Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143819.roa
File: AS143819.roa (raw, json)
Hash identifier: o1yYXoDa9TLt6+VUQ3dSL3n6ZH9BcdSDydyXIcdeMjw=
Subject key identifier: 23:E3:EA:C8:59:B6:43:76:D4:CF:BF:9B:70:E1:0A:27:85:03:4D:D8
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 50C626BE50AA6F0F4AAECEF36E7FE01BF15CDBCF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143819.roa
Signing time: Tue 26 May 2026 03:17:20 +0000
ROA not before: Tue 26 May 2026 03:12:20 +0000
ROA not after: Tue 25 May 2027 03:17:20 +0000
asID: 143819
IP address blocks: 240a:a491::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:c6:26:be:50:aa:6f:0f:4a:ae:ce:f3:6e:7f:e0:1b:f1:5c:db:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:12:20 2026 GMT
Not After : May 25 03:17:20 2027 GMT
Subject: CN=23E3EAC859B64376D4CFBF9B70E10A2785034DD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:df:b4:ef:ea:06:9e:2d:1c:34:a1:4a:62:7e:
ab:8e:03:e2:97:f8:79:ce:bb:8b:e5:48:81:28:ab:
b1:45:2a:3a:9c:d8:f6:3d:ef:73:34:b8:96:0a:ab:
e8:4a:2c:f3:af:12:b3:80:e4:ef:27:a4:1d:d4:df:
04:7d:7e:db:b2:f6:7b:31:1f:b3:55:e6:1b:df:11:
0a:98:b0:00:60:12:f3:73:81:3e:aa:04:c2:70:b2:
bf:7e:9b:c3:7d:21:1d:8f:a0:0e:4b:43:a3:cd:c5:
87:b3:3a:e5:a7:2c:23:94:91:5d:55:94:96:c3:47:
cc:78:ef:fc:8a:62:08:10:ea:78:a8:ce:74:91:7f:
98:10:c8:ba:42:24:cb:36:57:7f:b2:98:01:30:d2:
f0:5d:79:0c:bd:55:61:9e:b5:42:fd:b9:f4:f4:f4:
a4:3d:1b:36:d2:c9:23:b2:f3:7b:73:bd:aa:b8:21:
27:0c:65:6a:14:2b:07:03:bb:14:40:c0:2d:fa:a3:
94:62:45:0f:91:19:95:e9:18:21:ee:aa:f1:9f:f8:
f6:ef:c2:a6:77:ae:36:eb:4b:ac:b7:77:69:92:14:
e9:5a:d0:82:fa:d8:96:bb:b1:45:1c:ef:28:05:5f:
4f:77:22:78:c0:26:80:56:e7:92:04:a7:bb:5a:50:
0f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E3:EA:C8:59:B6:43:76:D4:CF:BF:9B:70:E1:0A:27:85:03:4D:D8
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143819.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a491::/32
Signature Algorithm: sha256WithRSAEncryption
7e:cc:ba:3e:d6:41:c3:7e:bf:ee:65:ec:2a:ce:ec:01:04:c5:
2c:4c:84:b4:d3:89:be:53:4b:31:22:07:28:35:f7:2e:15:94:
51:fc:93:8a:90:0e:a3:f1:69:51:84:e6:50:f1:b3:25:28:8a:
c1:fa:84:d4:78:99:9e:9e:bd:2e:52:51:0b:a1:24:44:76:7f:
5c:e8:07:2f:86:04:1d:e2:b5:d9:f2:3f:e9:87:74:bf:a7:3d:
ee:bb:ec:2f:61:6a:e8:77:d6:0f:00:32:39:58:a4:24:6d:64:
3b:e8:e8:65:3f:74:c5:d1:d0:cd:c2:ac:88:42:cb:35:a7:34:
f9:8e:d1:ea:aa:e4:f7:cb:12:16:5d:98:47:09:c4:c8:47:db:
4b:1c:9e:bd:c9:70:5d:01:3e:0d:7a:71:f7:e4:60:b0:cd:d2:
a6:3c:6d:cf:f5:d6:b0:4b:60:e6:3c:7d:bf:91:1b:a1:cc:7b:
e9:c6:89:21:51:ed:9e:70:03:89:89:b5:b5:0a:4f:cb:4a:b1:
75:fc:50:23:a6:65:a2:3a:6e:ea:cd:e5:69:24:27:07:8b:e2:
19:be:c1:07:0f:bf:3f:c5:f3:8a:52:fb:2c:1c:26:61:b0:e1:
d7:76:55:7f:de:6f:32:ee:4c:da:61:74:e8:6c:63:eb:e2:e2:
3c:03:07:25
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUUMYmvlCqbw9Krs7zbn/gG/Fc288wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMzEyMjBaFw0yNzA1MjUwMzE3MjBaMDMxMTAvBgNV
BAMTKDIzRTNFQUM4NTlCNjQzNzZENENGQkY5QjcwRTEwQTI3ODUwMzRERDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz37Tv6gaeLRw0oUpifquOA+KX
+HnOu4vlSIEoq7FFKjqc2PY973M0uJYKq+hKLPOvErOA5O8npB3U3wR9ftuy9nsx
H7NV5hvfEQqYsABgEvNzgT6qBMJwsr9+m8N9IR2PoA5LQ6PNxYezOuWnLCOUkV1V
lJbDR8x47/yKYggQ6nioznSRf5gQyLpCJMs2V3+ymAEw0vBdeQy9VWGetUL9ufT0
9KQ9GzbSySOy83tzvaq4IScMZWoUKwcDuxRAwC36o5RiRQ+RGZXpGCHuqvGf+Pbv
wqZ3rjbrS6y3d2mSFOla0IL62Ja7sUUc7ygFX093InjAJoBW55IEp7taUA+xAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUI+PqyFm2Q3bUz7+bcOEKJ4UDTdgwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzODE5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqkkTANBgkqhkiG9w0BAQsFAAOCAQEAfsy6
PtZBw36/7mXsKs7sAQTFLEyEtNOJvlNLMSIHKDX3LhWUUfyTipAOo/FpUYTmUPGz
JSiKwfqE1HiZnp69LlJRC6EkRHZ/XOgHL4YEHeK12fI/6Yd0v6c97rvsL2Fq6HfW
DwAyOVikJG1kO+joZT90xdHQzcKsiELLNac0+Y7R6qrk98sSFl2YRwnEyEfbSxye
vclwXQE+DXpx9+RgsM3Spjxtz/XWsEtg5jx9v5Ebocx76caJIVHtnnADiYm1tQpP
y0qxdfxQI6Zlojpu6s3laSQnB4viGb7BBw+/P8XzilL7LBwmYbDh13ZVf95vMu5M
2mF06Gxj6+LiPAMHJQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:53 2026 by rpki-client