Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143896.roa
File: AS143896.roa (raw, json)
Hash identifier: qDuKHoTSzgCNPNKUJ8w8DwT/zx/14EhPYMFtDXbrjWY=
Subject key identifier: 73:A7:EB:72:17:6F:E6:A1:0D:03:FA:3F:B2:01:20:AD:D6:1C:AA:A0
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2FBC20FE1CBFD1BB02C30B2FECEE7C3988C5589B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143896.roa
Signing time: Fri 22 May 2026 02:47:51 +0000
ROA not before: Fri 22 May 2026 02:42:51 +0000
ROA not after: Fri 21 May 2027 02:47:51 +0000
asID: 143896
IP address blocks: 240a:a4de::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:bc:20:fe:1c:bf:d1:bb:02:c3:0b:2f:ec:ee:7c:39:88:c5:58:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:51 2026 GMT
Not After : May 21 02:47:51 2027 GMT
Subject: CN=73A7EB72176FE6A10D03FA3FB20120ADD61CAAA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:aa:b2:94:2b:38:19:4e:24:67:90:38:86:0c:
96:13:78:b1:98:05:51:e9:1d:0a:02:f9:97:40:76:
c8:98:d8:5c:aa:92:9b:61:85:a5:5f:49:7b:63:ea:
05:d9:fc:c7:99:80:b3:66:18:29:3c:68:f8:24:18:
2d:5b:a9:f7:4f:1e:b0:5e:0e:00:7d:fe:f2:34:6b:
f7:7c:47:3e:bc:e7:f5:10:7c:9e:40:c0:d7:1d:6a:
d8:90:47:4c:01:d7:54:44:ab:65:20:93:74:03:fb:
e9:ec:84:7e:4b:12:7d:4e:0a:b2:b3:6d:71:38:0d:
8e:af:a7:9e:ac:e3:21:cf:2c:10:c4:51:6a:4c:fc:
b8:1a:82:90:f8:01:f4:15:e8:bf:43:f0:bc:da:12:
13:1c:66:81:5a:64:a5:35:6a:70:29:8c:1e:7d:03:
37:e7:4c:ca:d4:ad:7f:e5:95:e6:dd:4c:f5:66:58:
73:64:ce:81:73:67:82:7b:26:2d:89:7e:a5:33:98:
3f:75:cd:b7:1b:31:73:05:f0:49:13:95:dd:a1:6b:
a9:85:7f:71:ea:13:0e:8c:a9:5b:7c:02:d2:18:7b:
6b:72:6a:0c:08:62:44:ec:50:8b:55:35:6d:9c:ba:
f7:4e:a6:df:7e:99:89:27:22:d7:5a:12:e4:29:37:
d7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A7:EB:72:17:6F:E6:A1:0D:03:FA:3F:B2:01:20:AD:D6:1C:AA:A0
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143896.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a4de::/32
Signature Algorithm: sha256WithRSAEncryption
2a:3b:c9:db:e5:ba:3c:75:60:fa:44:57:5e:e2:9a:16:bf:b2:
c7:a0:46:ff:bb:c8:55:ac:cd:69:b3:75:35:64:02:48:f4:05:
65:43:44:b3:13:be:ed:df:c3:42:76:ad:f0:f9:fc:6f:64:49:
f2:fe:76:86:97:47:fa:9d:5f:e7:39:74:ac:75:83:ca:35:02:
90:f2:c7:5f:e6:8c:32:db:91:45:05:7a:23:22:6e:f3:f7:de:
85:2a:f4:d9:11:7d:d5:79:84:99:28:03:63:e1:cf:d9:7f:b3:
f0:a9:db:1c:78:5a:92:27:61:be:95:66:a3:ad:43:c4:cf:4b:
eb:73:0f:77:d2:f7:43:fc:8b:4b:d5:2c:60:51:fe:ff:a0:00:
63:2b:09:a6:43:de:7d:8e:0b:3f:cb:03:12:56:78:58:cc:fd:
ae:3c:c2:a7:16:c3:92:53:26:81:33:b5:f6:26:9b:53:01:82:
1a:4b:e6:36:77:a3:fa:50:4f:28:c4:f1:91:73:0f:bd:53:ef:
3f:db:7b:6c:95:4b:7f:31:20:6b:45:16:ee:6e:d1:17:d7:98:
04:25:50:ba:cc:4d:e9:6a:98:e9:ca:d6:b7:a8:18:b0:c6:59:
8a:76:c8:70:b7:5d:67:31:4f:9e:9f:fa:c8:de:88:35:b8:23:
64:2f:85:d0
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUL7wg/hy/0bsCwwsv7O58OYjFWJswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwMjQyNTFaFw0yNzA1MjEwMjQ3NTFaMDMxMTAvBgNV
BAMTKDczQTdFQjcyMTc2RkU2QTEwRDAzRkEzRkIyMDEyMEFERDYxQ0FBQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpqrKUKzgZTiRnkDiGDJYTeLGY
BVHpHQoC+ZdAdsiY2FyqkpthhaVfSXtj6gXZ/MeZgLNmGCk8aPgkGC1bqfdPHrBe
DgB9/vI0a/d8Rz685/UQfJ5AwNcdatiQR0wB11REq2Ugk3QD++nshH5LEn1OCrKz
bXE4DY6vp56s4yHPLBDEUWpM/LgagpD4AfQV6L9D8LzaEhMcZoFaZKU1anApjB59
AzfnTMrUrX/llebdTPVmWHNkzoFzZ4J7Ji2JfqUzmD91zbcbMXMF8EkTld2ha6mF
f3HqEw6MqVt8AtIYe2tyagwIYkTsUItVNW2cuvdOpt9+mYknItdaEuQpN9ezAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUc6frchdv5qENA/o/sgEgrdYcqqAwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzODk2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqk3jANBgkqhkiG9w0BAQsFAAOCAQEAKjvJ
2+W6PHVg+kRXXuKaFr+yx6BG/7vIVazNabN1NWQCSPQFZUNEsxO+7d/DQnat8Pn8
b2RJ8v52hpdH+p1f5zl0rHWDyjUCkPLHX+aMMtuRRQV6IyJu8/fehSr02RF91XmE
mSgDY+HP2X+z8KnbHHhakidhvpVmo61DxM9L63MPd9L3Q/yLS9UsYFH+/6AAYysJ
pkPefY4LP8sDElZ4WMz9rjzCpxbDklMmgTO19iabUwGCGkvmNnej+lBPKMTxkXMP
vVPvP9t7bJVLfzEga0UW7m7RF9eYBCVQusxN6WqY6crWt6gYsMZZinbIcLddZzFP
np/6yN6INbgjZC+F0A==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:08 2026 by rpki-client