Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143906.roa
File: AS143906.roa (raw, json)
Hash identifier: ywA9sjxtnb1G5Ja+SL1XuC5ljQ0xGPPR3NWrjCnfnMo=
Subject key identifier: 56:2B:38:FE:2C:F9:E2:1F:4C:19:FF:9F:C3:B4:DA:13:5F:25:61:68
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6699369FD283A13B9BAA9394F62B8B3B6DDCCEF8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143906.roa
Signing time: Fri 22 May 2026 06:58:47 +0000
ROA not before: Fri 22 May 2026 06:53:47 +0000
ROA not after: Fri 21 May 2027 06:58:47 +0000
asID: 143906
IP address blocks: 240a:a4e8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:99:36:9f:d2:83:a1:3b:9b:aa:93:94:f6:2b:8b:3b:6d:dc:ce:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:47 2026 GMT
Not After : May 21 06:58:47 2027 GMT
Subject: CN=562B38FE2CF9E21F4C19FF9FC3B4DA135F256168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1c:40:61:a1:ac:ac:d0:c2:24:bf:bd:ef:ec:
5f:a2:17:5d:ad:e4:f0:fa:aa:3d:8b:43:0a:c5:33:
4a:a9:6c:35:7f:41:eb:aa:5f:dc:e4:37:76:6d:d0:
f5:8e:f5:13:a2:52:db:86:7e:8b:c4:39:84:55:9b:
36:da:7e:d7:a9:90:65:98:88:cf:fd:27:40:ff:07:
1c:3c:2e:b5:9a:44:ee:21:61:e9:a9:95:34:09:50:
22:5d:b8:20:a6:25:a0:4d:35:c4:c7:ef:6b:e4:65:
9e:27:91:11:ae:3e:69:05:95:94:85:ab:59:73:8a:
e1:e8:b0:e2:ba:d6:1b:ab:d1:aa:7c:8b:84:3b:57:
1d:67:c7:e0:5a:cd:55:9f:26:ba:b7:8e:b5:7c:0c:
b9:fe:1b:66:ab:d6:26:08:ac:3c:83:91:c4:8f:03:
1d:f1:4a:88:cf:7b:a6:12:e2:60:33:c5:ff:86:a2:
e7:4f:c6:9e:f1:37:be:2c:05:24:b5:52:e5:69:10:
56:e0:8c:19:73:c6:43:87:9a:e8:35:d2:19:02:ed:
8f:63:bb:e6:6d:0d:c5:0e:0d:ee:d6:0c:77:6b:27:
6f:f5:3b:22:f4:34:63:7b:fe:98:d3:2a:c1:3b:09:
92:a0:27:a3:18:25:1d:83:a5:ca:71:14:f7:1f:e0:
05:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:2B:38:FE:2C:F9:E2:1F:4C:19:FF:9F:C3:B4:DA:13:5F:25:61:68
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143906.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a4e8::/32
Signature Algorithm: sha256WithRSAEncryption
b1:ce:9d:57:be:99:32:a3:3d:37:5a:d7:a0:39:0d:fb:b5:7f:
cc:3f:ec:86:b9:87:cf:4f:f5:aa:c4:3e:13:5d:cb:c7:2c:41:
bf:22:1d:e6:ef:c8:1d:6f:3b:39:91:ec:3e:5c:78:cd:c3:24:
96:20:74:19:46:f5:3d:96:83:e0:c7:04:2f:4d:b8:f8:17:60:
67:83:09:1f:46:e5:bf:b8:16:6d:91:57:86:16:89:41:cd:68:
4d:c2:41:d5:23:98:3e:cd:a7:96:c8:b6:bd:92:64:59:e8:d9:
57:91:f5:9b:ac:4e:96:19:90:6a:da:98:9a:36:58:08:14:72:
e5:b7:a9:2b:ab:15:2f:cf:5d:8d:b1:ea:36:3a:1d:45:98:da:
61:e1:48:0c:1e:a2:79:45:5b:de:83:96:b3:91:fe:80:ee:4f:
ca:15:16:40:a4:67:b4:de:45:b6:0c:e3:b7:44:09:0d:b2:cc:
8d:fc:64:fb:4b:8c:a6:2f:a1:00:19:97:06:45:cc:fb:ce:54:
4a:e8:61:d6:22:02:5b:36:41:b4:42:9e:e4:c4:73:fc:9f:45:
e4:27:31:38:df:bd:c3:72:99:d0:2b:ee:6f:f9:d2:98:3e:80:
52:a5:db:6d:82:2b:8b:9a:a3:b5:dd:ce:c3:ee:25:f2:6c:e1:
a8:bd:8f:f2
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUZpk2n9KDoTubqpOU9iuLO23czvgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjUzNDdaFw0yNzA1MjEwNjU4NDdaMDMxMTAvBgNV
BAMTKDU2MkIzOEZFMkNGOUUyMUY0QzE5RkY5RkMzQjREQTEzNUYyNTYxNjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3HEBhoays0MIkv73v7F+iF12t
5PD6qj2LQwrFM0qpbDV/QeuqX9zkN3Zt0PWO9ROiUtuGfovEOYRVmzbaftepkGWY
iM/9J0D/Bxw8LrWaRO4hYemplTQJUCJduCCmJaBNNcTH72vkZZ4nkRGuPmkFlZSF
q1lziuHosOK61hur0ap8i4Q7Vx1nx+BazVWfJrq3jrV8DLn+G2ar1iYIrDyDkcSP
Ax3xSojPe6YS4mAzxf+GoudPxp7xN74sBSS1UuVpEFbgjBlzxkOHmug10hkC7Y9j
u+ZtDcUODe7WDHdrJ2/1OyL0NGN7/pjTKsE7CZKgJ6MYJR2DpcpxFPcf4AWPAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUVis4/iz54h9MGf+fw7TaE18lYWgwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzOTA2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqk6DANBgkqhkiG9w0BAQsFAAOCAQEAsc6d
V76ZMqM9N1rXoDkN+7V/zD/shrmHz0/1qsQ+E13LxyxBvyId5u/IHW87OZHsPlx4
zcMkliB0GUb1PZaD4McEL024+BdgZ4MJH0blv7gWbZFXhhaJQc1oTcJB1SOYPs2n
lsi2vZJkWejZV5H1m6xOlhmQatqYmjZYCBRy5bepK6sVL89djbHqNjodRZjaYeFI
DB6ieUVb3oOWs5H+gO5PyhUWQKRntN5Ftgzjt0QJDbLMjfxk+0uMpi+hABmXBkXM
+85USuhh1iICWzZBtEKe5MRz/J9F5CcxON+9w3KZ0Cvub/nSmD6AUqXbbYIri5qj
td3Ow+4l8mzhqL2P8g==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:58 2026 by rpki-client