Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143914.roa
File: AS143914.roa (raw, json)
Hash identifier: oLA+M91eDw95m9Hzig7nVNcH0wh0ohvtbOxZQYO8Aeo=
Subject key identifier: C1:54:01:D7:BA:A1:D9:81:56:40:25:93:0E:0D:C8:12:EE:BC:BE:56
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3D4F926465DBE6965A295012BCB4EB2E984328B8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143914.roa
Signing time: Mon 25 May 2026 01:20:12 +0000
ROA not before: Mon 25 May 2026 01:15:12 +0000
ROA not after: Mon 24 May 2027 01:20:12 +0000
asID: 143914
IP address blocks: 240a:a4f0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:4f:92:64:65:db:e6:96:5a:29:50:12:bc:b4:eb:2e:98:43:28:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:12 2026 GMT
Not After : May 24 01:20:12 2027 GMT
Subject: CN=C15401D7BAA1D981564025930E0DC812EEBCBE56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d9:a9:b2:e4:4d:76:00:87:91:0e:6d:0b:bd:
05:c1:ab:63:96:7a:0e:94:21:55:ae:74:4d:28:ff:
09:40:b3:75:df:14:ca:3d:2b:4e:c7:7e:57:bc:53:
2f:88:d5:f7:a0:76:8e:27:c2:c9:05:56:4d:e2:05:
81:3a:17:28:37:98:36:bb:68:ed:bf:4c:d6:da:af:
b2:bb:6e:df:a7:01:54:95:5e:d7:33:2c:8a:b3:9d:
e1:1b:b9:6b:75:b3:4f:46:77:88:21:4a:3c:9e:b8:
05:85:d2:b2:d5:bd:3e:16:41:a6:85:2a:8b:ea:11:
b9:c7:51:21:65:0a:d7:19:f6:ce:13:f7:61:db:a9:
29:8f:8e:48:a2:dd:9d:c2:72:a3:a1:ab:a5:7d:fb:
26:dd:d0:ed:72:c1:65:e9:3f:df:b5:4e:aa:73:95:
6a:02:4a:6a:fc:88:ee:25:d7:e9:f0:8d:8b:f5:64:
70:85:83:dd:bb:15:f7:59:65:75:fb:6b:11:8a:92:
b7:74:6d:f2:ee:35:cb:6e:3a:56:84:13:37:f3:e4:
b2:ac:a8:14:f9:74:b5:0a:fa:5a:e3:3c:76:63:95:
75:9b:17:2b:46:7f:66:a2:41:64:72:ed:74:60:ca:
14:5c:46:89:af:3b:52:98:f6:af:8d:3f:79:03:d6:
b0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:54:01:D7:BA:A1:D9:81:56:40:25:93:0E:0D:C8:12:EE:BC:BE:56
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143914.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a4f0::/32
Signature Algorithm: sha256WithRSAEncryption
29:6f:40:89:f4:51:11:c9:32:d4:21:89:68:c2:c4:10:da:1f:
25:b8:54:a6:f7:f2:ab:a4:c5:17:09:fa:ef:69:4f:df:b5:66:
ab:fc:d3:c3:f3:2a:ac:b4:fa:10:56:b2:ad:6b:88:e3:61:dc:
26:64:1b:4b:1e:52:f4:56:0e:16:34:b8:31:20:4a:da:fb:c9:
eb:38:12:54:33:4d:c1:8f:5c:26:db:d8:78:80:10:4c:c1:77:
46:ca:8e:40:25:f2:08:f2:e1:7a:0b:d9:e3:78:aa:40:a1:87:
77:10:56:b0:2e:85:a6:e9:de:6f:9c:53:86:d7:ad:ae:92:4d:
89:3a:da:0b:25:ca:96:56:a4:0f:e9:5b:52:44:71:61:e8:c5:
e6:1b:77:29:55:6d:f9:69:e7:c3:a9:72:cd:6d:a7:20:1f:92:
2f:e2:e8:5b:16:74:48:75:29:49:be:2e:6a:7f:c1:37:15:62:
76:bd:d3:6c:f1:a7:25:93:d1:b3:79:6e:2b:66:0b:a0:fa:90:
f6:1a:96:31:e5:04:52:7f:a7:37:3e:89:ee:1a:c3:81:f6:38:
36:15:0b:f9:c6:cf:26:c1:11:d8:31:42:0b:84:38:fe:4b:e8:
70:44:b2:ba:59:5d:09:cd:b2:5a:aa:28:50:32:44:31:5b:1c:
b2:b8:37:c7
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUPU+SZGXb5pZaKVASvLTrLphDKLgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTE1MTJaFw0yNzA1MjQwMTIwMTJaMDMxMTAvBgNV
BAMTKEMxNTQwMUQ3QkFBMUQ5ODE1NjQwMjU5MzBFMERDODEyRUVCQ0JFNTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO2amy5E12AIeRDm0LvQXBq2OW
eg6UIVWudE0o/wlAs3XfFMo9K07Hfle8Uy+I1fegdo4nwskFVk3iBYE6Fyg3mDa7
aO2/TNbar7K7bt+nAVSVXtczLIqzneEbuWt1s09Gd4ghSjyeuAWF0rLVvT4WQaaF
KovqEbnHUSFlCtcZ9s4T92HbqSmPjkii3Z3CcqOhq6V9+ybd0O1ywWXpP9+1Tqpz
lWoCSmr8iO4l1+nwjYv1ZHCFg927FfdZZXX7axGKkrd0bfLuNctuOlaEEzfz5LKs
qBT5dLUK+lrjPHZjlXWbFytGf2aiQWRy7XRgyhRcRomvO1KY9q+NP3kD1rAvAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUwVQB17qh2YFWQCWTDg3IEu68vlYwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzOTE0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqk8DANBgkqhkiG9w0BAQsFAAOCAQEAKW9A
ifRREcky1CGJaMLEENofJbhUpvfyq6TFFwn672lP37Vmq/zTw/MqrLT6EFayrWuI
42HcJmQbSx5S9FYOFjS4MSBK2vvJ6zgSVDNNwY9cJtvYeIAQTMF3RsqOQCXyCPLh
egvZ43iqQKGHdxBWsC6Fpuneb5xThtetrpJNiTraCyXKllakD+lbUkRxYejF5ht3
KVVt+Wnnw6lyzW2nIB+SL+LoWxZ0SHUpSb4uan/BNxVidr3TbPGnJZPRs3luK2YL
oPqQ9hqWMeUEUn+nNz6J7hrDgfY4NhUL+cbPJsER2DFCC4Q4/kvocESyulldCc2y
WqooUDJEMVscsrg3xw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:42 2026 by rpki-client