Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143866.roa
File: AS143866.roa (raw, json)
Hash identifier: BM/hhwwh/5qSLojfo/N53+VQ03jEAhHlZtltqY3937c=
Subject key identifier: 20:0F:A6:19:E2:73:DE:FE:47:2C:13:50:92:18:70:D2:1C:85:DD:2C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 08EB55C2B6C3A762B35183565A51E1B111177910
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143866.roa
Signing time: Tue 26 May 2026 06:12:50 +0000
ROA not before: Tue 26 May 2026 06:07:50 +0000
ROA not after: Tue 25 May 2027 06:12:50 +0000
asID: 143866
IP address blocks: 240a:a4c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:eb:55:c2:b6:c3:a7:62:b3:51:83:56:5a:51:e1:b1:11:17:79:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:07:50 2026 GMT
Not After : May 25 06:12:50 2027 GMT
Subject: CN=200FA619E273DEFE472C1350921870D21C85DD2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3f:62:82:f6:c0:76:e2:3c:3c:52:eb:e0:bd:
7f:ee:4c:86:ad:81:ce:ff:78:e5:96:20:3c:e1:1b:
d8:00:4c:39:51:56:de:c3:41:dd:6d:d3:f3:05:64:
df:c7:16:27:c0:20:7b:52:84:20:54:bf:64:8a:81:
38:94:15:31:b8:d0:2a:d1:ca:1c:44:a1:b7:bc:5c:
cd:4b:71:b3:d4:bd:bc:2b:82:a9:00:cf:8b:c2:6c:
0f:93:ce:90:06:4f:b7:c9:c4:b8:bb:9c:0f:b4:4b:
a1:90:35:c2:5f:00:db:5f:04:74:f2:fb:27:c9:db:
1d:df:f0:39:aa:85:6e:c8:a3:1e:96:46:8f:d0:51:
75:59:42:8e:35:a3:16:52:af:6e:e0:af:08:b9:3a:
42:7d:92:4e:ae:01:ec:47:24:21:32:b3:ae:14:c6:
56:85:26:50:7f:e6:9b:1a:6b:62:e2:e0:84:e0:da:
9b:78:aa:15:50:f2:88:69:f8:ad:a4:14:87:26:62:
e3:b8:61:c1:f6:a4:f8:aa:29:3c:a9:6b:2a:be:5e:
4f:e2:0d:95:ee:bd:39:d2:49:6d:83:b0:86:c5:68:
53:3f:6d:1e:f1:05:96:ec:0e:f2:68:65:f0:14:3e:
aa:b4:c8:85:22:27:4d:3e:a0:87:6a:e6:b2:66:8f:
d3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:0F:A6:19:E2:73:DE:FE:47:2C:13:50:92:18:70:D2:1C:85:DD:2C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143866.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a4c0::/32
Signature Algorithm: sha256WithRSAEncryption
69:b2:df:52:eb:84:e4:fd:02:1a:d4:e8:af:8a:20:d7:d1:c0:
fc:c6:c4:ac:4b:53:92:54:f1:71:de:cf:f6:9a:20:9a:65:c0:
0e:b7:a3:bf:00:8c:61:e4:3a:ca:ed:da:a2:70:3a:2c:af:e4:
0c:2a:06:52:08:c4:42:61:f4:79:79:08:0c:2c:85:c8:dd:e4:
d4:ca:36:d2:24:ef:bf:3a:7b:82:a4:0c:f8:d8:39:b8:f0:8a:
36:08:f6:1c:06:e5:ac:45:bf:7d:ec:63:e1:74:2a:94:af:9e:
38:d7:40:f6:b4:73:9d:eb:71:42:cc:85:70:89:70:45:70:1e:
b3:e4:77:77:1a:1b:60:dd:02:98:5c:15:d2:59:68:eb:05:d5:
cf:f8:7c:ad:11:5f:8d:6b:e4:b9:17:7a:00:19:66:d2:e7:ba:
f3:52:3a:89:c4:69:a4:32:c6:69:cd:78:03:af:1e:5d:9d:f3:
e5:94:d1:ab:58:42:c4:cd:3e:fc:eb:1f:df:16:59:1f:de:21:
e0:5f:0b:4e:a8:a1:14:65:4c:c1:f6:f3:e3:f0:17:f0:ff:40:
2c:11:75:c8:bc:7f:39:8b:e9:94:e8:2b:fc:4f:90:36:28:e5:
4c:2e:67:66:0f:68:e8:07:fe:84:ad:4a:9b:c4:aa:af:d4:18:
f5:cd:0a:0a
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUCOtVwrbDp2KzUYNWWlHhsREXeRAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwNjA3NTBaFw0yNzA1MjUwNjEyNTBaMDMxMTAvBgNV
BAMTKDIwMEZBNjE5RTI3M0RFRkU0NzJDMTM1MDkyMTg3MEQyMUM4NUREMkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJP2KC9sB24jw8UuvgvX/uTIat
gc7/eOWWIDzhG9gATDlRVt7DQd1t0/MFZN/HFifAIHtShCBUv2SKgTiUFTG40CrR
yhxEobe8XM1LcbPUvbwrgqkAz4vCbA+TzpAGT7fJxLi7nA+0S6GQNcJfANtfBHTy
+yfJ2x3f8DmqhW7Iox6WRo/QUXVZQo41oxZSr27grwi5OkJ9kk6uAexHJCEys64U
xlaFJlB/5psaa2Li4ITg2pt4qhVQ8ohp+K2kFIcmYuO4YcH2pPiqKTypayq+Xk/i
DZXuvTnSSW2DsIbFaFM/bR7xBZbsDvJoZfAUPqq0yIUiJ00+oIdq5rJmj9NVAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUIA+mGeJz3v5HLBNQkhhw0hyF3SwwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzODY2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqkwDANBgkqhkiG9w0BAQsFAAOCAQEAabLf
UuuE5P0CGtTor4og19HA/MbErEtTklTxcd7P9pogmmXADrejvwCMYeQ6yu3aonA6
LK/kDCoGUgjEQmH0eXkIDCyFyN3k1Mo20iTvvzp7gqQM+Ng5uPCKNgj2HAblrEW/
fexj4XQqlK+eONdA9rRznetxQsyFcIlwRXAes+R3dxobYN0CmFwV0llo6wXVz/h8
rRFfjWvkuRd6ABlm0ue681I6icRppDLGac14A68eXZ3z5ZTRq1hCxM0+/Osf3xZZ
H94h4F8LTqihFGVMwfbz4/AX8P9ALBF1yLx/OYvplOgr/E+QNijlTC5nZg9o6Af+
hK1Km8Sqr9QY9c0KCg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:07 2026 by rpki-client