Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143789.roa
File: AS143789.roa (raw, json)
Hash identifier: 9imp7ujRK40Vo6vSOYOcXKOsth9DuR59lxOn4EyD7ps=
Subject key identifier: 7A:F8:C8:FF:05:B9:D8:C1:35:2F:00:8A:84:83:82:9C:FD:BD:1B:1C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7E9D6814C7B9442BEF2696CA0979159D543C1F6B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143789.roa
Signing time: Tue 26 May 2026 01:12:56 +0000
ROA not before: Tue 26 May 2026 01:07:56 +0000
ROA not after: Tue 25 May 2027 01:12:56 +0000
asID: 143789
IP address blocks: 240a:a473::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:9d:68:14:c7:b9:44:2b:ef:26:96:ca:09:79:15:9d:54:3c:1f:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:07:56 2026 GMT
Not After : May 25 01:12:56 2027 GMT
Subject: CN=7AF8C8FF05B9D8C1352F008A8483829CFDBD1B1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fb:67:e5:87:ad:cd:20:99:5b:45:5f:8a:40:
2e:92:b3:ab:18:d5:ec:fb:e7:9e:b6:f4:e9:c3:e9:
6b:a9:34:e0:2c:eb:cd:c8:0f:6b:02:7a:dc:aa:02:
75:6b:0f:98:f8:b8:22:aa:c7:61:24:98:8f:83:c5:
77:0d:90:c4:86:a7:16:a0:28:a7:46:90:f9:5f:1a:
f9:74:38:16:69:fd:25:7d:c3:9f:d7:a9:59:0c:42:
18:93:04:a0:a3:16:bc:80:77:a9:6b:f7:26:c7:cb:
70:b7:1f:74:8a:1e:f8:e2:05:17:5a:dc:89:0a:59:
49:1d:41:6e:78:c9:74:92:d2:96:45:95:df:0a:ff:
5e:4d:ed:74:d8:f1:c0:99:ec:9f:3a:06:84:6e:99:
a8:fc:c8:52:b0:d9:71:f0:d2:b9:af:df:6a:18:42:
85:c2:a9:45:e8:8c:62:dd:56:d4:80:31:d9:6b:92:
8e:44:fd:28:e4:02:d9:c5:77:6f:41:85:bc:29:13:
80:71:f9:fd:8d:27:36:21:bc:1f:e7:80:58:87:68:
6a:12:8e:8e:31:f4:d1:b6:11:06:84:e3:9f:71:c9:
ea:df:3a:73:2b:84:a6:50:d9:d6:10:32:96:a3:bb:
8f:fb:24:2d:9a:66:bb:1b:39:a3:33:58:68:55:86:
60:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F8:C8:FF:05:B9:D8:C1:35:2F:00:8A:84:83:82:9C:FD:BD:1B:1C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143789.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a473::/32
Signature Algorithm: sha256WithRSAEncryption
46:05:bf:01:bd:a9:ae:a3:89:8b:9d:e3:b0:68:4f:f4:cc:ff:
f6:71:51:c4:76:f4:9b:f1:0d:3e:be:b7:62:2f:51:e3:7a:9b:
f2:52:0e:e0:90:e7:6c:0f:a5:03:a0:78:fd:8e:f9:a9:d7:e2:
e8:32:67:db:0a:a6:1d:ec:6c:87:df:a7:69:8e:2a:5c:b4:aa:
fb:69:27:cc:08:e2:d6:6f:00:37:88:97:34:34:fe:b0:b1:98:
1f:ed:c7:86:e8:9d:c9:a1:08:27:9a:20:54:99:ec:5e:1f:c0:
34:5d:d8:b1:5b:78:85:ca:b0:8f:52:22:bd:61:26:23:a7:44:
17:44:36:05:df:d0:19:5b:3a:d1:da:df:02:55:30:14:5e:82:
32:c2:b1:56:e3:ad:0a:bf:5e:1d:e7:ba:70:d8:60:72:97:e0:
0d:b6:bc:45:25:b3:b0:b7:3d:83:2f:c8:f5:35:51:a1:3c:0e:
bc:8e:41:f2:39:bf:4d:8f:68:ee:82:82:5e:64:72:71:2f:d2:
f9:1d:10:91:2f:f1:8d:bb:f2:ff:2e:48:1a:04:fb:7a:62:09:
67:c5:37:34:70:9a:35:74:a2:dc:47:01:30:c7:17:33:a4:09:
e2:1d:7a:e1:2d:03:2c:29:9a:ef:94:7f:7c:0e:ae:3a:d3:f0:
bb:34:82:22
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUfp1oFMe5RCvvJpbKCXkVnVQ8H2swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMTA3NTZaFw0yNzA1MjUwMTEyNTZaMDMxMTAvBgNV
BAMTKDdBRjhDOEZGMDVCOUQ4QzEzNTJGMDA4QTg0ODM4MjlDRkRCRDFCMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR+2flh63NIJlbRV+KQC6Ss6sY
1ez755629OnD6WupNOAs683ID2sCetyqAnVrD5j4uCKqx2EkmI+DxXcNkMSGpxag
KKdGkPlfGvl0OBZp/SV9w5/XqVkMQhiTBKCjFryAd6lr9ybHy3C3H3SKHvjiBRda
3IkKWUkdQW54yXSS0pZFld8K/15N7XTY8cCZ7J86BoRumaj8yFKw2XHw0rmv32oY
QoXCqUXojGLdVtSAMdlrko5E/SjkAtnFd29BhbwpE4Bx+f2NJzYhvB/ngFiHaGoS
jo4x9NG2EQaE459xyerfOnMrhKZQ2dYQMpaju4/7JC2aZrsbOaMzWGhVhmAJAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUevjI/wW52ME1LwCKhIOCnP29GxwwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzNzg5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqkczANBgkqhkiG9w0BAQsFAAOCAQEARgW/
Ab2prqOJi53jsGhP9Mz/9nFRxHb0m/ENPr63Yi9R43qb8lIO4JDnbA+lA6B4/Y75
qdfi6DJn2wqmHexsh9+naY4qXLSq+2knzAji1m8AN4iXNDT+sLGYH+3HhuidyaEI
J5ogVJnsXh/ANF3YsVt4hcqwj1IivWEmI6dEF0Q2Bd/QGVs60drfAlUwFF6CMsKx
VuOtCr9eHee6cNhgcpfgDba8RSWzsLc9gy/I9TVRoTwOvI5B8jm/TY9o7oKCXmRy
cS/S+R0QkS/xjbvy/y5IGgT7emIJZ8U3NHCaNXSi3EcBMMcXM6QJ4h164S0DLCma
75R/fA6uOtPwuzSCIg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:30 2026 by rpki-client