Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143917.roa
File: AS143917.roa (raw, json)
Hash identifier: 3sKldYMsh0tZ0YCh10HiNVOiUxBAzi8V8H4JqdR4mUw=
Subject key identifier: 49:5E:BF:37:79:54:79:90:D6:82:62:B2:E8:A1:14:E9:56:82:85:D5
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7370E7C2A9187FE673D4FE7A3771FDE616AFDD94
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143917.roa
Signing time: Tue 26 May 2026 02:35:01 +0000
ROA not before: Tue 26 May 2026 02:30:01 +0000
ROA not after: Tue 25 May 2027 02:35:01 +0000
asID: 143917
IP address blocks: 240a:a4f3::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:70:e7:c2:a9:18:7f:e6:73:d4:fe:7a:37:71:fd:e6:16:af:dd:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:01 2026 GMT
Not After : May 25 02:35:01 2027 GMT
Subject: CN=495EBF3779547990D68262B2E8A114E9568285D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:36:a1:3a:de:f6:72:ca:36:58:c5:52:93:fb:
41:75:4b:e4:eb:40:dd:f8:e9:48:af:3a:3a:3a:83:
a6:c1:06:72:b3:8b:d3:de:42:43:b3:ac:75:cb:58:
ae:2a:3d:7a:2a:95:dc:c8:b2:08:b8:95:d8:e7:00:
05:41:61:0e:f1:4e:37:55:5f:6b:c6:6a:51:d7:a2:
7f:0a:95:77:49:da:05:f1:1e:8d:5c:33:b5:fa:2b:
9a:07:a3:c6:89:a0:e3:60:ac:79:35:20:34:a3:4c:
54:2e:29:ad:a2:57:d3:ef:4c:ed:0a:ee:06:e1:19:
5a:55:b0:67:76:0d:69:61:8b:23:b4:4f:c5:93:82:
d4:8b:e8:44:9f:a1:74:f4:a5:88:66:95:0a:18:fc:
16:05:8c:5e:03:7d:08:02:c5:a9:a0:da:8e:35:8e:
a4:50:a8:35:8d:58:09:7b:50:98:44:ea:22:e4:25:
4c:74:5f:c8:7c:ef:ad:94:ee:18:33:bd:d1:1b:0d:
e2:70:d1:c3:9c:9b:a5:9e:b0:8b:ec:46:f1:d4:18:
92:22:a9:9b:fc:7c:2b:ad:89:9a:99:f0:44:3c:77:
62:f4:70:95:42:39:7f:1c:41:89:25:8d:72:e0:7e:
5d:a7:8b:21:d7:40:b9:78:5c:20:1a:50:8f:50:d9:
df:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:5E:BF:37:79:54:79:90:D6:82:62:B2:E8:A1:14:E9:56:82:85:D5
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143917.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a4f3::/32
Signature Algorithm: sha256WithRSAEncryption
bd:0f:43:36:2e:71:91:75:d6:bb:0c:32:71:94:82:57:79:97:
1d:d2:35:0a:c4:4e:e1:74:49:2e:84:ea:c7:56:dc:b4:42:d9:
bb:7c:af:61:74:26:15:77:07:93:93:73:db:62:2d:fe:30:f3:
28:55:20:50:b7:9c:96:01:66:9b:e7:5e:42:8e:6a:eb:18:3d:
db:04:ea:8b:6b:82:c2:5f:c7:d3:cf:3f:14:10:20:7e:56:79:
cd:3b:aa:a1:a6:89:2b:0f:06:35:59:b9:f0:04:46:65:d8:d6:
18:a0:97:4f:83:36:66:74:b5:4d:92:85:41:37:95:bf:a0:9b:
c5:d3:90:13:c4:64:64:1d:a3:02:fb:bf:75:6b:e2:ad:98:22:
b7:25:84:af:01:3f:05:80:1a:c1:34:1a:6a:43:25:2d:d2:c7:
5f:b4:63:28:05:58:c5:05:36:7d:f9:59:ad:3b:af:82:08:7a:
a2:66:f5:f0:cb:5f:01:82:5c:81:55:b2:7d:f6:e4:d1:e0:4f:
d8:7a:40:3c:4c:2e:57:eb:70:41:14:0d:00:d8:3c:27:ed:f9:
e5:40:bb:34:74:ba:a4:dd:88:fc:f5:1d:16:d6:84:b1:09:1e:
b6:21:6e:73:48:ac:88:96:2d:22:da:11:b1:bc:4a:a6:75:69:
91:45:be:fc
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUc3DnwqkYf+Zz1P56N3H95hav3ZQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMjMwMDFaFw0yNzA1MjUwMjM1MDFaMDMxMTAvBgNV
BAMTKDQ5NUVCRjM3Nzk1NDc5OTBENjgyNjJCMkU4QTExNEU5NTY4Mjg1RDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDANqE63vZyyjZYxVKT+0F1S+Tr
QN346UivOjo6g6bBBnKzi9PeQkOzrHXLWK4qPXoqldzIsgi4ldjnAAVBYQ7xTjdV
X2vGalHXon8KlXdJ2gXxHo1cM7X6K5oHo8aJoONgrHk1IDSjTFQuKa2iV9PvTO0K
7gbhGVpVsGd2DWlhiyO0T8WTgtSL6ESfoXT0pYhmlQoY/BYFjF4DfQgCxamg2o41
jqRQqDWNWAl7UJhE6iLkJUx0X8h8762U7hgzvdEbDeJw0cOcm6WesIvsRvHUGJIi
qZv8fCutiZqZ8EQ8d2L0cJVCOX8cQYkljXLgfl2niyHXQLl4XCAaUI9Q2d9zAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUSV6/N3lUeZDWgmKy6KEU6VaChdUwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzOTE3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqk8zANBgkqhkiG9w0BAQsFAAOCAQEAvQ9D
Ni5xkXXWuwwycZSCV3mXHdI1CsRO4XRJLoTqx1bctELZu3yvYXQmFXcHk5Nz22It
/jDzKFUgULeclgFmm+deQo5q6xg92wTqi2uCwl/H088/FBAgflZ5zTuqoaaJKw8G
NVm58ARGZdjWGKCXT4M2ZnS1TZKFQTeVv6CbxdOQE8RkZB2jAvu/dWvirZgityWE
rwE/BYAawTQaakMlLdLHX7RjKAVYxQU2fflZrTuvggh6omb18MtfAYJcgVWyffbk
0eBP2HpAPEwuV+twQRQNANg8J+355UC7NHS6pN2I/PUdFtaEsQketiFuc0isiJYt
ItoRsbxKpnVpkUW+/A==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:39 2026 by rpki-client