Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143966.roa
File: AS143966.roa (raw, json)
Hash identifier: PD1Kg40NHiTVjpglPAeiM3c4odSJeQTeLeHcFFTDp/w=
Subject key identifier: A8:E2:FA:49:9C:1E:7F:C1:EB:59:A4:E1:97:30:5F:48:CD:B0:5C:53
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3AADBBD88582F11E5A7B92EC16C5B353A54A9FC0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143966.roa
Signing time: Tue 26 May 2026 03:17:14 +0000
ROA not before: Tue 26 May 2026 03:12:14 +0000
ROA not after: Tue 25 May 2027 03:17:14 +0000
asID: 143966
IP address blocks: 240a:a524::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:ad:bb:d8:85:82:f1:1e:5a:7b:92:ec:16:c5:b3:53:a5:4a:9f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:12:14 2026 GMT
Not After : May 25 03:17:14 2027 GMT
Subject: CN=A8E2FA499C1E7FC1EB59A4E197305F48CDB05C53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ad:6c:c1:f2:82:93:3f:bb:fc:61:df:d8:83:
fa:bb:be:d1:9f:d9:bf:ee:f8:ea:81:7f:ac:60:5f:
cf:50:ce:06:d4:0d:68:e2:d3:dd:b4:77:5c:34:58:
51:c2:51:71:a1:e1:73:06:2f:b9:77:0c:f3:5f:8b:
e8:18:98:f7:c7:0b:86:92:19:51:a3:63:ff:07:44:
0f:da:2b:68:d2:ec:b8:a0:41:14:78:44:34:7e:d5:
72:de:61:de:8a:b3:9a:9e:3a:71:12:1a:a3:69:ba:
be:9e:55:0d:16:19:08:7f:31:b9:a4:74:c5:bd:7c:
ee:32:b7:1c:39:8b:29:f3:81:8a:9e:cc:c4:1e:3c:
18:84:5b:b4:94:39:26:25:4a:83:51:e6:8a:85:24:
ed:89:ee:ef:c4:3b:e8:6c:a9:1e:4a:b4:79:79:19:
46:75:3e:dc:5c:10:cf:85:d4:16:2b:78:2a:59:f3:
55:4f:91:60:fe:a2:6f:c1:23:ab:d8:03:09:16:71:
e5:8f:1a:56:6e:0e:24:05:68:dc:00:78:de:90:34:
84:6b:75:ad:b0:4b:64:62:b5:5e:53:8a:80:95:3c:
b2:be:18:b5:f4:06:f0:65:f4:fa:a9:54:2c:84:c6:
71:12:90:c4:97:52:57:05:d6:66:a3:0e:29:5b:de:
55:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E2:FA:49:9C:1E:7F:C1:EB:59:A4:E1:97:30:5F:48:CD:B0:5C:53
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143966.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a524::/32
Signature Algorithm: sha256WithRSAEncryption
74:10:bc:bf:86:b5:af:8e:ab:b2:18:71:bb:f9:8f:06:f6:d2:
f4:6a:cd:2c:45:86:ac:a9:a0:49:63:36:0b:1e:a2:1f:66:93:
27:ea:b7:be:4e:ad:ec:a3:6d:d1:0b:05:c6:ad:4e:35:af:60:
89:b0:a0:3a:c9:e7:0f:bf:a0:c1:0a:30:1b:01:45:fd:07:b4:
bc:43:f1:b7:50:75:74:55:e1:e6:17:90:a5:81:66:07:f9:93:
58:6e:e5:aa:37:4f:9f:49:a2:4b:cb:b7:ad:ea:2d:f8:35:ea:
07:97:be:2f:f2:5f:24:85:ba:69:98:59:19:e7:ae:cf:ac:63:
71:58:db:bf:41:84:1b:51:23:a8:4f:ba:9e:c9:69:8a:0e:81:
c1:58:a8:f9:38:a2:a8:59:22:74:ad:18:5a:4e:5c:ec:20:f7:
8f:91:c0:7e:fe:9b:be:1c:94:ae:32:ff:6d:9c:ba:ac:e9:5a:
20:22:a3:de:62:cd:43:9b:9f:42:0b:aa:67:4f:c8:e8:6d:89:
a2:f0:50:cf:98:0b:fb:f8:df:9a:ba:7a:4b:5d:ab:73:82:15:
b1:1c:cd:74:84:67:4d:94:08:be:08:14:07:0b:8e:55:db:a4:
ca:5e:91:a5:4c:ab:d9:49:ca:88:e2:43:b8:c9:1a:87:18:f7:
e8:a3:f2:9c
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUOq272IWC8R5ae5LsFsWzU6VKn8AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMzEyMTRaFw0yNzA1MjUwMzE3MTRaMDMxMTAvBgNV
BAMTKEE4RTJGQTQ5OUMxRTdGQzFFQjU5QTRFMTk3MzA1RjQ4Q0RCMDVDNTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQrWzB8oKTP7v8Yd/Yg/q7vtGf
2b/u+OqBf6xgX89QzgbUDWji0920d1w0WFHCUXGh4XMGL7l3DPNfi+gYmPfHC4aS
GVGjY/8HRA/aK2jS7LigQRR4RDR+1XLeYd6Ks5qeOnESGqNpur6eVQ0WGQh/Mbmk
dMW9fO4ytxw5iynzgYqezMQePBiEW7SUOSYlSoNR5oqFJO2J7u/EO+hsqR5KtHl5
GUZ1PtxcEM+F1BYreCpZ81VPkWD+om/BI6vYAwkWceWPGlZuDiQFaNwAeN6QNIRr
da2wS2RitV5TioCVPLK+GLX0BvBl9PqpVCyExnESkMSXUlcF1majDilb3lWFAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUqOL6SZwef8HrWaThlzBfSM2wXFMwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzOTY2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqlJDANBgkqhkiG9w0BAQsFAAOCAQEAdBC8
v4a1r46rshhxu/mPBvbS9GrNLEWGrKmgSWM2Cx6iH2aTJ+q3vk6t7KNt0QsFxq1O
Na9gibCgOsnnD7+gwQowGwFF/Qe0vEPxt1B1dFXh5heQpYFmB/mTWG7lqjdPn0mi
S8u3reot+DXqB5e+L/JfJIW6aZhZGeeuz6xjcVjbv0GEG1EjqE+6nslpig6BwVio
+TiiqFkidK0YWk5c7CD3j5HAfv6bvhyUrjL/bZy6rOlaICKj3mLNQ5ufQguqZ0/I
6G2JovBQz5gL+/jfmrp6S12rc4IVsRzNdIRnTZQIvggUBwuOVdukyl6RpUyr2UnK
iOJDuMkahxj36KPynA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:36 2026 by rpki-client