Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143886.roa
File: AS143886.roa (raw, json)
Hash identifier: hUXz59oRTCPnDbv8EiCdZRbNYkR88moXIArrjp8LgzE=
Subject key identifier: 2A:1D:51:32:57:2B:C4:DD:6E:4C:80:BC:D4:BA:DF:DE:97:BD:A3:2A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 29ADA0A8FE20484834FE6AA0BBE4827DD2FCB70D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143886.roa
Signing time: Fri 22 May 2026 01:50:10 +0000
ROA not before: Fri 22 May 2026 01:45:10 +0000
ROA not after: Fri 21 May 2027 01:50:10 +0000
asID: 143886
IP address blocks: 240a:a4d4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:ad:a0:a8:fe:20:48:48:34:fe:6a:a0:bb:e4:82:7d:d2:fc:b7:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:10 2026 GMT
Not After : May 21 01:50:10 2027 GMT
Subject: CN=2A1D5132572BC4DD6E4C80BCD4BADFDE97BDA32A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:49:14:55:6d:78:bf:6d:72:4c:57:75:f9:20:
f9:54:e1:83:62:c8:77:ad:f5:8f:8a:79:a0:f2:5b:
dd:af:32:1e:34:fd:85:a1:e4:47:a6:a4:65:c1:86:
58:df:28:3c:51:7e:7e:81:81:f7:15:e2:bc:37:92:
e6:65:0e:d5:a2:78:17:5c:41:db:51:4e:5a:3f:88:
c1:b9:6c:16:f3:1e:b3:46:93:70:37:d3:0f:d3:d8:
6f:3f:6d:52:a1:9e:fe:1d:f3:e5:13:e7:32:fd:12:
73:ae:af:8f:2b:b5:b1:ea:31:b3:88:ff:f9:59:d3:
86:27:44:76:cf:d0:9f:e6:f5:e5:d5:6f:3b:8c:b7:
14:05:c7:f4:94:7d:78:af:4d:e3:95:77:67:45:42:
9b:d8:cb:dc:21:95:d1:90:22:03:54:b7:88:7a:a6:
8e:01:a4:86:54:41:d6:56:9a:d9:77:71:02:91:a5:
7d:12:31:8a:71:e6:97:0e:2f:24:27:36:32:c4:52:
38:f1:67:65:c3:36:c2:81:a1:0b:fd:40:cb:a2:0f:
dc:7c:28:50:18:b2:00:8f:c9:89:48:16:50:de:6f:
8d:cb:6d:d1:b3:55:d9:83:52:11:29:bc:a8:9b:fc:
70:bd:a0:70:bb:13:23:8b:58:e1:06:33:dd:97:9a:
09:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:1D:51:32:57:2B:C4:DD:6E:4C:80:BC:D4:BA:DF:DE:97:BD:A3:2A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143886.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a4d4::/32
Signature Algorithm: sha256WithRSAEncryption
56:51:17:4e:1c:9e:d6:e0:36:3d:19:8b:77:45:1e:90:99:6d:
42:67:5d:be:70:4a:25:18:80:85:54:f2:e8:98:02:d7:aa:51:
f7:50:47:79:7b:4e:61:af:08:06:8c:50:1c:02:3c:0a:c2:1d:
e2:80:05:87:5d:2e:7b:5e:87:89:7b:ba:af:c1:d7:18:bd:68:
df:cb:ab:4e:5a:35:b7:f2:1c:3e:78:84:80:9b:40:40:d9:9b:
3d:c4:e0:86:f2:e1:91:13:bc:f3:5b:7d:cf:bb:b6:e6:b7:71:
16:ec:44:f1:47:1b:f8:ee:59:40:d4:66:1e:99:01:46:14:a4:
80:fa:e8:57:66:7f:20:6b:e3:d0:4e:b0:52:b1:da:f8:a6:35:
8a:91:34:b7:a8:42:59:17:7b:d6:aa:92:0d:4f:32:05:79:a4:
b5:6a:77:6b:ba:5e:ee:2b:39:11:57:0a:9e:e3:a6:dc:75:64:
37:3f:5b:02:2f:0b:1f:e8:c2:e3:66:0d:9a:86:54:a8:f6:64:
69:96:48:94:77:d1:f3:0a:f3:1b:87:95:92:05:f1:34:bf:9b:
bc:78:77:51:63:59:92:8b:63:7a:22:3b:f5:1e:58:5e:29:09:
a8:a1:e8:bd:92:06:41:e9:d9:d9:6a:31:e8:a1:15:a6:9b:d7:
31:00:9f:0f
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUKa2gqP4gSEg0/mqgu+SCfdL8tw0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwMTQ1MTBaFw0yNzA1MjEwMTUwMTBaMDMxMTAvBgNV
BAMTKDJBMUQ1MTMyNTcyQkM0REQ2RTRDODBCQ0Q0QkFERkRFOTdCREEzMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1SRRVbXi/bXJMV3X5IPlU4YNi
yHet9Y+KeaDyW92vMh40/YWh5EempGXBhljfKDxRfn6BgfcV4rw3kuZlDtWieBdc
QdtRTlo/iMG5bBbzHrNGk3A30w/T2G8/bVKhnv4d8+UT5zL9EnOur48rtbHqMbOI
//lZ04YnRHbP0J/m9eXVbzuMtxQFx/SUfXivTeOVd2dFQpvYy9whldGQIgNUt4h6
po4BpIZUQdZWmtl3cQKRpX0SMYpx5pcOLyQnNjLEUjjxZ2XDNsKBoQv9QMuiD9x8
KFAYsgCPyYlIFlDeb43LbdGzVdmDUhEpvKib/HC9oHC7EyOLWOEGM92XmgnhAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUKh1RMlcrxN1uTIC81Lrf3pe9oyowHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzODg2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqk1DANBgkqhkiG9w0BAQsFAAOCAQEAVlEX
Thye1uA2PRmLd0UekJltQmddvnBKJRiAhVTy6JgC16pR91BHeXtOYa8IBoxQHAI8
CsId4oAFh10ue16HiXu6r8HXGL1o38urTlo1t/IcPniEgJtAQNmbPcTghvLhkRO8
81t9z7u25rdxFuxE8Ucb+O5ZQNRmHpkBRhSkgProV2Z/IGvj0E6wUrHa+KY1ipE0
t6hCWRd71qqSDU8yBXmktWp3a7pe7is5EVcKnuOm3HVkNz9bAi8LH+jC42YNmoZU
qPZkaZZIlHfR8wrzG4eVkgXxNL+bvHh3UWNZkotjeiI79R5YXikJqKHovZIGQenZ
2Wox6KEVppvXMQCfDw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:11 2026 by rpki-client