Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143801.roa
File: AS143801.roa (raw, json)
Hash identifier: lNOwpn5mrWHTQQNSYRLWDofxvxCKJIfvCkV/jMSeUCs=
Subject key identifier: 33:AD:8F:E8:5D:24:EC:D2:22:2B:EA:B0:4C:22:63:0C:5C:EF:29:F3
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 571FDD044281C91259D46175B66CAB9C22ED5960
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143801.roa
Signing time: Tue 26 May 2026 06:12:29 +0000
ROA not before: Tue 26 May 2026 06:07:29 +0000
ROA not after: Tue 25 May 2027 06:12:29 +0000
asID: 143801
IP address blocks: 240a:a47f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:1f:dd:04:42:81:c9:12:59:d4:61:75:b6:6c:ab:9c:22:ed:59:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:07:29 2026 GMT
Not After : May 25 06:12:29 2027 GMT
Subject: CN=33AD8FE85D24ECD2222BEAB04C22630C5CEF29F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:96:79:0b:9f:f2:66:69:97:69:2e:9c:96:02:
7a:07:0c:2b:d3:f4:9b:c0:e5:f0:ec:58:e1:06:54:
ea:63:d1:68:3d:0a:e3:c8:f4:6f:92:49:83:c3:22:
d9:d4:e4:e2:00:bd:6e:de:d5:c8:17:99:d1:d5:56:
1f:8c:24:46:c8:75:d9:35:78:d2:41:d7:1d:f7:30:
d1:5b:1b:fe:b7:9a:0f:a2:e1:3f:7c:d8:3f:a8:71:
cc:2b:48:70:43:cf:ce:85:fb:08:a7:0b:59:08:4a:
85:73:43:c2:ad:85:ad:c7:0c:a7:b0:da:73:6f:0c:
57:d9:5a:9d:d5:80:09:8d:a7:92:c3:8a:a4:00:6b:
56:64:6f:d6:71:18:ba:d9:c9:30:71:59:e1:2c:c3:
ba:23:30:f0:33:ce:65:10:5b:7e:63:6e:74:6d:e7:
4d:1e:c4:50:9a:65:8f:8d:be:36:6d:1b:8d:d9:51:
27:28:9a:6f:55:33:f5:44:4d:aa:79:0a:a4:c4:f8:
3d:11:45:9c:95:e6:0a:cf:8f:0d:86:32:3e:99:52:
0a:4d:1a:8a:1f:19:79:8c:7f:fc:08:00:eb:15:47:
d8:ab:52:ea:dd:de:60:23:b1:63:ad:15:14:75:bf:
37:4f:21:17:04:34:5a:85:46:a5:e9:09:1f:7e:b8:
1a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AD:8F:E8:5D:24:EC:D2:22:2B:EA:B0:4C:22:63:0C:5C:EF:29:F3
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143801.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a47f::/32
Signature Algorithm: sha256WithRSAEncryption
63:3d:ce:fe:f6:d3:5d:d7:ad:f7:a1:45:b7:d2:93:9c:13:f5:
a0:47:4a:88:aa:c0:72:db:5e:6e:75:71:ca:14:48:ed:e5:df:
47:3f:59:d8:1a:53:1a:05:df:31:58:5c:2c:db:58:ac:47:46:
62:72:5d:0c:23:15:cf:6a:03:fc:b1:0f:b6:d1:c3:10:0d:27:
c4:03:08:78:4b:16:45:7e:d6:c6:7f:2e:de:6b:df:8b:dc:9c:
8a:69:50:95:af:b8:86:90:7d:4f:50:f7:95:24:b4:49:88:fd:
0c:c3:14:57:80:e6:fd:03:17:3c:4c:0b:0d:56:04:a7:ff:da:
d0:d2:fa:8a:27:c8:2f:02:88:d8:0a:11:37:27:a8:b6:f4:d6:
dd:e3:de:44:d0:7a:d2:9a:4f:d5:ac:77:d7:f8:ec:b6:cb:73:
a6:46:06:51:67:9c:e9:59:b4:1e:b0:ad:fe:69:4f:9d:0c:b4:
49:f4:36:b2:97:e2:90:1c:c6:3e:69:f6:3e:94:b4:f8:ce:7b:
8d:9e:95:2d:7d:7f:c5:96:aa:8b:6d:2a:a5:51:0c:e9:b6:ec:
02:ed:b7:6d:29:41:96:af:4f:14:6c:df:8a:29:6d:62:2a:1f:
b4:22:48:f6:b0:70:ad:f0:5d:06:b6:36:51:0b:56:56:71:1a:
a0:c4:d2:d0
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUVx/dBEKByRJZ1GF1tmyrnCLtWWAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwNjA3MjlaFw0yNzA1MjUwNjEyMjlaMDMxMTAvBgNV
BAMTKDMzQUQ4RkU4NUQyNEVDRDIyMjJCRUFCMDRDMjI2MzBDNUNFRjI5RjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTlnkLn/JmaZdpLpyWAnoHDCvT
9JvA5fDsWOEGVOpj0Wg9CuPI9G+SSYPDItnU5OIAvW7e1cgXmdHVVh+MJEbIddk1
eNJB1x33MNFbG/63mg+i4T982D+occwrSHBDz86F+winC1kISoVzQ8Ktha3HDKew
2nNvDFfZWp3VgAmNp5LDiqQAa1Zkb9ZxGLrZyTBxWeEsw7ojMPAzzmUQW35jbnRt
500exFCaZY+NvjZtG43ZUScomm9VM/VETap5CqTE+D0RRZyV5grPjw2GMj6ZUgpN
GoofGXmMf/wIAOsVR9irUurd3mAjsWOtFRR1vzdPIRcENFqFRqXpCR9+uBoRAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUM62P6F0k7NIiK+qwTCJjDFzvKfMwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzODAxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqkfzANBgkqhkiG9w0BAQsFAAOCAQEAYz3O
/vbTXdet96FFt9KTnBP1oEdKiKrActtebnVxyhRI7eXfRz9Z2BpTGgXfMVhcLNtY
rEdGYnJdDCMVz2oD/LEPttHDEA0nxAMIeEsWRX7Wxn8u3mvfi9ycimlQla+4hpB9
T1D3lSS0SYj9DMMUV4Dm/QMXPEwLDVYEp//a0NL6iifILwKI2AoRNyeotvTW3ePe
RNB60ppP1ax31/jststzpkYGUWec6Vm0HrCt/mlPnQy0SfQ2spfikBzGPmn2PpS0
+M57jZ6VLX1/xZaqi20qpVEM6bbsAu23bSlBlq9PFGzfiiltYioftCJI9rBwrfBd
BrY2UQtWVnEaoMTS0A==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:43 2026 by rpki-client