Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143798.roa
File: AS143798.roa (raw, json)
Hash identifier: 2aTi55PCUTqnPG9PJqlclBk/wi5qbof/5eZNYMbCDOM=
Subject key identifier: EC:6D:CA:2A:0C:8D:03:3A:08:60:05:CB:84:28:ED:6F:46:9D:C4:06
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5DD7963B390A1EDD894976CB5EE0CE02CEA8ECAB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143798.roa
Signing time: Mon 25 May 2026 06:48:58 +0000
ROA not before: Mon 25 May 2026 06:43:58 +0000
ROA not after: Mon 24 May 2027 06:48:58 +0000
asID: 143798
IP address blocks: 240a:a47c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:d7:96:3b:39:0a:1e:dd:89:49:76:cb:5e:e0:ce:02:ce:a8:ec:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:43:58 2026 GMT
Not After : May 24 06:48:58 2027 GMT
Subject: CN=EC6DCA2A0C8D033A086005CB8428ED6F469DC406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ed:9b:27:2f:7f:31:dc:55:bf:dd:27:ea:64:
45:85:a4:7a:4b:27:ee:20:3a:47:ca:94:70:e8:cc:
d5:a6:76:67:0c:c3:b1:ed:47:78:80:00:d5:5c:96:
58:07:4b:19:1e:e8:ad:08:8b:67:a6:8d:14:90:ac:
17:fb:f2:5e:6c:95:c4:0f:00:11:ed:29:30:f3:d0:
6a:6c:20:28:63:a3:01:1e:46:32:08:98:45:c9:24:
24:76:f6:a0:cf:dd:ba:e6:60:52:9b:83:19:4e:c5:
ed:1f:d9:42:b3:6f:d3:f1:10:91:6e:5e:96:b1:41:
10:37:73:0b:57:33:17:6b:b3:d6:00:1e:88:0f:20:
3a:96:68:a0:b0:59:fa:4e:8b:54:80:1b:20:9c:69:
2c:43:5c:dd:75:6c:d5:3d:06:2e:cb:78:11:a6:8a:
44:7f:2e:6b:d7:f4:65:c5:cd:06:70:a6:6a:19:a1:
aa:c4:62:48:68:3e:ff:03:a6:01:19:4a:dd:b4:86:
e9:53:1d:25:d0:72:49:7e:b2:a3:d3:cc:33:1d:2c:
3a:3c:5f:6d:cb:63:67:eb:65:37:ba:4d:5f:34:34:
51:35:bc:ac:72:0b:b0:a1:ac:07:c2:18:96:08:5b:
08:2f:07:48:db:dc:f9:2e:fa:33:60:27:a9:ac:49:
ca:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:6D:CA:2A:0C:8D:03:3A:08:60:05:CB:84:28:ED:6F:46:9D:C4:06
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143798.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a47c::/32
Signature Algorithm: sha256WithRSAEncryption
a2:ed:dc:8d:eb:5c:fe:1b:50:8c:bb:2d:7d:50:ba:98:a3:5f:
a6:0b:6b:a8:d9:cf:37:b4:96:6e:8f:f0:2a:50:3a:a0:b5:22:
8f:6d:d8:ce:4f:19:a6:68:7f:af:90:c5:85:e9:fa:89:ec:e9:
b9:33:10:0b:a7:a8:7c:ff:ea:a1:ba:da:38:ca:41:26:36:db:
ad:a1:b6:7e:af:f2:a3:9b:64:24:61:86:25:f1:95:ee:c3:d7:
5a:87:5b:1f:fa:e5:96:47:38:b1:38:7b:21:de:59:75:9b:43:
4c:0a:af:6c:b1:28:d7:e2:ce:00:24:ae:32:b8:90:c7:9d:fb:
32:97:e9:71:c6:1c:fb:2a:6a:28:f7:d4:ea:63:a9:d8:53:8b:
f4:89:99:a2:dd:5c:06:73:4e:f8:79:f4:1d:a9:3e:e1:f6:4d:
ac:f5:97:6c:1e:3c:22:c0:e2:74:2e:b4:d2:08:d4:8e:71:5a:
c5:7d:94:4b:de:58:4e:bd:f6:06:3f:04:02:cd:e2:a2:f5:d1:
60:6b:b4:71:35:63:78:86:23:a7:18:44:30:61:a3:1a:98:16:
9e:57:96:ab:10:b2:9d:bc:4b:a2:9b:d6:a8:13:20:59:f6:7b:
68:41:94:8b:c6:bd:b2:94:ad:b6:4b:06:21:2e:e3:15:22:19:
9c:60:2b:89
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUXdeWOzkKHt2JSXbLXuDOAs6o7KswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwNjQzNThaFw0yNzA1MjQwNjQ4NThaMDMxMTAvBgNV
BAMTKEVDNkRDQTJBMEM4RDAzM0EwODYwMDVDQjg0MjhFRDZGNDY5REM0MDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp7ZsnL38x3FW/3SfqZEWFpHpL
J+4gOkfKlHDozNWmdmcMw7HtR3iAANVcllgHSxke6K0Ii2emjRSQrBf78l5slcQP
ABHtKTDz0GpsIChjowEeRjIImEXJJCR29qDP3brmYFKbgxlOxe0f2UKzb9PxEJFu
XpaxQRA3cwtXMxdrs9YAHogPIDqWaKCwWfpOi1SAGyCcaSxDXN11bNU9Bi7LeBGm
ikR/LmvX9GXFzQZwpmoZoarEYkhoPv8DpgEZSt20hulTHSXQckl+sqPTzDMdLDo8
X23LY2frZTe6TV80NFE1vKxyC7ChrAfCGJYIWwgvB0jb3Pku+jNgJ6msScpvAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU7G3KKgyNAzoIYAXLhCjtb0adxAYwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzNzk4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqkfDANBgkqhkiG9w0BAQsFAAOCAQEAou3c
jetc/htQjLstfVC6mKNfpgtrqNnPN7SWbo/wKlA6oLUij23Yzk8Zpmh/r5DFhen6
iezpuTMQC6eofP/qobraOMpBJjbbraG2fq/yo5tkJGGGJfGV7sPXWodbH/rllkc4
sTh7Id5ZdZtDTAqvbLEo1+LOACSuMriQx537MpfpccYc+ypqKPfU6mOp2FOL9ImZ
ot1cBnNO+Hn0Hak+4fZNrPWXbB48IsDidC600gjUjnFaxX2US95YTr32Bj8EAs3i
ovXRYGu0cTVjeIYjpxhEMGGjGpgWnleWqxCynbxLopvWqBMgWfZ7aEGUi8a9spSt
tksGIS7jFSIZnGAriQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:05 2026 by rpki-client