Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143897.roa
File: AS143897.roa (raw, json)
Hash identifier: ELkb9gonrpwNiIbMCxijp8bAX4kqrg2WQKd4qk1RCco=
Subject key identifier: 4E:04:53:33:1E:A5:E7:FB:22:19:7A:6E:14:5E:4E:CF:54:B9:98:4A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 174661B23413B986154D5BB4A8D0D2253B8224B5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143897.roa
Signing time: Tue 26 May 2026 01:13:15 +0000
ROA not before: Tue 26 May 2026 01:08:15 +0000
ROA not after: Tue 25 May 2027 01:13:15 +0000
asID: 143897
IP address blocks: 240a:a4df::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:46:61:b2:34:13:b9:86:15:4d:5b:b4:a8:d0:d2:25:3b:82:24:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:15 2026 GMT
Not After : May 25 01:13:15 2027 GMT
Subject: CN=4E0453331EA5E7FB22197A6E145E4ECF54B9984A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f1:bd:ff:62:c8:eb:6e:0e:ab:4a:b8:d1:02:
87:6b:81:ce:ae:48:df:62:2a:90:d9:fe:7d:56:0c:
dd:7a:39:63:42:66:62:a4:c2:fc:84:b4:ab:48:09:
1d:27:74:77:83:40:b5:30:86:d8:a5:f8:e6:da:dd:
35:a8:19:ff:1a:d5:7a:c5:31:ed:a2:96:43:fe:82:
f0:03:a7:6f:3d:85:52:60:de:97:17:3f:b1:27:a0:
ce:29:8a:5f:7f:c1:ae:43:c1:93:1f:59:c4:d8:82:
af:dd:f9:f9:58:47:7d:0d:d2:28:6c:d0:53:54:70:
50:1c:0b:e6:db:fc:84:48:af:8b:2e:4e:d4:41:a1:
ed:a2:ac:4c:cd:56:d6:62:7d:a5:be:c4:ad:4c:eb:
2e:fb:a9:f6:f4:9e:cb:ab:66:13:c7:33:9a:77:b8:
d7:6e:82:b4:69:36:9a:a4:3c:9b:72:d4:99:f9:2b:
af:17:47:c3:0f:7e:91:75:55:de:77:53:f2:3f:d3:
2b:54:66:b2:3b:f9:48:b8:29:9c:2a:5e:2b:26:06:
48:19:15:61:3e:0f:ff:7b:0c:67:5e:8a:48:e9:a6:
3a:c9:0f:90:29:3a:36:13:92:c5:ac:5a:76:62:ae:
5f:98:c8:66:45:3c:52:d0:cb:b4:3c:d9:53:bf:b4:
0b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:04:53:33:1E:A5:E7:FB:22:19:7A:6E:14:5E:4E:CF:54:B9:98:4A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143897.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a4df::/32
Signature Algorithm: sha256WithRSAEncryption
31:16:93:f7:f6:3b:50:20:30:08:13:03:2f:02:10:cf:60:99:
63:c4:5f:91:c5:d1:81:b7:3a:6f:dc:ac:29:e7:61:03:98:dc:
7b:2b:82:ac:03:ab:80:dc:aa:2b:09:60:49:82:63:12:f2:21:
fb:86:f2:5d:e2:11:94:7e:ef:2e:d5:fb:94:1b:32:f4:27:17:
f9:a2:aa:94:55:49:22:50:99:09:ec:d8:2b:7a:ef:80:fa:7f:
b3:89:e6:a6:1a:0c:63:41:65:9c:be:2e:58:e3:b9:8e:7b:5c:
e6:fa:12:3a:92:5a:8e:ee:8e:b9:6d:16:1d:a1:eb:84:a8:d2:
ec:4e:1b:68:0d:c6:13:59:b8:a6:aa:a2:79:50:b6:46:82:8d:
ba:25:d3:d3:a8:f0:fd:fe:68:e7:50:13:c3:f2:de:2c:da:60:
78:0c:d2:cf:76:14:e0:5a:88:7a:97:96:22:fb:c7:d0:3f:e3:
60:6e:f3:75:ea:5a:f4:10:e6:1a:f6:30:d6:d3:14:d7:bc:c9:
d0:6c:18:f0:f3:c6:74:ae:5c:70:bd:3f:d8:21:a1:09:75:ac:
ee:56:e9:bd:44:a5:72:11:57:69:04:65:c6:3c:51:0a:9e:0b:
79:5c:77:cd:b4:84:a5:e4:02:b5:53:df:4c:35:29:bb:73:f7:
9d:34:ce:5b
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUF0ZhsjQTuYYVTVu0qNDSJTuCJLUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMTA4MTVaFw0yNzA1MjUwMTEzMTVaMDMxMTAvBgNV
BAMTKDRFMDQ1MzMzMUVBNUU3RkIyMjE5N0E2RTE0NUU0RUNGNTRCOTk4NEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQ8b3/Ysjrbg6rSrjRAodrgc6u
SN9iKpDZ/n1WDN16OWNCZmKkwvyEtKtICR0ndHeDQLUwhtil+Oba3TWoGf8a1XrF
Me2ilkP+gvADp289hVJg3pcXP7EnoM4pil9/wa5DwZMfWcTYgq/d+flYR30N0ihs
0FNUcFAcC+bb/IRIr4suTtRBoe2irEzNVtZifaW+xK1M6y77qfb0nsurZhPHM5p3
uNdugrRpNpqkPJty1Jn5K68XR8MPfpF1Vd53U/I/0ytUZrI7+Ui4KZwqXismBkgZ
FWE+D/97DGdeikjppjrJD5ApOjYTksWsWnZirl+YyGZFPFLQy7Q82VO/tAvTAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUTgRTMx6l5/siGXpuFF5Oz1S5mEowHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzODk3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqk3zANBgkqhkiG9w0BAQsFAAOCAQEAMRaT
9/Y7UCAwCBMDLwIQz2CZY8RfkcXRgbc6b9ysKedhA5jceyuCrAOrgNyqKwlgSYJj
EvIh+4byXeIRlH7vLtX7lBsy9CcX+aKqlFVJIlCZCezYK3rvgPp/s4nmphoMY0Fl
nL4uWOO5jntc5voSOpJaju6OuW0WHaHrhKjS7E4baA3GE1m4pqqieVC2RoKNuiXT
06jw/f5o51ATw/LeLNpgeAzSz3YU4FqIepeWIvvH0D/jYG7zdepa9BDmGvYw1tMU
17zJ0GwY8PPGdK5ccL0/2CGhCXWs7lbpvUSlchFXaQRlxjxRCp4LeVx3zbSEpeQC
tVPfTDUpu3P3nTTOWw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:27 2026 by rpki-client