Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143838.roa
File: AS143838.roa (raw, json)
Hash identifier: uWFDw2VPsfup6iJknBKy7vdk8Z1auxpwIhvxBOBDJVE=
Subject key identifier: 0B:69:71:ED:6A:F4:CC:23:1B:05:EC:45:F8:C0:A7:BA:DD:72:94:F7
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 15A5F60640F774F36664DF19362842F4327CEA2E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143838.roa
Signing time: Mon 25 May 2026 01:38:38 +0000
ROA not before: Mon 25 May 2026 01:33:38 +0000
ROA not after: Mon 24 May 2027 01:38:38 +0000
asID: 143838
IP address blocks: 240a:a4a4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:a5:f6:06:40:f7:74:f3:66:64:df:19:36:28:42:f4:32:7c:ea:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:38 2026 GMT
Not After : May 24 01:38:38 2027 GMT
Subject: CN=0B6971ED6AF4CC231B05EC45F8C0A7BADD7294F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d4:f1:d8:29:02:62:fd:d6:5a:e7:5d:89:32:
a3:3c:d6:cc:f7:18:ba:8c:0b:1b:4a:2e:93:01:ff:
07:30:89:70:37:85:8a:3e:3c:e9:79:30:30:fe:34:
bb:ab:2f:ad:d2:d5:d8:5f:fd:ca:1a:81:61:63:e2:
dd:6a:2e:12:cd:23:07:d7:ab:91:78:dd:ca:1c:3a:
a8:ef:fb:37:b7:6f:18:ac:2c:4d:97:64:b9:69:29:
26:a6:d5:e7:fe:cb:be:cf:79:88:36:48:4f:db:69:
a4:19:02:c8:ca:08:2d:1e:c6:4b:a1:36:b7:1c:a4:
b4:1a:8f:18:9b:8f:f9:b1:db:18:0a:69:2f:a9:d4:
75:ab:81:ad:08:3d:bd:58:4d:b1:e7:b8:53:03:85:
cd:a2:f5:69:97:7e:a7:9f:f7:7b:cc:db:e3:32:6d:
06:13:47:d1:8c:31:94:76:ef:be:d9:15:c3:9f:74:
38:2a:24:24:26:5f:64:60:0a:1d:de:97:57:20:1c:
ea:28:f5:eb:14:03:60:2d:01:04:55:9f:a3:92:a0:
c4:24:1e:54:1c:ee:20:4e:67:f0:3d:60:b6:7f:bf:
9d:54:18:58:3e:3e:90:96:ef:bd:22:35:9d:97:60:
cc:97:ed:66:d7:25:77:ac:08:2b:9f:51:a1:58:b6:
f0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:69:71:ED:6A:F4:CC:23:1B:05:EC:45:F8:C0:A7:BA:DD:72:94:F7
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a4a4::/32
Signature Algorithm: sha256WithRSAEncryption
93:13:ad:e7:c1:f0:5c:cb:4c:7c:e3:16:30:fe:a5:6f:21:50:
c0:61:1b:c3:b3:53:af:8a:2b:6b:97:af:52:84:ca:dd:31:cd:
1a:d8:7b:95:98:63:7a:19:c3:9f:8a:98:cb:b0:08:7b:22:27:
45:82:0f:cd:4c:af:74:51:86:f2:fa:73:e7:18:bf:33:82:a3:
02:4c:d7:64:49:e8:8e:ea:0b:cd:f8:3a:b5:25:c0:aa:93:8c:
dd:39:cc:ec:48:d1:7a:81:98:29:0e:79:14:de:37:37:db:a6:
8c:12:98:4c:4c:c9:a4:c9:ff:02:e6:22:db:16:1c:14:8c:5d:
00:f3:7a:93:33:c8:f7:6d:ce:c2:ed:3a:71:c3:20:19:1c:30:
0c:8b:89:bf:24:ae:b5:ab:5a:a8:6a:a2:46:c2:4a:76:92:2f:
b0:0d:20:7b:1d:28:36:bd:0f:6f:3b:85:f1:24:e9:6a:41:f7:
44:1c:7e:fe:b2:99:14:b2:99:18:fa:b1:03:24:eb:3c:f4:c5:
3f:7f:5c:77:ba:74:30:96:48:8f:f4:b3:9d:9b:75:29:73:db:
c5:1a:70:7b:49:c1:66:f4:7d:54:c3:6b:00:2e:71:3d:85:36:
a6:b4:5d:5b:58:2d:70:43:b2:60:92:75:3e:61:ae:50:84:a4:
a9:e3:07:9f
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUFaX2BkD3dPNmZN8ZNihC9DJ86i4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTMzMzhaFw0yNzA1MjQwMTM4MzhaMDMxMTAvBgNV
BAMTKDBCNjk3MUVENkFGNENDMjMxQjA1RUM0NUY4QzBBN0JBREQ3Mjk0RjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh1PHYKQJi/dZa512JMqM81sz3
GLqMCxtKLpMB/wcwiXA3hYo+POl5MDD+NLurL63S1dhf/coagWFj4t1qLhLNIwfX
q5F43cocOqjv+ze3bxisLE2XZLlpKSam1ef+y77PeYg2SE/baaQZAsjKCC0exkuh
NrccpLQajxibj/mx2xgKaS+p1HWrga0IPb1YTbHnuFMDhc2i9WmXfqef93vM2+My
bQYTR9GMMZR2777ZFcOfdDgqJCQmX2RgCh3el1cgHOoo9esUA2AtAQRVn6OSoMQk
HlQc7iBOZ/A9YLZ/v51UGFg+PpCW770iNZ2XYMyX7WbXJXesCCufUaFYtvAtAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUC2lx7Wr0zCMbBexF+MCnut1ylPcwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzODM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqkpDANBgkqhkiG9w0BAQsFAAOCAQEAkxOt
58HwXMtMfOMWMP6lbyFQwGEbw7NTr4ora5evUoTK3THNGth7lZhjehnDn4qYy7AI
eyInRYIPzUyvdFGG8vpz5xi/M4KjAkzXZEnojuoLzfg6tSXAqpOM3TnM7EjReoGY
KQ55FN43N9umjBKYTEzJpMn/AuYi2xYcFIxdAPN6kzPI923Owu06ccMgGRwwDIuJ
vySutataqGqiRsJKdpIvsA0gex0oNr0PbzuF8STpakH3RBx+/rKZFLKZGPqxAyTr
PPTFP39cd7p0MJZIj/SznZt1KXPbxRpwe0nBZvR9VMNrAC5xPYU2prRdW1gtcEOy
YJJ1PmGuUISkqeMHnw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:55 2026 by rpki-client