Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143930.roa
File: AS143930.roa (raw, json)
Hash identifier: 1HkCKmA1YDPeYjhBXnDgBfBx4cVHEGhak4buG2LWue4=
Subject key identifier: F3:12:80:BA:B0:D4:01:89:F2:92:EB:4F:83:AD:22:F9:26:AC:CA:C2
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 54E58E1843060595ADAFCA8A9546E97F275AD1E1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143930.roa
Signing time: Tue 26 May 2026 01:12:56 +0000
ROA not before: Tue 26 May 2026 01:07:56 +0000
ROA not after: Tue 25 May 2027 01:12:56 +0000
asID: 143930
IP address blocks: 240a:a500::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:e5:8e:18:43:06:05:95:ad:af:ca:8a:95:46:e9:7f:27:5a:d1:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:07:56 2026 GMT
Not After : May 25 01:12:56 2027 GMT
Subject: CN=F31280BAB0D40189F292EB4F83AD22F926ACCAC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:22:d2:ff:fc:7e:95:87:44:c1:f8:85:f2:9d:
3a:4f:b7:8e:cc:ad:9d:ef:8f:c3:04:6a:9f:99:cc:
2c:76:93:03:ea:f8:31:82:85:1a:ea:a8:64:a1:dc:
6d:66:b7:41:45:3a:e1:7e:a6:b6:56:66:65:f0:cb:
77:af:a2:8d:0b:d4:d4:8d:cf:ee:87:76:b9:1f:7b:
91:ba:78:55:55:ea:5f:36:b2:ed:61:f6:0e:b5:d8:
5f:e1:93:81:b7:15:dc:c4:26:f7:bb:83:f0:a8:4c:
ef:ce:69:dd:38:92:a2:07:3b:b0:70:f8:3e:f9:6a:
96:95:44:d5:7a:37:7d:6b:07:ac:b7:22:05:b9:62:
17:a7:41:c2:0e:8f:5d:9d:03:66:af:0f:41:70:7f:
d5:83:85:63:a2:0b:5a:19:93:75:c5:a4:96:e6:82:
f5:d7:bb:fa:9b:06:c6:86:d3:9b:c3:b8:d9:f7:09:
2b:c9:2a:c9:a9:41:eb:de:56:87:1f:2f:b8:08:fb:
e1:99:71:3d:8a:38:af:f8:74:c5:68:83:0a:1a:2f:
b5:a2:a4:0b:78:93:d8:a4:fd:69:e4:14:1d:a7:29:
cc:c6:f7:1a:90:49:d5:ba:7f:e5:10:f1:39:d6:77:
23:f1:46:72:4f:5e:d0:27:c9:39:64:b5:39:f5:ae:
64:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:12:80:BA:B0:D4:01:89:F2:92:EB:4F:83:AD:22:F9:26:AC:CA:C2
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a500::/32
Signature Algorithm: sha256WithRSAEncryption
32:c3:a1:be:25:4b:40:f2:97:da:cc:c2:5e:d6:63:c3:e9:51:
61:99:a3:5b:a0:9d:59:8b:93:da:4a:d7:ac:86:0c:88:9d:5a:
bb:d9:cd:15:9d:82:55:d2:44:7f:2d:2a:01:cc:a4:0d:62:20:
ea:f2:b6:bc:5f:7d:ab:3e:fb:73:e4:8c:2b:c5:d2:03:27:10:
7a:5e:ef:4b:b9:e0:dd:5d:ba:ce:3c:8c:70:5f:65:79:a9:4e:
15:9d:3e:48:2b:65:9f:ae:40:8c:0c:0d:98:6e:38:b2:03:29:
13:dc:c8:36:f6:c7:5b:70:bb:c4:b2:21:4a:67:1a:32:3b:55:
84:c8:9d:ba:46:de:75:80:6b:01:99:46:87:c3:e7:71:cb:4b:
95:05:88:28:88:01:3a:a0:29:34:c6:3b:1c:dc:07:7e:b3:a7:
31:fc:2f:e4:56:9c:59:70:73:fd:e1:6c:59:10:d0:fa:86:35:
19:96:07:62:26:9e:be:8f:b5:55:16:91:57:d0:5d:70:ff:21:
0e:97:d9:bf:44:a1:24:ab:04:9e:15:5a:9b:e6:bc:2e:b8:b9:
17:7b:7d:81:ff:b4:45:03:f0:f6:79:83:20:95:b7:b7:38:9b:
3c:33:ab:fe:27:38:f3:0f:93:c2:69:e1:aa:f7:3f:c2:4c:36:
7b:bb:95:98
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUVOWOGEMGBZWtr8qKlUbpfyda0eEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMTA3NTZaFw0yNzA1MjUwMTEyNTZaMDMxMTAvBgNV
BAMTKEYzMTI4MEJBQjBENDAxODlGMjkyRUI0RjgzQUQyMkY5MjZBQ0NBQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMItL//H6Vh0TB+IXynTpPt47M
rZ3vj8MEap+ZzCx2kwPq+DGChRrqqGSh3G1mt0FFOuF+prZWZmXwy3evoo0L1NSN
z+6Hdrkfe5G6eFVV6l82su1h9g612F/hk4G3FdzEJve7g/CoTO/Oad04kqIHO7Bw
+D75apaVRNV6N31rB6y3IgW5YhenQcIOj12dA2avD0Fwf9WDhWOiC1oZk3XFpJbm
gvXXu/qbBsaG05vDuNn3CSvJKsmpQeveVocfL7gI++GZcT2KOK/4dMVogwoaL7Wi
pAt4k9ik/WnkFB2nKczG9xqQSdW6f+UQ8TnWdyPxRnJPXtAnyTlktTn1rmRxAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU8xKAurDUAYnykutPg60i+SasysIwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzOTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqlADANBgkqhkiG9w0BAQsFAAOCAQEAMsOh
viVLQPKX2szCXtZjw+lRYZmjW6CdWYuT2krXrIYMiJ1au9nNFZ2CVdJEfy0qAcyk
DWIg6vK2vF99qz77c+SMK8XSAycQel7vS7ng3V26zjyMcF9lealOFZ0+SCtln65A
jAwNmG44sgMpE9zINvbHW3C7xLIhSmcaMjtVhMidukbedYBrAZlGh8PncctLlQWI
KIgBOqApNMY7HNwHfrOnMfwv5FacWXBz/eFsWRDQ+oY1GZYHYiaevo+1VRaRV9Bd
cP8hDpfZv0ShJKsEnhVam+a8Lri5F3t9gf+0RQPw9nmDIJW3tzibPDOr/ic48w+T
wmnhqvc/wkw2e7uVmA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:08 2026 by rpki-client