Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143862.roa
File: AS143862.roa (raw, json)
Hash identifier: eR3xpHm7QplHRXF1FoTrqZ2ybqh96S5l7gIoCW59qMM=
Subject key identifier: 60:26:5A:92:83:F4:8B:2D:D7:5A:2B:FA:8D:31:0C:C8:5B:EB:38:6E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 60D90F9A35BC00A35E2F430A186C9CB0CDA90C65
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143862.roa
Signing time: Fri 22 May 2026 06:05:16 +0000
ROA not before: Fri 22 May 2026 06:00:16 +0000
ROA not after: Fri 21 May 2027 06:05:16 +0000
asID: 143862
IP address blocks: 240a:a4bc::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:d9:0f:9a:35:bc:00:a3:5e:2f:43:0a:18:6c:9c:b0:cd:a9:0c:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:16 2026 GMT
Not After : May 21 06:05:16 2027 GMT
Subject: CN=60265A9283F48B2DD75A2BFA8D310CC85BEB386E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d5:57:7d:96:15:0f:5d:4d:c5:bb:ef:e4:7c:
8b:1e:87:34:06:5e:6d:c9:97:39:51:84:ba:d1:46:
a5:d5:30:ff:65:e5:0d:ba:dd:b8:32:b4:e8:a4:04:
b2:6e:cb:e4:95:fa:02:db:db:f0:99:8b:e3:ba:2c:
0b:3c:7f:4e:47:89:c4:50:4c:da:fd:c8:79:28:c1:
92:9b:5f:21:b2:7c:13:d1:61:0d:85:24:07:8e:46:
ee:b1:84:91:a6:67:a7:bf:01:cc:a7:1e:d1:22:8d:
62:84:14:04:81:bb:0c:73:d4:b6:3c:f0:3a:e6:bd:
8d:00:42:7a:fc:a5:2b:61:33:7b:4c:51:97:e6:7d:
52:46:f9:60:50:5e:b2:3d:ff:1d:1e:e7:8c:12:3e:
b2:60:13:2e:c8:79:b9:ff:f9:b8:92:42:e2:52:42:
d6:10:d5:e4:3e:ef:15:a5:19:16:5b:54:18:99:b8:
c6:9b:5a:8b:5a:37:34:82:23:87:a7:c9:07:49:21:
1a:05:47:aa:92:5f:53:5f:e4:4b:26:41:ca:ee:1e:
48:d5:41:03:44:cd:b2:32:17:dc:e3:8d:aa:51:fe:
31:f9:d1:7d:6d:dd:79:71:ed:9b:96:e1:48:97:c8:
5a:9f:6d:4d:01:d9:0a:5e:52:4f:7e:e4:69:9d:90:
37:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:26:5A:92:83:F4:8B:2D:D7:5A:2B:FA:8D:31:0C:C8:5B:EB:38:6E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143862.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a4bc::/32
Signature Algorithm: sha256WithRSAEncryption
a3:19:c6:7c:0c:4c:a9:19:59:c7:1c:db:90:0c:a5:00:c9:cc:
11:c8:9d:7a:72:6d:0c:54:0f:7a:05:12:9f:70:84:06:fb:7b:
c2:94:77:34:ba:ad:17:9c:64:bb:ef:d1:24:5f:25:bf:e4:1f:
1f:c5:1d:65:b7:83:a6:c3:09:95:7b:c1:4e:19:c4:46:0e:d7:
46:f4:9f:ab:c3:d0:68:c4:81:d8:8c:89:d5:af:4f:81:36:44:
7e:5a:93:4e:a6:f6:4e:30:4b:83:bf:3c:02:c9:73:a4:b9:60:
0f:ee:e2:0c:0d:aa:a0:a3:4b:4e:7a:63:78:c2:6d:c5:09:63:
65:fe:fa:d6:fc:24:cb:03:fc:0b:57:46:4b:20:56:73:b0:bb:
8f:ec:c8:4a:e5:c4:2d:e0:ed:99:96:98:03:ea:d9:6a:c7:de:
31:56:70:cc:d5:63:b1:c9:d9:4c:98:82:1f:18:b0:a2:e6:a1:
de:f2:9b:82:6d:a8:32:09:f5:81:e5:b6:eb:05:92:f8:a8:fa:
01:7b:15:f1:d5:4b:91:87:19:2f:3f:76:39:f8:07:18:b8:13:
28:0f:b6:36:71:7e:4a:d6:e8:e5:d7:1b:c2:33:52:37:17:50:
ff:23:d0:12:73:17:fc:49:0e:1a:a3:76:fd:7c:ef:a6:a1:6d:
4f:eb:6c:c7
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUYNkPmjW8AKNeL0MKGGycsM2pDGUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjAwMTZaFw0yNzA1MjEwNjA1MTZaMDMxMTAvBgNV
BAMTKDYwMjY1QTkyODNGNDhCMkRENzVBMkJGQThEMzEwQ0M4NUJFQjM4NkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc1Vd9lhUPXU3Fu+/kfIsehzQG
Xm3JlzlRhLrRRqXVMP9l5Q263bgytOikBLJuy+SV+gLb2/CZi+O6LAs8f05HicRQ
TNr9yHkowZKbXyGyfBPRYQ2FJAeORu6xhJGmZ6e/AcynHtEijWKEFASBuwxz1LY8
8DrmvY0AQnr8pSthM3tMUZfmfVJG+WBQXrI9/x0e54wSPrJgEy7Iebn/+biSQuJS
QtYQ1eQ+7xWlGRZbVBiZuMabWotaNzSCI4enyQdJIRoFR6qSX1Nf5EsmQcruHkjV
QQNEzbIyF9zjjapR/jH50X1t3Xlx7ZuW4UiXyFqfbU0B2QpeUk9+5GmdkDc5AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUYCZakoP0iy3XWiv6jTEMyFvrOG4wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzODYyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqkvDANBgkqhkiG9w0BAQsFAAOCAQEAoxnG
fAxMqRlZxxzbkAylAMnMEcidenJtDFQPegUSn3CEBvt7wpR3NLqtF5xku+/RJF8l
v+QfH8UdZbeDpsMJlXvBThnERg7XRvSfq8PQaMSB2IyJ1a9PgTZEflqTTqb2TjBL
g788AslzpLlgD+7iDA2qoKNLTnpjeMJtxQljZf761vwkywP8C1dGSyBWc7C7j+zI
SuXELeDtmZaYA+rZasfeMVZwzNVjscnZTJiCHxiwouah3vKbgm2oMgn1geW26wWS
+Kj6AXsV8dVLkYcZLz92OfgHGLgTKA+2NnF+Stbo5dcbwjNSNxdQ/yPQEnMX/EkO
GqN2/XzvpqFtT+tsxw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:02 2026 by rpki-client