Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143808.roa
File: AS143808.roa (raw, json)
Hash identifier: GCWPAuNjQjimB/9MmX+/pQKS+t2Vzt9mH3pzblPhjlU=
Subject key identifier: 08:80:7A:92:E8:9C:FA:D6:55:14:0C:2B:F3:CA:76:CB:77:E8:01:62
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4CD4DD60B04D1C705C52B28617076931AA00BC24
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143808.roa
Signing time: Fri 22 May 2026 06:27:38 +0000
ROA not before: Fri 22 May 2026 06:22:38 +0000
ROA not after: Fri 21 May 2027 06:27:38 +0000
asID: 143808
IP address blocks: 240a:a486::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:d4:dd:60:b0:4d:1c:70:5c:52:b2:86:17:07:69:31:aa:00:bc:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:22:38 2026 GMT
Not After : May 21 06:27:38 2027 GMT
Subject: CN=08807A92E89CFAD655140C2BF3CA76CB77E80162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:59:6f:71:0b:df:a3:ee:1e:0e:50:99:fc:0c:
7e:04:70:f8:a5:b1:70:f2:8a:84:e5:38:d1:7b:a7:
05:f9:df:d8:5c:9e:d2:46:aa:b5:ff:08:2f:38:f7:
d5:eb:ee:61:29:b3:f7:16:ea:fe:3d:5b:33:d1:24:
e5:b9:63:23:54:2d:25:7f:58:f4:52:c1:fc:ce:61:
a4:40:4c:4a:79:5f:d3:9d:d1:a1:71:65:8d:cd:ec:
16:88:66:6e:d4:8d:b0:51:ec:f6:1e:30:26:1c:ad:
63:00:86:d2:6e:71:9c:61:1b:03:94:0b:0a:d5:78:
95:a6:4d:c7:0e:fe:b5:21:fd:9a:3b:91:ea:99:5f:
a5:35:51:df:f6:28:29:b3:50:c5:76:ff:3e:42:44:
da:3b:a7:93:c7:83:d8:0b:6c:51:20:f4:d9:7c:fe:
3a:73:f8:5d:5b:6d:63:c1:95:48:0a:84:81:48:f8:
40:ee:c6:8f:70:aa:87:5a:5c:dc:c4:63:a6:80:e0:
53:51:44:2f:fe:c3:ec:27:3b:b7:1b:63:4e:66:a8:
c5:84:0f:6d:2e:dc:b0:b9:6d:59:2b:bb:c1:b1:86:
d4:2f:bc:e0:4b:fb:77:ad:fb:8a:ac:9e:39:fa:38:
e3:73:71:36:7b:1d:eb:d2:55:7f:a6:2b:af:e6:0a:
b8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:80:7A:92:E8:9C:FA:D6:55:14:0C:2B:F3:CA:76:CB:77:E8:01:62
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143808.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a486::/32
Signature Algorithm: sha256WithRSAEncryption
53:a4:2a:cc:3b:60:c0:ec:c6:e9:a5:cb:17:ec:46:6a:77:e5:
99:d1:7a:8d:05:68:48:f5:19:c3:fb:0f:c9:81:24:f3:f2:ed:
8d:be:ff:6a:cf:2e:ff:de:de:75:56:68:ac:a7:d0:12:8c:d7:
00:ee:82:08:4b:c8:ff:81:8b:e5:27:12:29:9d:26:79:81:b8:
61:11:c7:3b:e8:48:89:97:e5:a8:1e:8e:d3:46:80:ce:c5:22:
24:8e:aa:66:00:5f:77:de:8d:b9:59:76:2c:f3:d8:a7:c6:73:
10:4e:19:40:89:9c:53:12:65:f8:d1:c5:e6:bb:ec:43:45:5c:
94:6e:95:c0:61:d7:33:f6:19:fd:16:1b:14:ad:ce:9d:e8:33:
93:27:1a:2d:ab:fc:6c:f1:56:61:c0:ef:dc:5f:63:22:99:c7:
98:60:46:42:d7:05:3f:68:22:4a:6d:17:f1:a1:97:0b:7c:3c:
2b:ba:b3:cc:60:0b:2a:22:db:12:b6:05:7a:29:46:a6:3e:4d:
c9:ea:d5:4d:bc:29:44:4f:a8:bc:d5:c4:30:2a:89:a3:84:ac:
5f:e2:84:65:2c:cc:cd:63:96:36:34:32:fa:69:8b:71:0d:be:
06:d2:5b:3e:cf:4d:6f:47:1e:9a:a2:8f:c3:8f:0f:e1:70:a5:
e7:70:8f:69
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUTNTdYLBNHHBcUrKGFwdpMaoAvCQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjIyMzhaFw0yNzA1MjEwNjI3MzhaMDMxMTAvBgNV
BAMTKDA4ODA3QTkyRTg5Q0ZBRDY1NTE0MEMyQkYzQ0E3NkNCNzdFODAxNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6WW9xC9+j7h4OUJn8DH4EcPil
sXDyioTlONF7pwX539hcntJGqrX/CC8499Xr7mEps/cW6v49WzPRJOW5YyNULSV/
WPRSwfzOYaRATEp5X9Od0aFxZY3N7BaIZm7UjbBR7PYeMCYcrWMAhtJucZxhGwOU
CwrVeJWmTccO/rUh/Zo7keqZX6U1Ud/2KCmzUMV2/z5CRNo7p5PHg9gLbFEg9Nl8
/jpz+F1bbWPBlUgKhIFI+EDuxo9wqodaXNzEY6aA4FNRRC/+w+wnO7cbY05mqMWE
D20u3LC5bVkru8GxhtQvvOBL+3et+4qsnjn6OONzcTZ7HevSVX+mK6/mCrgBAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUCIB6kuic+tZVFAwr88p2y3foAWIwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzODA4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqkhjANBgkqhkiG9w0BAQsFAAOCAQEAU6Qq
zDtgwOzG6aXLF+xGanflmdF6jQVoSPUZw/sPyYEk8/Ltjb7/as8u/97edVZorKfQ
EozXAO6CCEvI/4GL5ScSKZ0meYG4YRHHO+hIiZflqB6O00aAzsUiJI6qZgBfd96N
uVl2LPPYp8ZzEE4ZQImcUxJl+NHF5rvsQ0VclG6VwGHXM/YZ/RYbFK3Onegzkyca
Lav8bPFWYcDv3F9jIpnHmGBGQtcFP2giSm0X8aGXC3w8K7qzzGALKiLbErYFeilG
pj5NyerVTbwpRE+ovNXEMCqJo4SsX+KEZSzMzWOWNjQy+mmLcQ2+BtJbPs9Nb0ce
mqKPw48P4XCl53CPaQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:09 2026 by rpki-client