Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143990.roa
File: AS143990.roa (raw, json)
Hash identifier: 1twFUgFlZJq/t47SHLjxtk2fsKRFtTCNZrxUWFInzS8=
Subject key identifier: 85:34:3A:7A:39:18:70:F1:BA:DF:D1:C8:14:18:9E:04:7D:59:7D:79
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 77DEE412D4007072B4133E88EA00E983B213E0FE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143990.roa
Signing time: Mon 25 May 2026 01:20:07 +0000
ROA not before: Mon 25 May 2026 01:15:07 +0000
ROA not after: Mon 24 May 2027 01:20:07 +0000
asID: 143990
IP address blocks: 240a:a53c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:de:e4:12:d4:00:70:72:b4:13:3e:88:ea:00:e9:83:b2:13:e0:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:07 2026 GMT
Not After : May 24 01:20:07 2027 GMT
Subject: CN=85343A7A391870F1BADFD1C814189E047D597D79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:12:f8:dc:86:2e:90:bd:e7:0e:b7:44:1d:ea:
34:89:64:ed:6a:4a:5c:03:92:89:d2:b4:7c:31:b6:
67:aa:d0:46:a9:9f:b9:7f:a8:ad:4e:44:5b:3c:40:
c1:03:2b:7d:56:ca:2f:78:f3:50:12:50:ac:f3:10:
7b:af:ff:b2:88:dd:d2:0a:9f:ae:48:3e:90:f7:eb:
65:b3:62:ba:51:d4:9e:31:3b:1a:5e:f9:3b:e2:de:
29:c4:0c:6f:ef:e7:dc:99:b1:ab:7e:70:3d:dc:d0:
23:d1:17:fc:d1:01:a3:50:be:8d:a9:67:10:d1:99:
e4:e2:01:e5:79:c1:92:b9:90:28:85:54:4a:4e:91:
96:23:cb:ff:32:49:9b:75:fe:c7:4c:6a:4f:34:e6:
be:ca:84:de:0b:75:b0:e8:a5:a9:41:b9:1a:c0:d0:
d6:be:9b:6b:39:12:fc:a1:8d:5f:1e:aa:64:e8:84:
1d:9b:7d:5f:a2:4a:82:7d:08:5f:08:01:21:a3:fb:
a4:a3:33:9c:3a:cd:e8:eb:e1:fb:c7:25:ad:d0:d4:
80:1d:6a:22:ca:74:33:24:20:b3:c8:ef:ff:2c:79:
7e:ef:7b:33:b9:df:46:d4:2c:0e:c7:52:aa:50:d1:
f5:5a:2d:38:7f:5c:53:e7:cd:e0:f7:59:d0:51:b3:
a1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:34:3A:7A:39:18:70:F1:BA:DF:D1:C8:14:18:9E:04:7D:59:7D:79
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143990.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a53c::/32
Signature Algorithm: sha256WithRSAEncryption
88:f5:86:3c:b8:2f:61:69:f5:70:e7:cf:12:36:7e:ad:b9:59:
d9:ac:0a:5d:e8:f4:95:5b:bf:c8:fa:73:9c:32:80:65:02:23:
4b:95:e3:d6:36:58:6d:10:4b:a6:e2:5c:ab:4f:c8:5b:0e:45:
4b:7d:f4:ee:11:b6:ee:39:d1:dd:c5:ed:1f:07:c5:94:ec:9f:
a7:f3:25:3e:ce:87:3c:98:7a:af:8e:8f:d5:b8:a4:16:d8:00:
90:53:11:b6:0f:4a:e1:bc:8d:b5:05:2f:09:27:44:db:1c:ed:
59:f7:6a:65:55:f9:1d:69:25:e6:b0:f0:8c:99:50:cf:f1:6a:
a3:9f:38:db:28:de:58:a9:6b:75:84:cc:d6:02:24:62:b1:ac:
ec:98:e2:72:86:2f:0f:fa:e1:7e:5d:91:e4:e4:89:b5:07:f4:
55:01:ac:fb:48:ae:7d:c3:24:ad:a5:dc:af:9b:21:b2:3c:d8:
73:74:0a:78:89:b6:cf:e0:75:4d:96:30:b8:9d:64:15:f0:69:
74:ce:f9:1b:db:ad:b5:25:0d:bb:a9:cc:28:b2:11:b1:79:17:
1f:c4:1f:06:f6:91:9f:9d:ae:0d:ed:df:c2:d4:d1:59:97:27:
93:dd:6c:86:aa:77:78:79:13:68:8a:94:f0:52:97:66:b7:fb:
21:88:ba:1c
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUd97kEtQAcHK0Ez6I6gDpg7IT4P4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTE1MDdaFw0yNzA1MjQwMTIwMDdaMDMxMTAvBgNV
BAMTKDg1MzQzQTdBMzkxODcwRjFCQURGRDFDODE0MTg5RTA0N0Q1OTdENzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhEvjchi6QvecOt0Qd6jSJZO1q
SlwDkonStHwxtmeq0Eapn7l/qK1ORFs8QMEDK31Wyi9481ASUKzzEHuv/7KI3dIK
n65IPpD362WzYrpR1J4xOxpe+Tvi3inEDG/v59yZsat+cD3c0CPRF/zRAaNQvo2p
ZxDRmeTiAeV5wZK5kCiFVEpOkZYjy/8ySZt1/sdMak805r7KhN4LdbDopalBuRrA
0Na+m2s5EvyhjV8eqmTohB2bfV+iSoJ9CF8IASGj+6SjM5w6zejr4fvHJa3Q1IAd
aiLKdDMkILPI7/8seX7vezO530bULA7HUqpQ0fVaLTh/XFPnzeD3WdBRs6GnAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUhTQ6ejkYcPG639HIFBieBH1ZfXkwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzOTkwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqlPDANBgkqhkiG9w0BAQsFAAOCAQEAiPWG
PLgvYWn1cOfPEjZ+rblZ2awKXej0lVu/yPpznDKAZQIjS5Xj1jZYbRBLpuJcq0/I
Ww5FS3307hG27jnR3cXtHwfFlOyfp/MlPs6HPJh6r46P1bikFtgAkFMRtg9K4byN
tQUvCSdE2xztWfdqZVX5HWkl5rDwjJlQz/Fqo5842yjeWKlrdYTM1gIkYrGs7Jji
coYvD/rhfl2R5OSJtQf0VQGs+0iufcMkraXcr5shsjzYc3QKeIm2z+B1TZYwuJ1k
FfBpdM75G9uttSUNu6nMKLIRsXkXH8QfBvaRn52uDe3fwtTRWZcnk91shqp3eHkT
aIqU8FKXZrf7IYi6HA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:03 2026 by rpki-client