Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143903.roa
File: AS143903.roa (raw, json)
Hash identifier: US6GXffV0NKUoolP6/ty+RwMTbgOq8QE2g9tFK6wtio=
Subject key identifier: 25:DF:E3:45:87:01:EF:73:D5:20:24:03:01:10:04:58:08:9C:86:9C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5648C73E18605E0FF8779857E9301A0ECD1E4044
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143903.roa
Signing time: Mon 25 May 2026 01:20:20 +0000
ROA not before: Mon 25 May 2026 01:15:20 +0000
ROA not after: Mon 24 May 2027 01:20:20 +0000
asID: 143903
IP address blocks: 240a:a4e5::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:48:c7:3e:18:60:5e:0f:f8:77:98:57:e9:30:1a:0e:cd:1e:40:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:20 2026 GMT
Not After : May 24 01:20:20 2027 GMT
Subject: CN=25DFE3458701EF73D520240301100458089C869C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7c:c3:a0:6f:3c:02:32:d6:7a:3a:9b:39:c1:
f5:9b:bc:0b:4f:48:59:bb:11:cb:0c:c9:d9:21:c7:
ef:22:fc:ca:df:ec:0f:b1:d0:ed:97:65:6a:f4:62:
25:e9:de:28:39:10:7e:e7:82:30:07:0c:55:da:b1:
6c:05:1a:87:23:f3:a7:64:2c:eb:03:a2:31:77:1e:
4b:2d:05:bd:ff:c6:5f:9f:f2:5a:99:b8:8d:b3:a2:
5a:ac:f0:5a:75:af:87:3e:16:da:b3:f4:82:da:6f:
d2:72:27:06:b3:8e:da:c8:4e:99:2f:23:d0:37:5e:
fe:6a:96:71:58:cd:b9:59:14:be:37:a8:d8:f3:32:
13:21:ee:cb:b2:5b:79:79:ce:95:b9:23:05:51:8c:
77:7c:17:9f:b7:21:90:dd:2c:0e:55:e6:ca:da:14:
80:e6:40:65:72:bb:51:e7:6d:38:d1:57:66:53:2d:
24:81:0d:10:cd:d0:14:4e:e4:91:87:6d:10:de:74:
e0:f7:7e:45:48:c6:8a:ef:25:53:b8:c3:fa:06:73:
c2:53:9c:fd:9e:cb:eb:60:ee:66:41:e8:d6:8d:33:
73:0d:00:53:68:49:e1:62:b1:ce:19:53:d9:5f:38:
ad:85:14:6e:c1:bf:7e:a2:76:4d:22:71:64:7f:fd:
4b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:DF:E3:45:87:01:EF:73:D5:20:24:03:01:10:04:58:08:9C:86:9C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143903.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a4e5::/32
Signature Algorithm: sha256WithRSAEncryption
2b:39:05:ed:31:ad:4f:21:91:2c:7c:8d:9b:37:35:64:51:ba:
95:b4:28:29:9d:fa:2b:0b:0b:47:31:26:89:de:2b:93:a7:1c:
ab:d4:9b:96:ba:71:ba:6d:12:bb:03:a1:a6:5b:a6:53:69:e2:
8a:c3:d0:39:15:92:0b:36:0a:a5:40:b1:3b:6f:5b:20:9f:36:
1f:e6:bb:a1:43:5e:72:1f:b4:96:28:7e:ef:6c:0b:03:ef:d0:
cf:83:58:42:c1:52:96:6f:8a:78:fb:7f:da:ab:55:d8:21:98:
1d:32:20:8b:09:6a:ac:8f:6c:47:a7:d7:a3:f7:21:70:7b:66:
bc:31:58:71:05:12:70:d0:e7:4e:d1:e1:e1:d4:d5:13:0a:a7:
20:44:36:b5:2a:db:5b:57:80:49:5c:ee:7e:1a:be:2d:e9:4a:
5e:81:1f:07:f5:fe:d6:59:b1:6d:44:25:1c:8a:18:75:fa:1f:
be:89:64:6e:bb:60:9d:40:f7:55:f0:fd:9c:27:8a:de:be:2c:
fa:31:a0:48:6f:01:1e:b9:56:8c:91:8c:c9:7e:d8:7a:89:d7:
56:71:90:4f:6b:34:3c:9d:5a:a0:dd:ae:ce:03:b5:1d:9c:ce:
10:fc:9f:48:b1:40:b3:77:09:c5:45:44:ff:47:14:fa:59:78:
c7:d6:a1:19
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUVkjHPhhgXg/4d5hX6TAaDs0eQEQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTE1MjBaFw0yNzA1MjQwMTIwMjBaMDMxMTAvBgNV
BAMTKDI1REZFMzQ1ODcwMUVGNzNENTIwMjQwMzAxMTAwNDU4MDg5Qzg2OUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1fMOgbzwCMtZ6Ops5wfWbvAtP
SFm7EcsMydkhx+8i/Mrf7A+x0O2XZWr0YiXp3ig5EH7ngjAHDFXasWwFGocj86dk
LOsDojF3HkstBb3/xl+f8lqZuI2zolqs8Fp1r4c+Ftqz9ILab9JyJwazjtrITpkv
I9A3Xv5qlnFYzblZFL43qNjzMhMh7suyW3l5zpW5IwVRjHd8F5+3IZDdLA5V5sra
FIDmQGVyu1HnbTjRV2ZTLSSBDRDN0BRO5JGHbRDedOD3fkVIxorvJVO4w/oGc8JT
nP2ey+tg7mZB6NaNM3MNAFNoSeFisc4ZU9lfOK2FFG7Bv36idk0icWR//UsvAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUJd/jRYcB73PVICQDARAEWAichpwwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzOTAzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqk5TANBgkqhkiG9w0BAQsFAAOCAQEAKzkF
7TGtTyGRLHyNmzc1ZFG6lbQoKZ36KwsLRzEmid4rk6ccq9Sblrpxum0SuwOhplum
U2niisPQORWSCzYKpUCxO29bIJ82H+a7oUNech+0lih+72wLA+/Qz4NYQsFSlm+K
ePt/2qtV2CGYHTIgiwlqrI9sR6fXo/chcHtmvDFYcQUScNDnTtHh4dTVEwqnIEQ2
tSrbW1eASVzufhq+LelKXoEfB/X+1lmxbUQlHIoYdfofvolkbrtgnUD3VfD9nCeK
3r4s+jGgSG8BHrlWjJGMyX7YeonXVnGQT2s0PJ1aoN2uzgO1HZzOEPyfSLFAs3cJ
xUVE/0cU+ll4x9ahGQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:07 2026 by rpki-client