Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143784.roa
File: AS143784.roa (raw, json)
Hash identifier: ClINll4lSL7WAyfiZL08OpmNzAFB94OhoBFmRToLohE=
Subject key identifier: 21:8D:C4:5D:03:9F:D3:AE:C4:FB:50:77:EC:9C:5B:96:DE:CB:06:A3
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3FCBAC8B5B4E7537C8895A7E7EB736638AE62C93
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143784.roa
Signing time: Mon 25 May 2026 01:19:57 +0000
ROA not before: Mon 25 May 2026 01:14:57 +0000
ROA not after: Mon 24 May 2027 01:19:57 +0000
asID: 143784
IP address blocks: 240a:a46e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:cb:ac:8b:5b:4e:75:37:c8:89:5a:7e:7e:b7:36:63:8a:e6:2c:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:14:57 2026 GMT
Not After : May 24 01:19:57 2027 GMT
Subject: CN=218DC45D039FD3AEC4FB5077EC9C5B96DECB06A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:44:7d:f1:92:1a:83:7e:0c:14:30:4d:f0:a2:
6b:6e:4c:51:cd:e6:47:ca:ba:28:ca:e5:cd:f9:38:
00:51:4f:0f:7d:0e:de:3c:1f:d2:1a:64:49:f2:bf:
82:b1:d6:c0:0b:46:c0:c2:26:dc:46:cf:47:4f:21:
90:5d:9b:52:40:02:6d:d8:28:66:fa:4e:30:96:e4:
bb:f9:85:e7:5c:c0:c9:02:ad:0a:a6:62:a8:6d:6d:
99:69:7c:b1:7d:32:47:76:32:17:86:ae:59:99:12:
03:a1:6b:31:10:dd:bd:71:42:25:0b:8e:48:b4:3d:
9a:ec:7f:2f:24:07:93:fa:3c:62:03:f2:73:c6:8f:
6e:e3:36:23:c8:59:4c:fc:47:06:3d:94:78:09:0d:
fb:c8:be:49:c2:c8:00:c4:c3:76:22:3e:28:e8:03:
99:db:3a:e5:7c:81:52:ea:79:8c:52:2a:b8:62:0f:
a0:d8:8c:5c:21:89:0e:39:64:93:ef:56:6b:53:35:
c9:f3:18:0a:b3:60:45:b1:af:e3:56:54:9b:d2:7a:
a4:e4:59:37:3b:40:17:16:d4:df:f3:e8:c0:e1:aa:
54:06:97:1b:73:0d:c4:75:06:fb:c9:5f:83:b4:7f:
81:f9:dc:67:31:bc:fe:f7:a9:f8:76:3a:eb:37:d8:
5b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:8D:C4:5D:03:9F:D3:AE:C4:FB:50:77:EC:9C:5B:96:DE:CB:06:A3
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143784.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a46e::/32
Signature Algorithm: sha256WithRSAEncryption
98:d8:42:10:ef:6e:51:65:34:0c:d8:6c:80:79:9a:ac:97:7f:
e9:09:73:ef:89:98:4f:e7:c6:df:35:e5:84:92:e4:40:62:1d:
c9:22:da:f1:5b:08:49:1f:27:3d:4b:17:b0:0d:60:84:19:86:
ba:2a:cc:65:6a:9d:81:e1:fb:f5:a5:10:65:cf:3c:68:04:14:
e8:54:14:6e:f7:11:19:09:98:d7:1e:29:fe:2a:24:68:af:4b:
31:87:d9:13:d8:10:09:42:96:81:3b:3f:26:de:69:a4:13:0d:
fa:e2:82:04:ce:09:1b:72:16:51:36:22:3e:75:ef:fa:5a:0a:
83:19:a8:21:dc:fc:54:ce:43:6c:8a:c0:7c:b9:3f:3b:e0:fd:
b1:3a:34:8e:b6:a6:12:f1:63:cc:58:e3:4a:07:ec:ef:66:63:
f2:8e:3b:5f:35:24:7d:1d:ad:fb:8a:85:91:43:09:ec:c8:41:
64:f6:6a:b8:d2:36:ae:7e:28:a4:ae:42:af:66:01:9b:36:f6:
80:04:49:a5:14:b4:31:df:2d:0e:a7:3a:5c:22:ee:c6:99:97:
00:bc:38:69:3e:f8:3d:b5:f4:1f:ef:c4:1f:bb:88:3b:89:f7:
c0:e6:59:72:a9:85:10:fd:da:31:c8:a9:fc:c4:24:19:30:81:
bc:ba:bf:21
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUP8usi1tOdTfIiVp+frc2Y4rmLJMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTE0NTdaFw0yNzA1MjQwMTE5NTdaMDMxMTAvBgNV
BAMTKDIxOERDNDVEMDM5RkQzQUVDNEZCNTA3N0VDOUM1Qjk2REVDQjA2QTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2RH3xkhqDfgwUME3womtuTFHN
5kfKuijK5c35OABRTw99Dt48H9IaZEnyv4Kx1sALRsDCJtxGz0dPIZBdm1JAAm3Y
KGb6TjCW5Lv5hedcwMkCrQqmYqhtbZlpfLF9Mkd2MheGrlmZEgOhazEQ3b1xQiUL
jki0PZrsfy8kB5P6PGID8nPGj27jNiPIWUz8RwY9lHgJDfvIvknCyADEw3YiPijo
A5nbOuV8gVLqeYxSKrhiD6DYjFwhiQ45ZJPvVmtTNcnzGAqzYEWxr+NWVJvSeqTk
WTc7QBcW1N/z6MDhqlQGlxtzDcR1BvvJX4O0f4H53GcxvP73qfh2Ous32FuVAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUIY3EXQOf067E+1B37Jxblt7LBqMwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzNzg0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqkbjANBgkqhkiG9w0BAQsFAAOCAQEAmNhC
EO9uUWU0DNhsgHmarJd/6Qlz74mYT+fG3zXlhJLkQGIdySLa8VsISR8nPUsXsA1g
hBmGuirMZWqdgeH79aUQZc88aAQU6FQUbvcRGQmY1x4p/iokaK9LMYfZE9gQCUKW
gTs/Jt5ppBMN+uKCBM4JG3IWUTYiPnXv+loKgxmoIdz8VM5DbIrAfLk/O+D9sTo0
jramEvFjzFjjSgfs72Zj8o47XzUkfR2t+4qFkUMJ7MhBZPZquNI2rn4opK5Cr2YB
mzb2gARJpRS0Md8tDqc6XCLuxpmXALw4aT74PbX0H+/EH7uIO4n3wOZZcqmFEP3a
Mcip/MQkGTCBvLq/IQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:36 2026 by rpki-client