Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143937.roa
File: AS143937.roa (raw, json)
Hash identifier: m+3+aYtQLJECJWbvFOlGaYvundte1QuWhQ48py9axPQ=
Subject key identifier: 06:41:FC:33:CB:16:2F:AB:3A:69:15:A5:96:FA:9C:20:F5:78:4A:31
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5E48574B6180E05B07784A88EC47A0DEF9F71B8B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143937.roa
Signing time: Fri 22 May 2026 06:46:13 +0000
ROA not before: Fri 22 May 2026 06:41:13 +0000
ROA not after: Fri 21 May 2027 06:46:13 +0000
asID: 143937
IP address blocks: 240a:a507::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:48:57:4b:61:80:e0:5b:07:78:4a:88:ec:47:a0:de:f9:f7:1b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:13 2026 GMT
Not After : May 21 06:46:13 2027 GMT
Subject: CN=0641FC33CB162FAB3A6915A596FA9C20F5784A31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f5:35:51:1b:3f:0b:f3:ac:c1:10:15:4c:09:
8d:5b:6a:fe:fb:e9:ff:15:d8:d5:32:fa:4b:89:6f:
a6:58:9b:4e:cf:80:dc:20:14:62:7e:c7:bc:b1:dc:
03:ca:96:de:c0:01:d9:48:16:87:37:5c:49:e4:37:
ba:ee:24:bb:8d:27:a1:8e:07:26:1f:13:ce:5d:4c:
e6:5e:f3:d0:3d:0c:56:8a:31:59:04:9a:a4:e5:3f:
63:35:66:67:8a:47:8d:40:c3:28:51:9b:23:ff:0e:
af:4f:e0:8d:83:44:61:3e:57:4c:16:ba:9f:b7:fa:
66:69:59:bd:8a:64:66:ff:9a:cc:a8:bc:d5:7c:1e:
fc:9b:5d:b7:b7:a0:99:64:e6:0b:28:32:27:b8:47:
b0:a3:cd:a9:7a:8b:ff:f4:8d:4d:78:4b:c7:2b:03:
c2:28:f0:98:23:10:c2:25:c3:f8:09:50:a6:f3:58:
56:e0:9d:84:d9:b9:61:8d:2f:58:2e:32:48:6b:dc:
cd:be:42:2c:8d:55:85:84:1e:0a:d1:d7:c6:70:b0:
a2:e8:b0:10:f9:81:59:15:85:f3:41:4f:dc:ac:63:
65:b3:66:23:e6:78:1b:9b:50:aa:de:f4:ba:bc:b2:
44:d4:b2:ed:e1:29:67:33:91:c5:2a:ad:86:65:77:
d6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:41:FC:33:CB:16:2F:AB:3A:69:15:A5:96:FA:9C:20:F5:78:4A:31
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a507::/32
Signature Algorithm: sha256WithRSAEncryption
8a:83:27:cc:09:46:70:f5:1a:84:7f:ba:a1:04:a5:31:53:5e:
0e:aa:7f:d7:c2:7f:3a:f9:fd:30:ab:01:ab:64:65:37:e9:18:
39:a5:fc:5c:67:e8:c1:47:71:87:11:bb:10:12:4d:59:3a:32:
81:84:cc:ab:cb:7d:a2:d5:65:87:bc:84:ae:fd:dd:53:ed:1f:
e1:6c:fc:30:60:53:b3:a9:02:7b:00:f7:93:e6:85:37:1f:35:
c0:99:bb:13:36:a0:4b:ca:19:a3:f3:c2:31:40:7c:cd:46:02:
47:59:c4:93:b4:50:6d:8e:86:b4:2f:6f:7d:a7:18:98:75:f3:
94:ac:ee:85:82:5f:27:ff:dc:7e:ef:10:8d:93:07:1e:9f:c6:
89:d1:f1:ed:65:9b:f1:c7:b9:59:ff:19:ac:25:fa:ac:3a:77:
42:b2:30:a8:9d:4b:20:ea:76:37:ba:b6:2c:ee:3e:2d:cb:80:
34:a0:28:b2:47:e2:d8:b1:9e:d6:b0:a0:14:44:69:2b:06:96:
16:ea:b9:bb:9e:cb:57:42:c5:11:f8:61:3b:ea:47:a0:db:88:
4e:a3:f5:cf:5e:88:e8:69:e5:4d:9e:2d:57:fa:f7:d2:3a:87:
04:a5:61:a1:5c:20:7d:50:f5:e4:78:e8:66:b1:2f:f9:07:9c:
ee:3c:ce:c9
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUXkhXS2GA4FsHeEqI7Eeg3vn3G4swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjQxMTNaFw0yNzA1MjEwNjQ2MTNaMDMxMTAvBgNV
BAMTKDA2NDFGQzMzQ0IxNjJGQUIzQTY5MTVBNTk2RkE5QzIwRjU3ODRBMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC59TVRGz8L86zBEBVMCY1bav77
6f8V2NUy+kuJb6ZYm07PgNwgFGJ+x7yx3APKlt7AAdlIFoc3XEnkN7ruJLuNJ6GO
ByYfE85dTOZe89A9DFaKMVkEmqTlP2M1ZmeKR41AwyhRmyP/Dq9P4I2DRGE+V0wW
up+3+mZpWb2KZGb/msyovNV8HvybXbe3oJlk5gsoMie4R7Cjzal6i//0jU14S8cr
A8Io8JgjEMIlw/gJUKbzWFbgnYTZuWGNL1guMkhr3M2+QiyNVYWEHgrR18ZwsKLo
sBD5gVkVhfNBT9ysY2WzZiPmeBubUKre9Lq8skTUsu3hKWczkcUqrYZld9YnAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUBkH8M8sWL6s6aRWllvqcIPV4SjEwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzOTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqlBzANBgkqhkiG9w0BAQsFAAOCAQEAioMn
zAlGcPUahH+6oQSlMVNeDqp/18J/Ovn9MKsBq2RlN+kYOaX8XGfowUdxhxG7EBJN
WToygYTMq8t9otVlh7yErv3dU+0f4Wz8MGBTs6kCewD3k+aFNx81wJm7EzagS8oZ
o/PCMUB8zUYCR1nEk7RQbY6GtC9vfacYmHXzlKzuhYJfJ//cfu8QjZMHHp/GidHx
7WWb8ce5Wf8ZrCX6rDp3QrIwqJ1LIOp2N7q2LO4+LcuANKAoskfi2LGe1rCgFERp
KwaWFuq5u57LV0LFEfhhO+pHoNuITqP1z16I6GnlTZ4tV/r30jqHBKVhoVwgfVD1
5HjoZrEv+Qec7jzOyQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:16 2026 by rpki-client