32:08:e7:c3:e6:f9:da:45:05:c3:db:3e:5e:33:f5:28:09:
33:5d:7a:3d:c7:32:f5:df:82:13:47:5f:92:42:10:1a:bf:4c:
92:72:d8:22:7b:6b:35:79:a9:6a:85:e0:af:34:26:61:9c:17:
c9:5d:52:4e:61:ef:28:a5:eb:d2:e0:a6:8d:72:d5:24:41:6e:
fe:4d:f9:33:f9:f4:a3:f3:02:60:4c:d7:05:57:81:97:a9:21:
c1:f0:1a:3c:79:33:b0:90:98:1a:b3:c1:33:f1:df:ba:c3:69:
e3:c1:32:cf:3e:92:c3:97:2b:aa:63:e5:07:6a:f5:03:df:66:
26:07:be:71:c6:3f:48:50:8f:78:96:c1:6b:21:08:57:6e:76:
01:bc:7a:18
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUF4zVwhvHgcjIYN0voZbsfSMaJqUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwNjIzMzdaFw0yNzA1MjQwNjI4MzdaMDMxMTAvBgNV
BAMTKEFBMDQ4QjE0NkQyRkMzRDc2Mjc2NjlGREE5QjU5NDNBRUMyNkQ2N0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Gj3tNT57u4Yt/3sL7LHKRxhB
xCymsF0rPRZY2kj9/43mi8hp3uw3Y8/yKoLyT7Id4fxqTKgxtXXiR8Zn+VvdyXgn
+WlskoNJOXQLomlyO9YqFHmlZslXRQPX6TlHg5D+VnSc9L9ZUQsj7/EfwuMy3jEC
iYe8cOQUxKFuJmLfaAQu4IrkmZtTS4iQL43cSOuU6/vysHF4OS+poZ3yHydlxyLT
oEy/PHBgmMOtPGaqk3A6d8WXA/jN5620wvc2Crf+P1tsL4fnb4WPEklt4KSFX92k
FeGQXzkyneAzt/PttIC8JaAMo88qeYhs6R4Pd/Fuo5ZSesl56NjA/R3p9PnlAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUqgSLFG0vw9didmn9qbWUOuwm1n0wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzNzUyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqkTjANBgkqhkiG9w0BAQsFAAOCAQEAnkeg
EI1BC7kjDtJ+DBJgYj+YFBPwIvo21sYtsfYdS4fbR8YaR6M9ahI9nOc6kRqqhHKu
3dnyJM14zibNVtIrXUVgAaax52+UrAsv90UlD3Ki7sXbbLwIV0uk2ih8JHUDKZST
dz3ss6X11U26CTII58Pm+dpFBcPbPl4z9SgJM116Pccy9d+CE0dfkkIQGr9MknLY
IntrNXmpaoXgrzQmYZwXyV1STmHvKKXr0uCmjXLVJEFu/k35M/n0o/MCYEzXBVeB
l6khwfAaPHkzsJCYGrPBM/HfusNp48Eyzz6Sw5crqmPlB2r1A99mJge+ccY/SFCP
eJbBayEIV252Abx6GA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:30 2026 by rpki-client