Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143802.roa
File: AS143802.roa (raw, json)
Hash identifier: lcV6So4pT4l7ndx1T4C5SK0TWH/qvJbQSN/62Yc6ksM=
Subject key identifier: 57:CE:BA:47:1D:06:99:41:97:22:5F:10:DA:10:35:F5:B6:F8:20:BF
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2F9B1F14A2643AC6BA7E0956C521A6F48DAB6A42
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143802.roa
Signing time: Mon 25 May 2026 06:28:51 +0000
ROA not before: Mon 25 May 2026 06:23:51 +0000
ROA not after: Mon 24 May 2027 06:28:51 +0000
asID: 143802
IP address blocks: 240a:a480::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:9b:1f:14:a2:64:3a:c6:ba:7e:09:56:c5:21:a6:f4:8d:ab:6a:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:51 2026 GMT
Not After : May 24 06:28:51 2027 GMT
Subject: CN=57CEBA471D06994197225F10DA1035F5B6F820BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:71:f3:44:5d:64:20:bf:d3:59:47:56:ad:b8:
1b:de:00:c5:fb:a1:b0:92:b2:1f:14:98:16:8a:4c:
ec:75:df:da:5b:a5:9f:71:fc:15:19:e0:26:e6:e6:
59:da:31:d8:9d:52:ad:20:67:75:74:be:3e:f9:17:
7f:43:68:0c:30:61:d7:28:d5:d3:6a:bc:2b:38:c8:
7d:7c:3f:83:9a:93:4f:56:5d:c9:e2:eb:e4:6b:dc:
a1:9e:7d:5a:d4:c3:4e:9e:53:c4:89:bc:b0:ce:5d:
b5:56:d8:c1:1b:c7:3e:8d:e8:dc:f3:ee:05:05:51:
7e:93:0b:d7:46:f4:14:9b:e6:ec:3c:83:83:85:10:
56:86:df:f3:e2:f7:82:a6:17:d0:03:35:97:64:f2:
49:1e:2e:95:a2:c9:00:6b:d7:db:2d:89:70:da:db:
a6:09:78:a7:7c:9d:e2:a6:77:ea:48:e4:ce:83:97:
91:d2:af:f3:6a:36:0e:ed:81:51:15:73:81:a8:84:
0d:a4:dc:64:71:5c:07:8a:ef:61:ee:78:4c:c6:7f:
b3:5c:c8:ed:96:a8:ca:6a:76:80:70:54:e5:92:f6:
20:54:86:4b:25:a1:08:dc:4d:6d:28:7b:fa:75:52:
78:53:a9:18:5a:fc:34:c9:ba:72:74:ee:cb:46:38:
4d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:CE:BA:47:1D:06:99:41:97:22:5F:10:DA:10:35:F5:B6:F8:20:BF
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143802.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a480::/32
Signature Algorithm: sha256WithRSAEncryption
b0:32:59:d5:da:4b:10:95:45:17:8b:06:49:9b:1f:3b:05:7f:
de:90:1f:5b:50:db:21:b6:f2:d4:33:6a:e2:27:03:84:32:b0:
2b:d4:24:fa:2b:19:66:07:4f:be:70:f2:f9:09:25:2a:d9:00:
7c:20:eb:02:3d:34:f4:af:dd:d5:0f:6c:c5:d1:02:01:a9:f0:
09:c5:9b:d9:01:c1:9b:06:1f:d5:91:17:c2:4a:55:cb:ec:b9:
23:08:64:f8:78:0e:0f:22:05:ef:2b:b6:d9:bd:de:a5:5c:ed:
0e:3b:1d:f8:c2:72:41:46:68:31:38:cc:74:f7:58:cd:91:e7:
17:5c:83:93:ee:4c:0b:b9:e6:e3:39:35:73:28:f5:86:11:4e:
60:71:62:db:a4:82:16:15:64:1c:7a:a4:03:08:a8:dd:85:a0:
02:f4:84:07:45:c8:a1:61:58:04:c6:6e:44:c8:35:df:8b:d2:
4e:ad:b6:8b:50:01:bf:3e:08:c5:da:da:31:6b:50:87:c4:7b:
0e:f0:4c:24:f6:60:19:02:66:21:fb:c4:ea:9b:e3:67:75:4b:
43:99:07:90:85:cf:4b:27:ef:40:b4:7f:ce:7d:1f:7f:3c:c2:
36:73:65:dd:f1:51:fc:aa:e1:84:46:8e:a7:03:33:5a:1a:a0:
6e:f5:03:4d
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUL5sfFKJkOsa6fglWxSGm9I2rakIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwNjIzNTFaFw0yNzA1MjQwNjI4NTFaMDMxMTAvBgNV
BAMTKDU3Q0VCQTQ3MUQwNjk5NDE5NzIyNUYxMERBMTAzNUY1QjZGODIwQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCccfNEXWQgv9NZR1atuBveAMX7
obCSsh8UmBaKTOx139pbpZ9x/BUZ4Cbm5lnaMdidUq0gZ3V0vj75F39DaAwwYdco
1dNqvCs4yH18P4Oak09WXcni6+Rr3KGefVrUw06eU8SJvLDOXbVW2MEbxz6N6Nzz
7gUFUX6TC9dG9BSb5uw8g4OFEFaG3/Pi94KmF9ADNZdk8kkeLpWiyQBr19stiXDa
26YJeKd8neKmd+pI5M6Dl5HSr/NqNg7tgVEVc4GohA2k3GRxXAeK72HueEzGf7Nc
yO2WqMpqdoBwVOWS9iBUhksloQjcTW0oe/p1UnhTqRha/DTJunJ07stGOE3zAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUV866Rx0GmUGXIl8Q2hA19bb4IL8wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzODAyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqkgDANBgkqhkiG9w0BAQsFAAOCAQEAsDJZ
1dpLEJVFF4sGSZsfOwV/3pAfW1DbIbby1DNq4icDhDKwK9Qk+isZZgdPvnDy+Qkl
KtkAfCDrAj009K/d1Q9sxdECAanwCcWb2QHBmwYf1ZEXwkpVy+y5Iwhk+HgODyIF
7yu22b3epVztDjsd+MJyQUZoMTjMdPdYzZHnF1yDk+5MC7nm4zk1cyj1hhFOYHFi
26SCFhVkHHqkAwio3YWgAvSEB0XIoWFYBMZuRMg134vSTq22i1ABvz4IxdraMWtQ
h8R7DvBMJPZgGQJmIfvE6pvjZ3VLQ5kHkIXPSyfvQLR/zn0ffzzCNnNl3fFR/Krh
hEaOpwMzWhqgbvUDTQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:43 2026 by rpki-client