Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143984.roa
File: AS143984.roa (raw, json)
Hash identifier: /i7KoRWGgWKXS+F894KIPtGFhhlZnqa00dxgY4EBTKo=
Subject key identifier: BA:26:C3:8A:86:C4:23:EF:AA:77:F0:B0:C3:01:31:40:85:C9:00:79
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 16784F994433B789B58C4946EFB28F62CF75EF2E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143984.roa
Signing time: Fri 22 May 2026 04:08:12 +0000
ROA not before: Fri 22 May 2026 04:03:12 +0000
ROA not after: Fri 21 May 2027 04:08:12 +0000
asID: 143984
IP address blocks: 240a:a536::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:78:4f:99:44:33:b7:89:b5:8c:49:46:ef:b2:8f:62:cf:75:ef:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:12 2026 GMT
Not After : May 21 04:08:12 2027 GMT
Subject: CN=BA26C38A86C423EFAA77F0B0C301314085C90079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d3:bc:fe:c1:a2:bf:2c:b5:3b:44:60:c1:da:
6a:d2:3a:8c:05:87:e8:7e:2a:32:53:13:54:1f:7d:
54:fc:11:1d:67:93:9e:05:38:bd:a2:db:ee:58:88:
7d:9e:02:fb:94:90:ca:23:d5:56:aa:5d:ca:e3:1d:
61:17:b6:b7:cb:ff:e7:e3:c9:cf:c3:b9:7e:48:1a:
9c:69:39:07:69:5b:41:34:77:01:45:0b:44:0b:3e:
b5:f6:d0:12:21:48:af:02:7a:2c:5d:4e:ef:1e:ec:
d0:d1:cd:06:d3:82:49:b0:39:ee:3a:56:ab:45:ec:
4f:29:99:b6:f3:df:7e:6e:20:3d:f4:6d:59:86:25:
c2:f7:69:53:ac:88:56:5c:2c:39:43:48:7f:2a:d0:
f7:da:6a:50:4c:66:74:19:60:48:09:07:b4:db:d9:
cd:3c:ab:77:4f:ca:ad:d5:5c:ca:c0:04:36:95:e5:
c5:d9:7c:ea:e2:9a:f6:e9:af:25:02:10:66:c3:84:
d3:28:d5:0e:e4:28:6f:92:b0:6a:6d:b2:9b:af:2c:
0c:8b:6d:7d:26:56:9d:2c:34:b1:9a:a0:42:f6:4d:
a7:19:61:a5:63:ed:6b:ad:3f:3c:e6:91:9e:aa:47:
7a:e3:50:5a:29:e4:fc:14:06:d7:08:56:65:40:e9:
57:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:26:C3:8A:86:C4:23:EF:AA:77:F0:B0:C3:01:31:40:85:C9:00:79
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143984.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a536::/32
Signature Algorithm: sha256WithRSAEncryption
b7:9a:68:cb:6c:95:a2:7d:f0:ee:aa:7e:f5:46:9d:96:f9:3a:
7c:b1:27:10:42:a2:48:c7:de:51:9f:1b:fb:42:29:29:92:c3:
da:de:33:74:3e:75:da:da:4e:ab:3f:4f:63:92:6e:53:af:c7:
3e:c6:0f:b1:1e:24:55:b9:97:c7:28:f6:13:52:f1:df:a2:f3:
de:1e:cd:98:34:b1:92:2d:c1:d9:43:7c:60:fc:e7:c3:73:ce:
6a:b0:5b:25:8a:06:84:29:e8:64:b9:4c:ee:28:d6:28:03:53:
a0:8d:f5:01:73:34:5a:40:16:31:3a:eb:1a:d5:7c:c2:cf:f1:
46:3a:ec:2d:b9:f2:50:e7:9a:2d:47:a9:fa:97:1f:5a:4c:9d:
02:35:cf:0f:d2:de:b0:5f:5d:29:d5:a8:49:14:50:e5:21:ec:
35:9e:60:39:f5:7e:cb:68:13:75:b2:91:2c:1a:3e:7f:dd:67:
d5:7f:7a:3a:25:31:4a:7b:e8:85:7b:d7:f2:14:5e:e8:9b:16:
01:44:31:f5:20:52:3f:da:44:0b:2b:36:7e:a7:a8:a9:90:08:
40:27:45:47:3e:a2:8b:de:1f:3c:dc:a1:77:58:cf:7f:ec:e8:
06:ae:de:2d:d4:dd:5d:91:45:a1:b8:be:b6:23:20:fa:8d:5a:
29:20:e6:46
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUFnhPmUQzt4m1jElG77KPYs917y4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNDAzMTJaFw0yNzA1MjEwNDA4MTJaMDMxMTAvBgNV
BAMTKEJBMjZDMzhBODZDNDIzRUZBQTc3RjBCMEMzMDEzMTQwODVDOTAwNzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo07z+waK/LLU7RGDB2mrSOowF
h+h+KjJTE1QffVT8ER1nk54FOL2i2+5YiH2eAvuUkMoj1VaqXcrjHWEXtrfL/+fj
yc/DuX5IGpxpOQdpW0E0dwFFC0QLPrX20BIhSK8CeixdTu8e7NDRzQbTgkmwOe46
VqtF7E8pmbbz335uID30bVmGJcL3aVOsiFZcLDlDSH8q0PfaalBMZnQZYEgJB7Tb
2c08q3dPyq3VXMrABDaV5cXZfOrimvbpryUCEGbDhNMo1Q7kKG+SsGptspuvLAyL
bX0mVp0sNLGaoEL2TacZYaVj7WutPzzmkZ6qR3rjUFop5PwUBtcIVmVA6Vd1AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUuibDiobEI++qd/CwwwExQIXJAHkwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzOTg0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqlNjANBgkqhkiG9w0BAQsFAAOCAQEAt5po
y2yVon3w7qp+9Uadlvk6fLEnEEKiSMfeUZ8b+0IpKZLD2t4zdD512tpOqz9PY5Ju
U6/HPsYPsR4kVbmXxyj2E1Lx36Lz3h7NmDSxki3B2UN8YPznw3POarBbJYoGhCno
ZLlM7ijWKANToI31AXM0WkAWMTrrGtV8ws/xRjrsLbnyUOeaLUep+pcfWkydAjXP
D9LesF9dKdWoSRRQ5SHsNZ5gOfV+y2gTdbKRLBo+f91n1X96OiUxSnvohXvX8hRe
6JsWAUQx9SBSP9pECys2fqeoqZAIQCdFRz6ii94fPNyhd1jPf+zoBq7eLdTdXZFF
obi+tiMg+o1aKSDmRg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:39 2026 by rpki-client