Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143815.roa
File: AS143815.roa (raw, json)
Hash identifier: GW6N8I3M/Hsm0z/bIbZSuL3Rw64cQC1brHoWOByazzc=
Subject key identifier: 72:02:D5:7A:84:0C:76:DA:FD:97:37:C8:A2:D7:5F:62:EE:CF:94:D4
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 234E568C0794D6EFEC3B3626CDBA9B47E4247C27
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143815.roa
Signing time: Mon 25 May 2026 02:22:43 +0000
ROA not before: Mon 25 May 2026 02:17:43 +0000
ROA not after: Mon 24 May 2027 02:22:43 +0000
asID: 143815
IP address blocks: 240a:a48d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:4e:56:8c:07:94:d6:ef:ec:3b:36:26:cd:ba:9b:47:e4:24:7c:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:43 2026 GMT
Not After : May 24 02:22:43 2027 GMT
Subject: CN=7202D57A840C76DAFD9737C8A2D75F62EECF94D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a0:9c:64:60:ef:07:71:7c:3f:30:c5:a1:5b:
77:a8:f1:7f:15:de:59:50:9e:a5:94:e0:90:47:d9:
e4:c7:aa:d0:de:e3:b1:eb:a8:6d:c8:37:f3:db:36:
84:1e:c3:db:35:37:f7:0f:af:d7:96:b8:96:e0:60:
23:33:28:32:fb:ed:d2:ea:62:99:82:42:18:73:3b:
6b:3a:55:95:64:9a:e6:ee:d8:d1:01:66:6b:e2:21:
b3:1d:5c:6f:fc:53:2c:ec:15:45:30:14:ea:9f:3d:
57:84:a2:09:de:59:4e:85:74:67:ed:15:ca:2c:6b:
11:44:3f:f3:ee:9d:a5:0a:de:50:76:b8:3b:50:62:
f8:a5:12:56:db:92:3f:ce:03:1e:02:51:a9:fd:01:
79:d4:1b:fa:c4:2c:f7:6f:81:d0:8d:f8:16:1a:bc:
a5:1f:4e:e5:3f:ee:c4:3c:67:3d:82:1c:7c:75:1f:
e8:aa:e6:c4:f2:7c:78:c1:c8:e0:36:5e:5a:db:20:
6b:17:5a:3c:4a:52:ca:22:d9:0c:0e:b6:f1:84:65:
50:6e:79:0f:bf:dd:43:14:fc:af:17:2c:8c:b8:69:
89:56:31:ac:63:5d:76:b1:4b:49:54:db:f4:74:d0:
7b:2a:14:1c:43:d3:62:73:c7:6b:a7:fb:1c:90:94:
74:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:02:D5:7A:84:0C:76:DA:FD:97:37:C8:A2:D7:5F:62:EE:CF:94:D4
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143815.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a48d::/32
Signature Algorithm: sha256WithRSAEncryption
42:e7:4d:02:d2:b5:30:6c:29:8b:54:2b:d9:c1:43:73:c0:48:
b7:58:d2:8c:ce:02:24:4a:5d:2c:32:aa:7e:ef:8d:b6:53:1d:
a0:29:89:cc:6b:0e:22:7c:68:78:e9:03:3b:88:78:ac:ac:59:
d7:38:5b:3c:f8:b3:62:04:e2:3b:4f:2d:ac:54:b3:e2:89:be:
77:53:bb:39:3c:50:0b:ac:d2:5d:03:f7:b3:0d:ca:f2:a3:b9:
3f:1d:2b:df:1f:63:eb:09:1a:9b:a3:b0:03:74:07:dc:8f:8c:
7c:81:2a:41:22:61:15:a0:97:a2:2a:7e:87:9c:d5:91:cd:d8:
6d:07:dd:5f:ae:b4:07:ef:35:8c:05:33:8b:6e:4d:44:67:f4:
50:a1:8b:be:cb:94:6c:de:18:69:ac:1a:ea:0c:d1:69:8a:72:
a9:08:df:6c:e2:c9:a9:c1:8b:6f:e0:93:25:0c:73:09:ae:17:
c7:c8:58:8f:5d:f4:ba:22:e5:ca:ca:bc:68:e9:6f:67:a1:8c:
51:cb:72:e0:f2:94:ea:dd:de:8b:a4:03:90:e5:5b:5a:f3:6f:
38:fe:1d:ec:f3:5f:84:f8:05:c7:d0:6e:82:35:79:e1:da:b7:
33:aa:9b:34:3e:2f:1e:77:3d:f0:9a:33:79:ca:e1:10:9d:4b:
b9:8a:3b:a6
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUI05WjAeU1u/sOzYmzbqbR+QkfCcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMjE3NDNaFw0yNzA1MjQwMjIyNDNaMDMxMTAvBgNV
BAMTKDcyMDJENTdBODQwQzc2REFGRDk3MzdDOEEyRDc1RjYyRUVDRjk0RDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkoJxkYO8HcXw/MMWhW3eo8X8V
3llQnqWU4JBH2eTHqtDe47HrqG3IN/PbNoQew9s1N/cPr9eWuJbgYCMzKDL77dLq
YpmCQhhzO2s6VZVkmubu2NEBZmviIbMdXG/8UyzsFUUwFOqfPVeEogneWU6FdGft
FcosaxFEP/PunaUK3lB2uDtQYvilElbbkj/OAx4CUan9AXnUG/rELPdvgdCN+BYa
vKUfTuU/7sQ8Zz2CHHx1H+iq5sTyfHjByOA2XlrbIGsXWjxKUsoi2QwOtvGEZVBu
eQ+/3UMU/K8XLIy4aYlWMaxjXXaxS0lU2/R00HsqFBxD02Jzx2un+xyQlHTNAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUcgLVeoQMdtr9lzfIotdfYu7PlNQwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzODE1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqkjTANBgkqhkiG9w0BAQsFAAOCAQEAQudN
AtK1MGwpi1Qr2cFDc8BIt1jSjM4CJEpdLDKqfu+NtlMdoCmJzGsOInxoeOkDO4h4
rKxZ1zhbPPizYgTiO08trFSz4om+d1O7OTxQC6zSXQP3sw3K8qO5Px0r3x9j6wka
m6OwA3QH3I+MfIEqQSJhFaCXoip+h5zVkc3YbQfdX660B+81jAUzi25NRGf0UKGL
vsuUbN4Yaawa6gzRaYpyqQjfbOLJqcGLb+CTJQxzCa4Xx8hYj130uiLlysq8aOlv
Z6GMUcty4PKU6t3ei6QDkOVbWvNvOP4d7PNfhPgFx9BugjV54dq3M6qbND4vHnc9
8JozecrhEJ1LuYo7pg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:43 2026 by rpki-client