Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143911.roa
File: AS143911.roa (raw, json)
Hash identifier: wX4rHEGNwuopsyt1cEFuFERpAu37IbDyQt4o7P4Oams=
Subject key identifier: 10:8A:E8:99:E2:74:30:28:CE:83:93:ED:59:6C:04:DE:C2:C7:51:63
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 36B2670D4CD89F82C0229E82730B9A3D1234D9FB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143911.roa
Signing time: Fri 22 May 2026 01:50:27 +0000
ROA not before: Fri 22 May 2026 01:45:27 +0000
ROA not after: Fri 21 May 2027 01:50:27 +0000
asID: 143911
IP address blocks: 240a:a4ed::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:b2:67:0d:4c:d8:9f:82:c0:22:9e:82:73:0b:9a:3d:12:34:d9:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:27 2026 GMT
Not After : May 21 01:50:27 2027 GMT
Subject: CN=108AE899E2743028CE8393ED596C04DEC2C75163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:02:27:5d:64:cd:74:51:49:4d:21:bd:16:9c:
4d:37:dd:49:b9:cc:f3:db:a7:8d:7b:32:aa:23:f7:
a8:da:33:75:73:39:ab:40:db:d0:1f:2b:e2:ec:d5:
f0:70:86:fc:f3:b3:87:c0:ec:57:d1:f7:90:1e:37:
02:10:e0:22:e1:b7:e0:f3:11:7b:a6:58:12:ac:2d:
61:e3:ad:3f:48:33:da:a7:d8:de:35:76:5e:e2:db:
a9:4b:45:00:95:10:67:38:3b:8d:fc:c7:41:53:6e:
89:79:c7:71:0c:8e:ae:cf:3d:03:fd:6a:24:e9:e4:
fb:48:19:a5:9e:4f:8f:75:e8:e8:8d:e6:44:e7:84:
51:b8:94:26:12:17:de:61:7d:a2:31:01:d7:17:d9:
d2:4e:35:38:fd:f0:df:f1:e1:6f:36:66:33:74:cf:
66:bd:16:d3:ff:c2:e3:95:69:d0:01:cc:d0:51:61:
d6:da:29:81:e9:e7:c4:28:29:15:d7:ed:e1:c6:d3:
12:7a:20:9f:35:ff:8b:f6:c7:0f:12:4d:d4:89:b3:
9c:b2:aa:58:35:be:1f:b1:bb:1b:c1:21:e4:20:b2:
d0:d5:a2:2f:e8:db:58:c8:30:0d:40:90:95:77:fe:
31:74:5a:79:3a:02:ec:9a:6e:9a:04:67:34:71:fd:
73:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:8A:E8:99:E2:74:30:28:CE:83:93:ED:59:6C:04:DE:C2:C7:51:63
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143911.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a4ed::/32
Signature Algorithm: sha256WithRSAEncryption
2c:43:6d:33:5a:90:82:fb:63:a5:66:21:97:39:cb:ba:ca:9f:
a8:47:89:2a:6d:b0:ee:29:d8:4b:f6:81:01:13:23:13:23:c3:
1b:ce:f2:3b:34:1c:96:97:40:ac:5a:dc:69:e9:97:e4:5c:80:
01:63:9b:c2:a3:e7:e9:f4:de:43:40:80:33:90:1f:3b:a0:36:
4e:f0:54:97:e0:30:cd:c6:d0:f1:ac:74:c0:95:a7:ba:62:26:
7f:9e:0e:83:5c:2a:ec:f1:2d:e0:4d:60:b5:2c:52:cb:72:36:
73:e6:17:56:5b:ca:32:42:4c:10:f3:2a:7e:28:79:2a:0e:57:
c6:55:ef:f3:af:ae:8a:26:99:8d:36:e9:42:fd:de:0d:8e:99:
c8:5b:2d:41:c5:17:d4:12:60:2b:e4:53:39:0d:70:20:fb:8a:
d8:d9:35:10:b2:20:a0:b8:8d:a9:55:d7:7d:de:63:dd:89:29:
e9:fb:32:82:ab:95:47:22:42:5d:b0:6c:80:41:e9:f4:d5:09:
3c:b1:5c:d6:41:f0:2b:04:d1:f5:76:75:a4:60:91:49:6c:54:
d8:bf:fa:43:91:e5:d5:00:0f:eb:45:f3:ce:c7:86:28:2d:60:
13:8a:0a:57:a4:45:6f:b4:d0:5f:4e:61:e8:5a:62:05:67:9d:
45:6c:5b:91
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUNrJnDUzYn4LAIp6CcwuaPRI02fswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwMTQ1MjdaFw0yNzA1MjEwMTUwMjdaMDMxMTAvBgNV
BAMTKDEwOEFFODk5RTI3NDMwMjhDRTgzOTNFRDU5NkMwNERFQzJDNzUxNjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCAiddZM10UUlNIb0WnE033Um5
zPPbp417Mqoj96jaM3VzOatA29AfK+Ls1fBwhvzzs4fA7FfR95AeNwIQ4CLht+Dz
EXumWBKsLWHjrT9IM9qn2N41dl7i26lLRQCVEGc4O438x0FTbol5x3EMjq7PPQP9
aiTp5PtIGaWeT4916OiN5kTnhFG4lCYSF95hfaIxAdcX2dJONTj98N/x4W82ZjN0
z2a9FtP/wuOVadABzNBRYdbaKYHp58QoKRXX7eHG0xJ6IJ81/4v2xw8STdSJs5yy
qlg1vh+xuxvBIeQgstDVoi/o21jIMA1AkJV3/jF0Wnk6AuyabpoEZzRx/XPdAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUEIromeJ0MCjOg5PtWWwE3sLHUWMwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzOTExLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqk7TANBgkqhkiG9w0BAQsFAAOCAQEALENt
M1qQgvtjpWYhlznLusqfqEeJKm2w7inYS/aBARMjEyPDG87yOzQclpdArFrcaemX
5FyAAWObwqPn6fTeQ0CAM5AfO6A2TvBUl+AwzcbQ8ax0wJWnumImf54Og1wq7PEt
4E1gtSxSy3I2c+YXVlvKMkJMEPMqfih5Kg5XxlXv86+uiiaZjTbpQv3eDY6ZyFst
QcUX1BJgK+RTOQ1wIPuK2Nk1ELIgoLiNqVXXfd5j3Ykp6fsygquVRyJCXbBsgEHp
9NUJPLFc1kHwKwTR9XZ1pGCRSWxU2L/6Q5Hl1QAP60XzzseGKC1gE4oKV6RFb7TQ
X05h6FpiBWedRWxbkQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:03 2026 by rpki-client