Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143999.roa
File: AS143999.roa (raw, json)
Hash identifier: lf0ERX1YYgA3Y6DZXi9GWyRiM+EJpnaHpXQqceYLe78=
Subject key identifier: 5C:E7:1E:9E:04:FA:45:ED:62:6C:2F:99:28:D7:D1:96:8F:9E:CC:3D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 76E489ED0396A63DD6C6400A7940647067A9DF41
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143999.roa
Signing time: Fri 22 May 2026 07:32:11 +0000
ROA not before: Fri 22 May 2026 07:27:11 +0000
ROA not after: Fri 21 May 2027 07:32:11 +0000
asID: 143999
IP address blocks: 240a:a545::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:e4:89:ed:03:96:a6:3d:d6:c6:40:0a:79:40:64:70:67:a9:df:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:11 2026 GMT
Not After : May 21 07:32:11 2027 GMT
Subject: CN=5CE71E9E04FA45ED626C2F9928D7D1968F9ECC3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:81:74:b3:97:53:ec:eb:a2:c3:df:9b:cb:28:
95:0b:76:14:df:9d:c5:05:5f:ba:d3:82:aa:97:1a:
8a:28:67:f0:88:0d:f9:07:a4:1f:e9:5f:5e:ce:c4:
ca:eb:09:aa:58:e3:e9:57:c3:c7:27:a3:35:10:c8:
64:88:86:3e:cf:ce:62:eb:e5:9e:01:3f:fd:2a:15:
a9:55:fa:ae:27:3c:73:69:e8:a2:a3:17:67:8d:a5:
a2:c6:b0:70:2d:d6:ca:16:98:62:c3:55:82:40:be:
09:8a:e0:5c:d9:8e:1f:13:56:22:fb:28:84:19:69:
15:2d:bb:a7:18:3a:cb:4e:17:5f:8c:7a:08:69:b1:
13:0b:bd:3a:fc:6b:cf:23:c8:9d:56:5a:d1:3e:01:
4a:4c:fb:64:9f:1b:ba:63:58:36:06:e6:34:a2:4a:
6e:8a:34:d4:64:33:c1:c4:cb:77:7d:a0:42:91:36:
16:2b:40:98:46:9f:fa:97:c6:50:b9:bb:fd:e9:79:
36:79:e6:72:46:e2:d9:1c:f2:50:73:46:a0:b2:19:
bf:fa:ef:16:56:6a:ae:f0:50:e8:5f:e1:66:90:b9:
c5:c3:40:17:57:d0:a7:53:e2:d5:03:3c:b1:cf:56:
f1:f6:11:be:99:96:4f:52:d9:4a:76:ba:12:a9:42:
95:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:E7:1E:9E:04:FA:45:ED:62:6C:2F:99:28:D7:D1:96:8F:9E:CC:3D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143999.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a545::/32
Signature Algorithm: sha256WithRSAEncryption
29:e4:13:c4:eb:c6:d9:72:8e:ac:ff:9c:90:df:67:69:eb:24:
5d:9a:ec:69:b8:5b:a0:c5:fa:6b:9c:27:61:b5:ee:bc:a1:6b:
5d:32:45:aa:34:83:0d:7a:1f:91:95:6c:dc:9b:af:45:7a:ae:
fb:40:38:1f:ac:c3:ba:13:e4:31:2b:da:ac:2b:40:83:b9:bb:
3b:33:65:0f:62:2f:b4:76:b7:9b:8c:e7:b2:4e:5b:66:e6:d8:
6e:84:a0:de:75:ce:ff:a8:c9:9d:5d:4b:f9:e7:40:9e:10:57:
86:67:6a:76:07:8d:f7:e8:e3:79:a0:7a:7c:6a:a5:b6:b4:73:
16:8a:6d:bb:3f:7b:e3:b7:61:6c:a3:f0:69:83:a7:d6:22:a7:
37:50:f1:fd:c4:20:12:f5:4f:88:49:b7:c8:10:18:aa:d7:06:
c6:93:80:60:b3:0d:81:16:0b:4c:90:6d:7d:3d:de:03:61:c1:
62:ac:de:e9:43:ad:0d:7d:84:bf:7c:8c:7f:f8:3f:c5:fd:49:
d0:40:8a:d7:9d:c0:de:81:60:72:ec:f6:90:d4:47:ce:21:fd:
d8:9f:98:be:c4:a0:29:56:95:25:21:a7:fe:55:a2:7d:67:09:
a6:b1:7f:1b:0a:70:ec:f4:bb:c4:3f:5c:62:61:8e:11:ba:68:
e5:52:e4:6d
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUduSJ7QOWpj3WxkAKeUBkcGep30EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzI3MTFaFw0yNzA1MjEwNzMyMTFaMDMxMTAvBgNV
BAMTKDVDRTcxRTlFMDRGQTQ1RUQ2MjZDMkY5OTI4RDdEMTk2OEY5RUNDM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEgXSzl1Ps66LD35vLKJULdhTf
ncUFX7rTgqqXGoooZ/CIDfkHpB/pX17OxMrrCapY4+lXw8cnozUQyGSIhj7PzmLr
5Z4BP/0qFalV+q4nPHNp6KKjF2eNpaLGsHAt1soWmGLDVYJAvgmK4FzZjh8TViL7
KIQZaRUtu6cYOstOF1+MeghpsRMLvTr8a88jyJ1WWtE+AUpM+2SfG7pjWDYG5jSi
Sm6KNNRkM8HEy3d9oEKRNhYrQJhGn/qXxlC5u/3peTZ55nJG4tkc8lBzRqCyGb/6
7xZWaq7wUOhf4WaQucXDQBdX0KdT4tUDPLHPVvH2Eb6Zlk9S2Up2uhKpQpVXAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUXOcengT6Re1ibC+ZKNfRlo+ezD0wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzOTk5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqlRTANBgkqhkiG9w0BAQsFAAOCAQEAKeQT
xOvG2XKOrP+ckN9naeskXZrsabhboMX6a5wnYbXuvKFrXTJFqjSDDXofkZVs3Juv
RXqu+0A4H6zDuhPkMSvarCtAg7m7OzNlD2IvtHa3m4znsk5bZubYboSg3nXO/6jJ
nV1L+edAnhBXhmdqdgeN9+jjeaB6fGqltrRzFoptuz9747dhbKPwaYOn1iKnN1Dx
/cQgEvVPiEm3yBAYqtcGxpOAYLMNgRYLTJBtfT3eA2HBYqze6UOtDX2Ev3yMf/g/
xf1J0ECK153A3oFgcuz2kNRHziH92J+YvsSgKVaVJSGn/lWifWcJprF/Gwpw7PS7
xD9cYmGOEbpo5VLkbQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:39 2026 by rpki-client