Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143983.roa
File: AS143983.roa (raw, json)
Hash identifier: gHTU1kau8/iekhlcYCU6L0JCNJPMtrFHhbMIH4nUPW0=
Subject key identifier: 30:DB:28:37:9A:94:53:F2:85:E2:CD:1F:E3:53:04:E9:8A:4A:3C:7F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 288189BBAFE9279364E4E9241AE9C1FD97060A12
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143983.roa
Signing time: Fri 22 May 2026 07:24:35 +0000
ROA not before: Fri 22 May 2026 07:19:35 +0000
ROA not after: Fri 21 May 2027 07:24:35 +0000
asID: 143983
IP address blocks: 240a:a535::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:81:89:bb:af:e9:27:93:64:e4:e9:24:1a:e9:c1:fd:97:06:0a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:35 2026 GMT
Not After : May 21 07:24:35 2027 GMT
Subject: CN=30DB28379A9453F285E2CD1FE35304E98A4A3C7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e7:3d:10:92:4f:54:62:a8:78:84:9e:38:7d:
f0:f9:a8:57:05:6f:61:77:4d:8e:a9:b1:aa:3c:32:
83:49:96:f0:31:b3:b8:21:63:cf:96:b5:29:4d:4a:
45:cc:ef:21:cf:2a:03:42:01:87:78:67:8f:34:48:
a8:7a:24:f7:68:fb:c9:7a:e3:01:4d:4c:0c:d8:a6:
3b:bf:54:61:c6:e1:1f:fe:45:01:a8:b3:d0:76:25:
2a:32:92:4c:46:b0:ad:84:19:4c:1d:89:5a:00:a1:
1f:6f:36:3a:6e:36:69:cd:31:36:f8:ff:a3:47:ca:
83:73:f1:10:3f:92:26:0b:68:07:d0:0f:a6:a4:c4:
b1:ba:0f:79:e5:86:71:69:3a:9b:56:25:d4:84:1e:
22:4b:f1:5f:90:cd:92:6d:8b:53:69:bd:5e:1a:7d:
c0:9a:18:4c:00:41:27:95:b7:ff:0c:4e:4d:dc:fd:
6f:21:2b:3d:e7:c3:93:93:d7:02:dd:f3:9b:0f:05:
3a:be:83:f8:ee:83:08:90:4e:81:73:d0:b2:a3:a4:
ab:bf:76:e2:de:7d:79:1a:1e:73:0d:38:24:44:da:
ec:39:ac:56:0d:da:0a:ae:e7:ec:e0:dc:52:70:08:
a0:18:ee:97:91:f9:e8:60:38:fc:25:59:dd:9f:fb:
bf:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:DB:28:37:9A:94:53:F2:85:E2:CD:1F:E3:53:04:E9:8A:4A:3C:7F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143983.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a535::/32
Signature Algorithm: sha256WithRSAEncryption
86:1f:17:7f:f8:b1:cd:9b:cc:46:78:09:8b:24:ac:7e:cc:b3:
b0:00:3f:52:74:6a:db:7b:04:0f:c5:e5:b2:5d:9e:dd:29:1a:
0a:96:c6:79:4c:08:55:8c:1b:75:a0:03:43:33:35:09:36:26:
c4:27:de:dc:20:a5:dd:f6:0c:b3:66:5e:66:45:22:5f:2d:07:
4d:7f:7c:5f:3a:72:7b:bd:0c:ab:52:82:0f:e3:e3:5b:20:c4:
20:9a:8a:6c:d8:fd:84:21:b7:9f:f2:ab:de:00:d8:cc:a4:7f:
d8:85:b5:3c:dc:e6:2b:48:89:1a:53:bb:ee:c8:ad:5e:fc:99:
50:49:0b:c4:67:a3:33:99:80:d3:36:09:07:76:31:38:24:57:
60:0b:cd:7d:bf:df:14:25:57:63:a8:f9:67:1a:78:8b:59:42:
3d:ca:5c:db:a3:8c:ae:21:e2:89:eb:cf:d7:b4:a0:6c:28:3f:
bc:6b:f2:b6:28:fe:d6:d8:0c:9e:cf:66:92:89:fa:8e:a5:4c:
86:ab:34:2d:f0:e4:43:ac:35:a8:a8:b2:9a:75:9a:3b:de:23:
41:f0:76:4b:56:8b:47:f1:74:c3:74:8e:87:2d:fb:6e:98:52:
a9:9a:b8:ba:81:70:f6:ea:e2:64:80:6a:70:93:ca:55:d0:b2:
08:df:e0:4f
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUKIGJu6/pJ5Nk5OkkGunB/ZcGChIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzE5MzVaFw0yNzA1MjEwNzI0MzVaMDMxMTAvBgNV
BAMTKDMwREIyODM3OUE5NDUzRjI4NUUyQ0QxRkUzNTMwNEU5OEE0QTNDN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp5z0Qkk9UYqh4hJ44ffD5qFcF
b2F3TY6psao8MoNJlvAxs7ghY8+WtSlNSkXM7yHPKgNCAYd4Z480SKh6JPdo+8l6
4wFNTAzYpju/VGHG4R/+RQGos9B2JSoykkxGsK2EGUwdiVoAoR9vNjpuNmnNMTb4
/6NHyoNz8RA/kiYLaAfQD6akxLG6D3nlhnFpOptWJdSEHiJL8V+QzZJti1NpvV4a
fcCaGEwAQSeVt/8MTk3c/W8hKz3nw5OT1wLd85sPBTq+g/jugwiQToFz0LKjpKu/
duLefXkaHnMNOCRE2uw5rFYN2gqu5+zg3FJwCKAY7peR+ehgOPwlWd2f+7/5AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUMNsoN5qUU/KF4s0f41ME6YpKPH8wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzOTgzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqlNTANBgkqhkiG9w0BAQsFAAOCAQEAhh8X
f/ixzZvMRngJiySsfsyzsAA/UnRq23sED8Xlsl2e3SkaCpbGeUwIVYwbdaADQzM1
CTYmxCfe3CCl3fYMs2ZeZkUiXy0HTX98Xzpye70Mq1KCD+PjWyDEIJqKbNj9hCG3
n/Kr3gDYzKR/2IW1PNzmK0iJGlO77sitXvyZUEkLxGejM5mA0zYJB3YxOCRXYAvN
fb/fFCVXY6j5Zxp4i1lCPcpc26OMriHiievP17SgbCg/vGvytij+1tgMns9mkon6
jqVMhqs0LfDkQ6w1qKiymnWaO94jQfB2S1aLR/F0w3SOhy37bphSqZq4uoFw9uri
ZIBqcJPKVdCyCN/gTw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:05 2026 by rpki-client