Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143928.roa
File: AS143928.roa (raw, json)
Hash identifier: eEp9vvVSN2rw43B1it4FB82GGYbDPW067Vn6EeLUtyA=
Subject key identifier: BA:03:0A:82:1D:0B:8A:2D:60:1C:DC:B7:A9:7C:D9:52:5A:59:97:9B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 78883D9EBECA11E51CD6B946C47BF527378F32AD
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143928.roa
Signing time: Tue 26 May 2026 03:16:38 +0000
ROA not before: Tue 26 May 2026 03:11:38 +0000
ROA not after: Tue 25 May 2027 03:16:38 +0000
asID: 143928
IP address blocks: 240a:a4fe::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:88:3d:9e:be:ca:11:e5:1c:d6:b9:46:c4:7b:f5:27:37:8f:32:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:11:38 2026 GMT
Not After : May 25 03:16:38 2027 GMT
Subject: CN=BA030A821D0B8A2D601CDCB7A97CD9525A59979B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1a:60:10:15:9c:60:2b:8c:2f:6d:f2:e7:19:
cd:97:3a:56:95:24:ec:ee:8b:ed:84:36:6c:b6:b0:
e3:3c:1f:4b:fb:e8:fa:ee:ac:21:16:32:31:1e:fb:
88:4e:e9:da:74:fa:8c:1e:aa:af:7d:dc:e0:53:21:
86:cc:32:46:23:a1:10:dd:80:27:18:8e:5d:a7:20:
f0:fa:88:88:72:16:ec:0c:ad:c8:ba:8a:db:0c:11:
15:a8:5f:bb:81:44:90:c7:ce:7f:c9:6e:16:08:b9:
2c:7e:66:5b:01:88:3a:8f:6f:44:d6:a1:dc:62:3f:
ac:93:48:78:51:80:24:b3:e0:7a:af:9e:32:21:95:
1c:44:89:6d:00:ff:31:13:13:24:92:b8:78:f0:1a:
62:5d:49:be:49:0d:b9:30:a3:f5:2d:39:8a:1e:d6:
41:fc:fe:1d:a9:33:e4:90:4f:67:86:1d:02:17:af:
54:25:19:50:ca:89:a3:36:79:f2:4d:94:3a:fa:0e:
3b:8d:2c:07:63:c9:e1:0a:e7:2b:59:71:2b:ac:bb:
fd:da:a0:2d:aa:92:e9:e0:0f:8c:ad:f6:b7:f6:d7:
9d:c2:00:93:0c:d0:61:3b:d3:87:a0:75:36:c6:47:
96:41:83:65:eb:b6:2d:0c:c8:f3:96:e5:6b:6b:74:
2f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:03:0A:82:1D:0B:8A:2D:60:1C:DC:B7:A9:7C:D9:52:5A:59:97:9B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143928.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a4fe::/32
Signature Algorithm: sha256WithRSAEncryption
b9:da:83:5e:36:cf:80:89:f9:34:3b:12:e1:e5:22:1a:6d:c5:
a0:c0:1d:f3:f9:14:b3:f5:7b:b7:93:7e:6a:02:49:b0:fe:c7:
48:4d:ef:78:97:04:5f:2b:47:a0:2a:85:bf:79:2d:a6:00:af:
e7:2a:23:51:ba:b4:02:d7:c3:61:2d:cb:99:cc:85:30:12:bd:
bb:b4:f6:c1:b0:e3:d3:df:5d:90:47:8d:65:6a:86:9e:83:5c:
25:cf:c6:de:dd:74:a3:30:83:5f:0c:35:69:3f:b6:e0:4d:fa:
05:d2:54:a4:78:79:65:92:29:3e:14:5f:12:c4:03:69:6f:89:
a6:26:7c:b7:a7:ee:0b:4a:90:ea:a7:7f:4d:d8:24:9a:11:a0:
b1:ba:ae:55:26:07:06:98:c5:f1:ee:2c:5a:4d:21:dd:67:ca:
10:2b:68:2c:e6:f5:71:8e:c8:3a:7c:8d:ac:c7:97:a7:ab:54:
e8:2d:61:3d:45:54:f7:68:e2:57:52:e4:73:5f:4e:fd:22:31:
2d:6d:63:a2:50:5f:5f:f5:c6:eb:a0:7a:0d:89:e8:5d:f6:eb:
d4:cb:aa:f2:dc:84:82:0c:7a:93:23:e8:4a:cb:89:87:e5:ee:
51:00:da:a0:b5:25:03:39:da:c4:c3:b9:1a:af:5a:60:2a:20:
14:5d:93:ff
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUeIg9nr7KEeUc1rlGxHv1JzePMq0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMzExMzhaFw0yNzA1MjUwMzE2MzhaMDMxMTAvBgNV
BAMTKEJBMDMwQTgyMUQwQjhBMkQ2MDFDRENCN0E5N0NEOTUyNUE1OTk3OUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcGmAQFZxgK4wvbfLnGc2XOlaV
JOzui+2ENmy2sOM8H0v76PrurCEWMjEe+4hO6dp0+oweqq993OBTIYbMMkYjoRDd
gCcYjl2nIPD6iIhyFuwMrci6itsMERWoX7uBRJDHzn/JbhYIuSx+ZlsBiDqPb0TW
odxiP6yTSHhRgCSz4HqvnjIhlRxEiW0A/zETEySSuHjwGmJdSb5JDbkwo/UtOYoe
1kH8/h2pM+SQT2eGHQIXr1QlGVDKiaM2efJNlDr6DjuNLAdjyeEK5ytZcSusu/3a
oC2qkungD4yt9rf2153CAJMM0GE704egdTbGR5ZBg2Xrti0MyPOW5WtrdC//AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUugMKgh0Lii1gHNy3qXzZUlpZl5swHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzOTI4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqk/jANBgkqhkiG9w0BAQsFAAOCAQEAudqD
XjbPgIn5NDsS4eUiGm3FoMAd8/kUs/V7t5N+agJJsP7HSE3veJcEXytHoCqFv3kt
pgCv5yojUbq0AtfDYS3LmcyFMBK9u7T2wbDj099dkEeNZWqGnoNcJc/G3t10ozCD
Xww1aT+24E36BdJUpHh5ZZIpPhRfEsQDaW+JpiZ8t6fuC0qQ6qd/TdgkmhGgsbqu
VSYHBpjF8e4sWk0h3WfKECtoLOb1cY7IOnyNrMeXp6tU6C1hPUVU92jiV1Lkc19O
/SIxLW1jolBfX/XG66B6DYnoXfbr1Muq8tyEggx6kyPoSsuJh+XuUQDaoLUlAzna
xMO5Gq9aYCogFF2T/w==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:51 2026 by rpki-client