Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143971.roa
File: AS143971.roa (raw, json)
Hash identifier: mXFPPyqpuNFj1cl6LHuPPczAepPBQYeE7wyRFA6qw3Q=
Subject key identifier: 1E:89:08:66:D1:1D:52:61:37:45:CB:B2:71:98:D7:C2:21:04:F9:71
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 40A3C4AEEB0095BFE123ADF0A7601EB640E9063E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143971.roa
Signing time: Mon 25 May 2026 01:20:29 +0000
ROA not before: Mon 25 May 2026 01:15:29 +0000
ROA not after: Mon 24 May 2027 01:20:29 +0000
asID: 143971
IP address blocks: 240a:a529::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:a3:c4:ae:eb:00:95:bf:e1:23:ad:f0:a7:60:1e:b6:40:e9:06:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:29 2026 GMT
Not After : May 24 01:20:29 2027 GMT
Subject: CN=1E890866D11D52613745CBB27198D7C22104F971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2a:1a:e3:f4:a2:58:e1:03:27:d6:63:23:88:
dd:4e:54:f6:5c:a5:9f:5e:9c:ca:01:fa:e9:a2:0e:
4d:ec:3c:ff:fe:0c:ee:53:ee:72:6c:3a:01:e4:aa:
fe:8e:85:4e:c3:78:7e:86:32:28:2d:7f:4f:ba:ab:
33:9c:6c:6d:32:82:48:21:dc:16:5c:0a:00:48:30:
2a:88:f6:07:d4:87:86:72:61:40:b4:66:3c:08:ae:
ea:18:f2:e3:19:fd:9b:aa:24:15:82:cd:fc:72:63:
a3:95:fe:33:79:87:38:ac:c9:73:50:31:0d:16:8c:
b8:8f:32:fd:5d:71:f8:04:0b:0a:7b:1f:43:92:66:
d5:a8:67:db:2a:b6:f7:3c:2b:49:a3:ac:96:33:7a:
2a:f3:40:37:96:85:70:0f:9f:fe:fd:af:e9:ef:8e:
1a:d1:bb:63:a3:7f:c1:96:bc:f0:af:3a:cc:5a:ef:
b0:24:c5:e3:0d:30:f9:0b:49:74:e7:67:8f:1f:19:
b3:16:92:6d:e0:44:34:70:cd:a0:64:29:4e:43:84:
1a:c0:f8:0b:f8:60:8d:2a:49:3b:55:c6:52:08:04:
cb:78:83:9a:23:a4:d7:1e:73:5b:00:a3:43:94:a5:
14:9c:00:de:1b:c8:9f:71:1e:48:d8:8d:a2:ae:46:
b8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:89:08:66:D1:1D:52:61:37:45:CB:B2:71:98:D7:C2:21:04:F9:71
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143971.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a529::/32
Signature Algorithm: sha256WithRSAEncryption
7f:c0:4b:e4:00:7f:fd:70:27:64:e9:e8:0c:4d:d3:7d:d9:78:
09:d0:76:11:34:06:33:88:5b:96:d6:19:2b:19:bf:d5:49:59:
0c:90:96:a5:bb:37:94:f8:74:fd:16:1e:7d:eb:7b:be:b3:6b:
1b:44:e0:a6:50:a2:db:4e:c3:6e:ea:17:fd:11:b4:e8:e0:6a:
d3:3e:6d:0e:47:6a:f9:85:6e:3f:1c:00:89:99:49:3b:12:bd:
25:b8:b8:b7:fc:58:7b:a8:1d:28:1c:e0:a8:2e:5f:1b:aa:e0:
ee:5e:13:d8:b5:74:f5:d6:c5:32:66:68:73:45:37:b9:3f:a3:
c8:06:13:94:b2:88:cf:c6:32:31:63:d4:48:35:1d:69:0e:f7:
a3:4c:c9:7d:7b:3c:2d:d6:19:6a:7d:0b:2d:1b:dc:45:71:19:
e4:33:a3:81:bb:29:8a:65:6f:81:ef:7d:fe:90:23:6b:12:33:
08:0d:ab:dc:16:b8:0a:ea:df:8f:96:59:1d:f0:ab:61:27:c7:
8a:73:10:4c:41:95:fc:b1:64:11:53:b3:6c:33:00:49:5d:9b:
52:3b:bc:d2:d0:6f:d9:31:d6:0a:5b:b8:60:1e:00:42:0f:5a:
85:66:c2:e0:0c:50:8e:a0:72:93:b8:06:83:c1:e1:61:83:62:
5a:e9:b6:3d
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUQKPErusAlb/hI63wp2AetkDpBj4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTE1MjlaFw0yNzA1MjQwMTIwMjlaMDMxMTAvBgNV
BAMTKDFFODkwODY2RDExRDUyNjEzNzQ1Q0JCMjcxOThEN0MyMjEwNEY5NzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPKhrj9KJY4QMn1mMjiN1OVPZc
pZ9enMoB+umiDk3sPP/+DO5T7nJsOgHkqv6OhU7DeH6GMigtf0+6qzOcbG0ygkgh
3BZcCgBIMCqI9gfUh4ZyYUC0ZjwIruoY8uMZ/ZuqJBWCzfxyY6OV/jN5hzisyXNQ
MQ0WjLiPMv1dcfgECwp7H0OSZtWoZ9sqtvc8K0mjrJYzeirzQDeWhXAPn/79r+nv
jhrRu2Ojf8GWvPCvOsxa77AkxeMNMPkLSXTnZ48fGbMWkm3gRDRwzaBkKU5DhBrA
+Av4YI0qSTtVxlIIBMt4g5ojpNcec1sAo0OUpRScAN4byJ9xHkjYjaKuRrj1AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUHokIZtEdUmE3RcuycZjXwiEE+XEwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzOTcxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqlKTANBgkqhkiG9w0BAQsFAAOCAQEAf8BL
5AB//XAnZOnoDE3Tfdl4CdB2ETQGM4hbltYZKxm/1UlZDJCWpbs3lPh0/RYefet7
vrNrG0TgplCi207DbuoX/RG06OBq0z5tDkdq+YVuPxwAiZlJOxK9Jbi4t/xYe6gd
KBzgqC5fG6rg7l4T2LV09dbFMmZoc0U3uT+jyAYTlLKIz8YyMWPUSDUdaQ73o0zJ
fXs8LdYZan0LLRvcRXEZ5DOjgbspimVvge99/pAjaxIzCA2r3Ba4Curfj5ZZHfCr
YSfHinMQTEGV/LFkEVOzbDMASV2bUju80tBv2THWClu4YB4AQg9ahWbC4AxQjqBy
k7gGg8HhYYNiWum2PQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:28 2026 by rpki-client