Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143754.roa
File: AS143754.roa (raw, json)
Hash identifier: Z9AcduN0L+YZVSrY9HgOEN34tSiyOfr9tPfvTPhWXjQ=
Subject key identifier: 3B:1C:ED:04:88:6C:16:BD:F9:5D:C9:2E:61:B6:62:A1:A8:85:D1:6D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 143AD7E2074808048DDDC6855E99282A136BB2F6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143754.roa
Signing time: Tue 26 May 2026 02:35:23 +0000
ROA not before: Tue 26 May 2026 02:30:23 +0000
ROA not after: Tue 25 May 2027 02:35:23 +0000
asID: 143754
IP address blocks: 240a:a450::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:3a:d7:e2:07:48:08:04:8d:dd:c6:85:5e:99:28:2a:13:6b:b2:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:23 2026 GMT
Not After : May 25 02:35:23 2027 GMT
Subject: CN=3B1CED04886C16BDF95DC92E61B662A1A885D16D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a6:2c:7b:9f:fa:71:ae:fc:0a:7e:02:24:1a:
99:17:bc:db:46:48:1c:dd:24:3d:0a:41:ec:dc:77:
08:6d:67:a7:02:6a:1c:28:e2:a4:93:e1:01:2d:db:
a0:73:99:ee:15:79:72:bb:ea:da:d9:4a:67:9e:88:
1f:bf:74:7c:1b:d3:41:37:1d:10:f8:0c:2c:9c:ac:
05:45:27:ff:6d:af:b1:35:e3:a1:3e:64:00:02:d6:
82:ff:06:51:36:b6:b3:74:57:1e:3d:1d:fe:14:84:
9d:dd:20:88:c6:fd:19:0b:64:f3:9e:6a:c7:55:72:
ca:23:ef:23:02:d1:e1:ce:69:b1:14:03:f2:85:b5:
67:8a:33:00:b0:c4:4c:99:ac:72:4e:b0:f8:e0:fb:
c5:97:46:26:41:05:c5:b7:0d:13:1f:37:12:78:f8:
02:7d:fc:97:22:bc:8a:5a:86:c9:d8:96:1f:d3:30:
96:f6:51:ac:ac:b7:18:11:83:3f:11:ba:fa:e0:d6:
2c:cf:e4:40:90:57:bd:70:11:7f:fc:8e:78:44:26:
b8:96:97:7f:7b:ee:11:d0:36:50:1a:a9:39:06:66:
c2:e0:7b:aa:11:83:7e:55:9d:bf:31:bd:c2:18:22:
5b:8b:26:4d:a1:b0:83:ef:a0:72:03:9a:e2:44:89:
9f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:1C:ED:04:88:6C:16:BD:F9:5D:C9:2E:61:B6:62:A1:A8:85:D1:6D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143754.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a450::/32
Signature Algorithm: sha256WithRSAEncryption
44:34:6e:a7:cb:2e:fe:ac:09:47:76:06:ae:17:b8:6c:f2:f0:
c2:27:40:58:93:26:4d:08:f8:6b:4a:a7:cb:3e:1e:a6:b0:83:
e1:12:c6:1f:37:5b:9c:3a:cd:69:a2:47:c5:fc:6d:f3:09:48:
a9:e3:19:ce:b8:0f:05:03:b1:72:f0:05:f9:eb:39:c7:36:c9:
fc:d0:45:52:81:cb:4f:9d:0c:43:cc:70:1e:da:dc:b3:0e:1c:
da:53:4e:3f:c9:bc:5b:73:e7:2a:99:7c:a9:be:b1:c7:10:4d:
2f:cb:d4:b4:16:59:23:20:46:4a:b6:47:1e:fc:b8:b1:14:60:
60:a0:dc:62:8d:36:13:c3:dd:d5:75:a1:60:ff:e2:6e:87:2a:
3f:60:da:7d:ca:74:97:20:8f:db:07:49:50:8c:02:df:03:34:
7f:99:7a:ab:ae:f8:cd:46:39:57:8b:46:21:b6:f8:85:6a:1a:
a8:ed:e7:c3:f2:57:e7:ee:6e:87:4e:04:29:01:83:c4:6b:07:
3f:9e:47:05:b0:f9:b1:7c:2b:0d:bc:93:42:12:07:0b:78:da:
62:a2:42:8b:71:b8:c7:71:e7:a8:bf:da:f6:7f:00:5f:61:96:
1b:50:ea:de:9f:29:d2:10:96:5c:88:70:65:f2:e8:1d:12:8d:
d0:c9:32:2b
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUFDrX4gdICASN3caFXpkoKhNrsvYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMjMwMjNaFw0yNzA1MjUwMjM1MjNaMDMxMTAvBgNV
BAMTKDNCMUNFRDA0ODg2QzE2QkRGOTVEQzkyRTYxQjY2MkExQTg4NUQxNkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCopix7n/pxrvwKfgIkGpkXvNtG
SBzdJD0KQezcdwhtZ6cCahwo4qST4QEt26Bzme4VeXK76trZSmeeiB+/dHwb00E3
HRD4DCycrAVFJ/9tr7E146E+ZAAC1oL/BlE2trN0Vx49Hf4UhJ3dIIjG/RkLZPOe
asdVcsoj7yMC0eHOabEUA/KFtWeKMwCwxEyZrHJOsPjg+8WXRiZBBcW3DRMfNxJ4
+AJ9/JcivIpahsnYlh/TMJb2UaystxgRgz8Ruvrg1izP5ECQV71wEX/8jnhEJriW
l3977hHQNlAaqTkGZsLge6oRg35Vnb8xvcIYIluLJk2hsIPvoHIDmuJEiZ+XAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUOxztBIhsFr35XckuYbZioaiF0W0wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzNzU0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqkUDANBgkqhkiG9w0BAQsFAAOCAQEARDRu
p8su/qwJR3YGrhe4bPLwwidAWJMmTQj4a0qnyz4eprCD4RLGHzdbnDrNaaJHxfxt
8wlIqeMZzrgPBQOxcvAF+es5xzbJ/NBFUoHLT50MQ8xwHtrcsw4c2lNOP8m8W3Pn
Kpl8qb6xxxBNL8vUtBZZIyBGSrZHHvy4sRRgYKDcYo02E8Pd1XWhYP/ibocqP2Da
fcp0lyCP2wdJUIwC3wM0f5l6q674zUY5V4tGIbb4hWoaqO3nw/JX5+5uh04EKQGD
xGsHP55HBbD5sXwrDbyTQhIHC3jaYqJCi3G4x3HnqL/a9n8AX2GWG1Dq3p8p0hCW
XIhwZfLoHRKN0MkyKw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:02 2026 by rpki-client