Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143909.roa
File: AS143909.roa (raw, json)
Hash identifier: phQHnChcIzQbQeZhXC9DIryIzohu165DabkWkfw0wPc=
Subject key identifier: 41:22:EB:58:A7:A8:02:D4:5F:F2:0C:CC:ED:44:82:A0:61:18:A1:8E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 29640A00165E11BA6F3F0813C61C0FA814EF142E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143909.roa
Signing time: Tue 26 May 2026 03:17:20 +0000
ROA not before: Tue 26 May 2026 03:12:20 +0000
ROA not after: Tue 25 May 2027 03:17:20 +0000
asID: 143909
IP address blocks: 240a:a4eb::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:64:0a:00:16:5e:11:ba:6f:3f:08:13:c6:1c:0f:a8:14:ef:14:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:12:20 2026 GMT
Not After : May 25 03:17:20 2027 GMT
Subject: CN=4122EB58A7A802D45FF20CCCED4482A06118A18E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:69:2b:0d:c1:b8:4e:28:a7:41:8d:5f:88:a5:
e5:38:d0:5c:bc:0f:73:8c:1b:3f:5c:53:2d:41:a2:
9c:a1:ae:b8:39:2f:95:ad:bd:91:2d:f7:da:8e:00:
3c:9f:09:f9:b3:55:ff:42:ff:a1:7c:96:1c:2f:48:
ef:3a:a0:63:bc:1e:d4:e5:82:20:59:19:ae:f4:a1:
b4:7a:7e:33:2b:03:a3:ab:07:ad:16:f7:9b:6f:47:
e2:65:ad:4d:9c:b8:3e:e4:b1:4c:29:dd:55:2a:60:
36:92:79:9d:cb:3a:56:a8:87:15:5d:35:69:46:9c:
7f:d0:01:2b:db:ce:e3:17:33:ef:ff:07:47:e3:31:
f9:1a:87:17:ac:60:b9:d4:3d:1f:f2:78:1d:fb:66:
b9:70:fa:e7:ef:2b:82:7d:0e:f8:86:98:8c:44:04:
0e:65:da:48:ad:af:b3:ee:07:8c:6c:2e:2d:68:e0:
d4:4e:62:2e:ec:e6:b3:f6:3f:24:a3:8e:19:d6:e5:
ac:39:df:c4:12:47:47:94:b9:7c:eb:b1:a0:30:a1:
7f:75:b3:4c:4b:b4:5e:f1:8b:e1:3c:97:e7:99:52:
80:72:33:67:73:09:5d:6e:14:75:91:3d:b5:ee:85:
e9:ee:d0:b6:49:94:46:6f:67:b4:a9:e5:bb:07:11:
bc:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:22:EB:58:A7:A8:02:D4:5F:F2:0C:CC:ED:44:82:A0:61:18:A1:8E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143909.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a4eb::/32
Signature Algorithm: sha256WithRSAEncryption
a6:ab:c2:18:06:b6:65:de:1b:4e:9e:93:9d:85:2e:23:2c:5b:
9b:e8:2a:01:45:d9:20:d5:c7:e1:10:98:21:47:10:ee:06:ab:
28:00:c6:d9:06:25:0b:68:40:67:61:60:78:5f:85:b8:96:e6:
62:9a:6d:95:80:d6:6d:74:0f:d2:71:ea:20:43:f1:7e:94:22:
20:a5:e5:cc:95:22:17:04:16:f4:bb:08:98:d5:d0:06:3e:4c:
f3:4e:3f:9a:9d:ea:6e:f8:5a:fe:3c:1c:7a:48:bb:7b:37:f4:
7c:26:d4:1d:9d:dc:e5:fd:ae:dd:b8:10:f2:5e:33:b1:e0:c3:
12:5c:10:46:32:77:ac:c7:02:be:93:6e:47:1b:4a:42:65:57:
eb:5f:cc:d7:d1:5d:0e:ef:02:b5:13:9d:90:b6:c0:26:0d:6e:
81:14:bb:a2:83:a1:33:92:b3:7c:61:7d:08:62:c6:a4:d3:d6:
5f:3b:f8:73:77:72:32:98:09:85:0b:3d:43:99:b6:cd:fa:ba:
7e:6f:6e:ea:20:c8:bf:74:ab:59:1e:58:fb:11:05:9e:d0:3b:
e5:bc:d5:cd:19:9a:c4:bc:d2:ca:ac:05:4b:53:06:ee:2c:84:
12:b6:bc:cd:fc:ee:b9:14:ee:ea:c9:49:09:db:28:93:f6:33:
a5:a5:ac:02
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUKWQKABZeEbpvPwgTxhwPqBTvFC4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMzEyMjBaFw0yNzA1MjUwMzE3MjBaMDMxMTAvBgNV
BAMTKDQxMjJFQjU4QTdBODAyRDQ1RkYyMENDQ0VENDQ4MkEwNjExOEExOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtaSsNwbhOKKdBjV+IpeU40Fy8
D3OMGz9cUy1Bopyhrrg5L5WtvZEt99qOADyfCfmzVf9C/6F8lhwvSO86oGO8HtTl
giBZGa70obR6fjMrA6OrB60W95tvR+JlrU2cuD7ksUwp3VUqYDaSeZ3LOlaohxVd
NWlGnH/QASvbzuMXM+//B0fjMfkahxesYLnUPR/yeB37Zrlw+ufvK4J9DviGmIxE
BA5l2kitr7PuB4xsLi1o4NROYi7s5rP2PySjjhnW5aw538QSR0eUuXzrsaAwoX91
s0xLtF7xi+E8l+eZUoByM2dzCV1uFHWRPbXuhenu0LZJlEZvZ7Sp5bsHEbzbAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUQSLrWKeoAtRf8gzM7USCoGEYoY4wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzOTA5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqk6zANBgkqhkiG9w0BAQsFAAOCAQEApqvC
GAa2Zd4bTp6TnYUuIyxbm+gqAUXZINXH4RCYIUcQ7garKADG2QYlC2hAZ2FgeF+F
uJbmYpptlYDWbXQP0nHqIEPxfpQiIKXlzJUiFwQW9LsImNXQBj5M804/mp3qbvha
/jwceki7ezf0fCbUHZ3c5f2u3bgQ8l4zseDDElwQRjJ3rMcCvpNuRxtKQmVX61/M
19FdDu8CtROdkLbAJg1ugRS7ooOhM5KzfGF9CGLGpNPWXzv4c3dyMpgJhQs9Q5m2
zfq6fm9u6iDIv3SrWR5Y+xEFntA75bzVzRmaxLzSyqwFS1MG7iyEEra8zfzuuRTu
6slJCdsok/YzpaWsAg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:29 2026 by rpki-client