Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143795.roa
File: AS143795.roa (raw, json)
Hash identifier: ztYUyWlAMUMV/kTdpUp6g0a/Nvw7lNTPDD4r25+WrEU=
Subject key identifier: 99:DE:47:BC:96:BB:8E:5E:49:36:ED:A6:C2:88:ED:73:E8:D8:E8:F4
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1EA623838B34E3303357BC7F06B1EAB5F66AD6EE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143795.roa
Signing time: Tue 26 May 2026 01:13:31 +0000
ROA not before: Tue 26 May 2026 01:08:31 +0000
ROA not after: Tue 25 May 2027 01:13:31 +0000
asID: 143795
IP address blocks: 240a:a479::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:a6:23:83:8b:34:e3:30:33:57:bc:7f:06:b1:ea:b5:f6:6a:d6:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:31 2026 GMT
Not After : May 25 01:13:31 2027 GMT
Subject: CN=99DE47BC96BB8E5E4936EDA6C288ED73E8D8E8F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:29:ad:4e:ca:d7:12:d1:f0:d0:4b:c3:35:f8:
fd:91:82:5a:5c:4e:5d:da:a5:3e:44:ff:bc:a9:c5:
af:31:2b:39:ce:7c:b5:68:2d:fa:c6:c1:6f:4b:18:
5c:aa:94:fd:71:7d:0b:63:7f:72:a5:b0:82:dc:39:
98:f1:c4:4b:28:91:73:b9:d6:4d:90:58:f5:63:e1:
47:aa:65:0c:86:1b:cf:f9:66:29:1c:a4:2b:71:6f:
38:b3:36:91:21:74:96:5f:d4:17:ff:7b:a3:92:0c:
46:f7:5b:e5:3a:ec:c9:a3:e8:6d:9a:54:74:ca:13:
c1:46:50:b8:d8:3a:75:e6:e3:42:93:b6:cb:ec:30:
56:db:c0:40:1c:16:d5:26:5c:19:7e:fd:77:1e:a9:
10:9b:c1:94:12:4e:1e:1f:c5:07:1b:d7:13:76:74:
89:80:77:c6:a0:f0:ea:8d:66:0c:4e:2a:f1:f5:54:
55:d7:eb:86:f4:e7:cb:a9:02:7c:f4:9f:24:9b:18:
ee:12:65:38:30:41:84:91:4e:0a:2c:54:1d:47:fe:
2f:10:0f:84:f9:e6:3d:b8:78:c5:48:49:94:5b:c7:
41:15:a7:20:a8:3b:23:f5:b4:0d:95:05:86:9b:41:
0d:5b:ee:8b:2f:ae:dd:79:2c:6b:3f:2b:66:a3:1b:
88:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:DE:47:BC:96:BB:8E:5E:49:36:ED:A6:C2:88:ED:73:E8:D8:E8:F4
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143795.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a479::/32
Signature Algorithm: sha256WithRSAEncryption
2b:16:d7:66:ec:5e:f2:bb:e9:80:54:20:97:7f:ee:de:70:de:
d0:24:06:94:bf:0e:be:e5:e3:31:4c:2e:14:0c:9e:b5:bb:28:
3c:d8:cb:81:4d:6b:04:98:f5:cb:31:ef:c1:b8:b0:5c:02:fd:
a7:51:0e:5b:10:1f:54:25:09:11:9c:a6:5a:89:7d:70:4e:bb:
45:a2:5d:c5:6e:ba:d9:fd:43:e0:4e:26:4f:cc:a0:e5:7b:c6:
1f:80:77:64:cd:0e:5f:2b:bf:47:36:29:db:da:b4:42:3a:3b:
e3:52:1b:b3:d3:88:ee:9c:c3:52:4d:b9:d5:97:cd:8b:9a:96:
7c:48:93:fe:f4:4a:97:26:2f:2d:56:5f:aa:dc:fd:af:fd:5a:
96:54:49:34:ed:17:f1:c9:d6:b8:df:21:18:86:e6:7b:15:a1:
57:df:aa:d5:8f:24:3d:52:63:b9:ef:e4:e1:2e:08:d2:70:b6:
27:b1:76:f9:cd:a6:2b:43:0e:a0:d3:bd:64:f4:1a:35:a2:c1:
15:1b:f2:ca:8f:52:d5:23:64:46:29:a6:11:a4:7f:a5:b0:d6:
b8:fb:fb:12:e3:70:34:85:05:23:98:cc:b1:50:d1:87:14:0e:
6b:82:be:f1:f6:1f:61:d0:76:8d:1f:08:83:6f:0b:00:2b:44:
55:9b:1c:81
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUHqYjg4s04zAzV7x/BrHqtfZq1u4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMTA4MzFaFw0yNzA1MjUwMTEzMzFaMDMxMTAvBgNV
BAMTKDk5REU0N0JDOTZCQjhFNUU0OTM2RURBNkMyODhFRDczRThEOEU4RjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCDKa1OytcS0fDQS8M1+P2Rglpc
Tl3apT5E/7ypxa8xKznOfLVoLfrGwW9LGFyqlP1xfQtjf3KlsILcOZjxxEsokXO5
1k2QWPVj4UeqZQyGG8/5ZikcpCtxbzizNpEhdJZf1Bf/e6OSDEb3W+U67Mmj6G2a
VHTKE8FGULjYOnXm40KTtsvsMFbbwEAcFtUmXBl+/XceqRCbwZQSTh4fxQcb1xN2
dImAd8ag8OqNZgxOKvH1VFXX64b058upAnz0nySbGO4SZTgwQYSRTgosVB1H/i8Q
D4T55j24eMVISZRbx0EVpyCoOyP1tA2VBYabQQ1b7osvrt15LGs/K2ajG4iHAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUmd5HvJa7jl5JNu2mwojtc+jY6PQwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzNzk1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqkeTANBgkqhkiG9w0BAQsFAAOCAQEAKxbX
Zuxe8rvpgFQgl3/u3nDe0CQGlL8OvuXjMUwuFAyetbsoPNjLgU1rBJj1yzHvwbiw
XAL9p1EOWxAfVCUJEZymWol9cE67RaJdxW662f1D4E4mT8yg5XvGH4B3ZM0OXyu/
RzYp29q0Qjo741Ibs9OI7pzDUk251ZfNi5qWfEiT/vRKlyYvLVZfqtz9r/1allRJ
NO0X8cnWuN8hGIbmexWhV9+q1Y8kPVJjue/k4S4I0nC2J7F2+c2mK0MOoNO9ZPQa
NaLBFRvyyo9S1SNkRimmEaR/pbDWuPv7EuNwNIUFI5jMsVDRhxQOa4K+8fYfYdB2
jR8Ig28LACtEVZscgQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:57 2026 by rpki-client