Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143868.roa
File: AS143868.roa (raw, json)
Hash identifier: 0iYPsnuKmVbGgDw3UkWKVgKgVdlojLWOZ2TTIU75uNU=
Subject key identifier: 5C:AD:BA:06:B2:58:03:9C:94:DA:FA:31:84:ED:AB:32:3C:7C:A0:C0
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 341B63C1AB293B076C4DB6AB583DABFE34FB9C32
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143868.roa
Signing time: Fri 22 May 2026 06:28:05 +0000
ROA not before: Fri 22 May 2026 06:23:05 +0000
ROA not after: Fri 21 May 2027 06:28:05 +0000
asID: 143868
IP address blocks: 240a:a4c2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:1b:63:c1:ab:29:3b:07:6c:4d:b6:ab:58:3d:ab:fe:34:fb:9c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:23:05 2026 GMT
Not After : May 21 06:28:05 2027 GMT
Subject: CN=5CADBA06B258039C94DAFA3184EDAB323C7CA0C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:aa:73:3d:aa:b2:4b:db:bb:78:18:7b:03:de:
6b:3b:b5:3d:71:50:3d:16:ef:13:83:8a:14:ef:3e:
a0:20:3e:3c:bc:2f:f8:08:b5:0b:15:69:65:9e:f0:
4a:89:0d:28:d1:ed:41:1a:d5:b7:d7:8a:2f:ed:73:
3a:57:98:b6:97:71:15:d6:ca:1e:7d:01:6d:11:d5:
ab:78:8b:76:72:45:5f:c8:29:96:c6:36:87:82:96:
4f:34:cb:ec:98:93:8f:0f:33:ab:fd:b1:22:17:b0:
cb:5e:61:36:19:f1:5f:29:33:d9:d9:36:d7:df:80:
1c:af:70:77:31:62:81:2a:50:7b:d5:e1:75:1e:de:
37:2b:95:81:f8:ed:e0:8e:3a:cd:b1:b7:59:6b:af:
c6:19:7e:8b:e9:12:33:a1:45:81:19:79:32:76:cc:
cd:26:9d:9b:3d:a3:3b:76:19:38:64:c2:09:36:45:
48:a7:33:bf:04:93:3a:77:8b:69:0c:a6:06:7b:e7:
7d:e6:d6:b9:84:82:8a:62:6e:82:d2:f6:82:1b:a3:
73:66:45:c7:39:8f:07:39:6f:6d:0c:93:35:57:29:
6a:cb:df:00:7a:4d:ca:2f:d5:8c:98:2c:9f:67:8c:
6b:38:09:c1:41:8a:ed:7d:17:0b:33:16:e8:60:c7:
d4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:AD:BA:06:B2:58:03:9C:94:DA:FA:31:84:ED:AB:32:3C:7C:A0:C0
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143868.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a4c2::/32
Signature Algorithm: sha256WithRSAEncryption
11:8c:e1:69:9b:8f:37:76:22:63:53:f0:1d:60:b4:3b:97:54:
21:0e:f8:aa:f8:4e:a6:40:4c:ed:ec:c3:3a:f6:68:c1:98:07:
ce:22:39:2b:eb:18:8b:8f:7e:50:c0:21:3d:77:b5:55:a4:69:
3c:3a:01:93:85:8e:5d:05:5c:cc:2b:ec:97:18:b9:93:7d:3e:
ca:d3:28:86:20:94:dd:62:77:e8:21:49:c1:2b:a1:54:0c:9a:
d4:04:2e:c0:76:25:48:d0:10:ee:17:16:c1:c1:28:a1:0d:a3:
91:fd:2d:68:18:c7:91:98:f3:06:fc:20:f0:ce:75:43:5c:86:
b9:a3:7f:35:d6:75:66:50:ee:5d:d9:76:7e:36:a8:ee:33:be:
f9:4d:c8:87:06:98:d9:ff:a5:f0:57:f7:db:a2:1f:66:2d:53:
48:cd:21:a7:9b:42:53:a5:92:ca:0b:a7:2f:01:0e:54:fd:f1:
7c:c4:b0:e2:1c:4e:db:bc:fd:ff:7c:42:80:6e:a1:c8:c3:ec:
7f:09:28:cb:41:9c:bf:58:51:87:8a:a2:9e:b3:f8:f4:a0:88:
79:d5:68:3b:92:06:5e:0f:50:ef:e0:78:51:c8:9e:70:c3:55:
79:3e:04:38:5a:e8:1c:8c:76:3d:80:0b:4e:be:99:c7:4d:ed:
7f:72:84:4c
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUNBtjwaspOwdsTbarWD2r/jT7nDIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjIzMDVaFw0yNzA1MjEwNjI4MDVaMDMxMTAvBgNV
BAMTKDVDQURCQTA2QjI1ODAzOUM5NERBRkEzMTg0RURBQjMyM0M3Q0EwQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCqnM9qrJL27t4GHsD3ms7tT1x
UD0W7xODihTvPqAgPjy8L/gItQsVaWWe8EqJDSjR7UEa1bfXii/tczpXmLaXcRXW
yh59AW0R1at4i3ZyRV/IKZbGNoeClk80y+yYk48PM6v9sSIXsMteYTYZ8V8pM9nZ
NtffgByvcHcxYoEqUHvV4XUe3jcrlYH47eCOOs2xt1lrr8YZfovpEjOhRYEZeTJ2
zM0mnZs9ozt2GThkwgk2RUinM78Ekzp3i2kMpgZ7533m1rmEgopiboLS9oIbo3Nm
Rcc5jwc5b20MkzVXKWrL3wB6Tcov1YyYLJ9njGs4CcFBiu19FwszFuhgx9TXAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUXK26BrJYA5yU2voxhO2rMjx8oMAwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzODY4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqkwjANBgkqhkiG9w0BAQsFAAOCAQEAEYzh
aZuPN3YiY1PwHWC0O5dUIQ74qvhOpkBM7ezDOvZowZgHziI5K+sYi49+UMAhPXe1
VaRpPDoBk4WOXQVczCvslxi5k30+ytMohiCU3WJ36CFJwSuhVAya1AQuwHYlSNAQ
7hcWwcEooQ2jkf0taBjHkZjzBvwg8M51Q1yGuaN/NdZ1ZlDuXdl2fjao7jO++U3I
hwaY2f+l8Ff326IfZi1TSM0hp5tCU6WSygunLwEOVP3xfMSw4hxO27z9/3xCgG6h
yMPsfwkoy0Gcv1hRh4qinrP49KCIedVoO5IGXg9Q7+B4UciecMNVeT4EOFroHIx2
PYALTr6Zx03tf3KETA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:15 2026 by rpki-client