Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144025.roa
File: AS144025.roa (raw, json)
Hash identifier: e0nwxIsfImd1Z3MHKr+UiZItNpbKIXZ41g5eqQgEjYM=
Subject key identifier: DA:C7:AE:15:A8:60:CE:62:88:32:0E:FC:5E:74:FE:BC:84:A6:E7:A3
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2EDE2D22EF2DCD53A4B85EA71D997A4DABD11044
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144025.roa
Signing time: Fri 22 May 2026 07:08:49 +0000
ROA not before: Fri 22 May 2026 07:03:49 +0000
ROA not after: Fri 21 May 2027 07:08:49 +0000
asID: 144025
IP address blocks: 240a:a55f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:de:2d:22:ef:2d:cd:53:a4:b8:5e:a7:1d:99:7a:4d:ab:d1:10:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:03:49 2026 GMT
Not After : May 21 07:08:49 2027 GMT
Subject: CN=DAC7AE15A860CE6288320EFC5E74FEBC84A6E7A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d9:41:d0:37:1b:ff:ad:bf:70:aa:24:86:d1:
07:7c:f2:af:77:92:00:1f:ba:bf:7b:10:c9:4f:9c:
65:78:19:73:d8:9e:f1:22:40:8d:7d:12:a2:9f:c4:
44:4a:5e:c5:1f:31:bc:5f:6b:4e:47:b1:94:c1:b4:
6c:df:c6:a2:be:ba:60:89:f8:b6:15:58:f6:6c:99:
57:cb:6c:74:4e:a6:c4:7d:49:27:94:9b:69:1d:bb:
47:41:10:d3:02:78:51:93:85:da:e4:bf:76:26:b0:
45:52:e9:11:a5:66:a9:8f:af:1b:db:99:ec:e0:2f:
60:3d:90:7d:fb:63:14:40:02:79:1a:03:73:8a:86:
76:80:9a:80:a4:35:84:c9:ae:df:b1:6d:8a:2e:01:
64:2d:70:ad:59:58:12:0a:a5:15:75:94:00:dc:a5:
c3:7b:da:a2:1b:68:76:9c:bc:c3:e9:0f:6f:5b:60:
74:3c:ac:eb:95:71:18:eb:0a:43:ac:1f:59:4e:c7:
7f:67:78:c3:e1:45:8b:52:8a:2e:8b:60:e3:da:6c:
0a:d1:c5:ca:65:e6:95:56:0a:9e:82:1f:29:80:c6:
f0:c6:9a:c3:3d:ef:49:1e:97:c4:7b:37:49:13:55:
10:52:3e:05:8b:b7:63:e4:96:33:fd:3a:40:7c:ca:
cb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C7:AE:15:A8:60:CE:62:88:32:0E:FC:5E:74:FE:BC:84:A6:E7:A3
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144025.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a55f::/32
Signature Algorithm: sha256WithRSAEncryption
bb:cb:bb:e8:3a:47:d0:bb:d6:5c:5f:5f:f6:05:f8:a9:6b:3a:
cc:93:d0:7f:4a:a8:33:fe:dc:7e:29:db:af:7d:0c:11:f3:be:
8b:7a:f8:c5:d9:b6:08:77:3f:54:93:53:db:59:d4:59:d4:54:
60:64:ac:2b:e6:7c:46:8d:eb:e2:b1:84:d9:6d:87:fb:f9:f1:
1b:fb:28:8d:e9:b9:0f:6c:b2:c9:2e:87:a6:b8:16:66:88:94:
69:e4:d8:df:51:22:33:b8:c2:dc:e5:f0:87:84:92:66:96:33:
ee:f5:f7:c4:3e:05:59:1e:9c:99:de:6d:2a:3f:c0:73:65:96:
a5:7f:65:38:61:31:99:3d:50:8b:ea:40:a8:e6:75:02:fd:a4:
e3:b6:77:e5:34:c8:f4:7d:0a:bf:00:cb:e5:a1:25:3f:7b:b2:
b2:3e:56:2d:bd:b8:0a:cc:05:4e:f5:3d:76:98:d9:d1:68:16:
3f:51:9c:0d:e9:05:e1:35:f1:1f:ec:37:14:67:ef:9f:c1:2f:
c2:87:84:cf:a2:27:34:05:65:0f:f5:2c:37:66:11:85:aa:bd:
0d:46:ac:24:e3:ff:cb:78:1c:8b:fd:aa:f9:2e:aa:2c:f1:ba:
50:28:c4:c0:a8:df:1b:3b:d0:28:20:52:3a:cc:b6:b7:82:2e:
2e:ac:52:ed
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIULt4tIu8tzVOkuF6nHZl6TavREEQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzAzNDlaFw0yNzA1MjEwNzA4NDlaMDMxMTAvBgNV
BAMTKERBQzdBRTE1QTg2MENFNjI4ODMyMEVGQzVFNzRGRUJDODRBNkU3QTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq2UHQNxv/rb9wqiSG0Qd88q93
kgAfur97EMlPnGV4GXPYnvEiQI19EqKfxERKXsUfMbxfa05HsZTBtGzfxqK+umCJ
+LYVWPZsmVfLbHROpsR9SSeUm2kdu0dBENMCeFGThdrkv3YmsEVS6RGlZqmPrxvb
mezgL2A9kH37YxRAAnkaA3OKhnaAmoCkNYTJrt+xbYouAWQtcK1ZWBIKpRV1lADc
pcN72qIbaHacvMPpD29bYHQ8rOuVcRjrCkOsH1lOx39neMPhRYtSii6LYOPabArR
xcpl5pVWCp6CHymAxvDGmsM970kel8R7N0kTVRBSPgWLt2PkljP9OkB8ysv9AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU2seuFahgzmKIMg78XnT+vISm56MwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0MDI1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqlXzANBgkqhkiG9w0BAQsFAAOCAQEAu8u7
6DpH0LvWXF9f9gX4qWs6zJPQf0qoM/7cfinbr30MEfO+i3r4xdm2CHc/VJNT21nU
WdRUYGSsK+Z8Ro3r4rGE2W2H+/nxG/sojem5D2yyyS6HprgWZoiUaeTY31EiM7jC
3OXwh4SSZpYz7vX3xD4FWR6cmd5tKj/Ac2WWpX9lOGExmT1Qi+pAqOZ1Av2k47Z3
5TTI9H0KvwDL5aElP3uysj5WLb24CswFTvU9dpjZ0WgWP1GcDekF4TXxH+w3FGfv
n8EvwoeEz6InNAVlD/UsN2YRhaq9DUasJOP/y3gci/2q+S6qLPG6UCjEwKjfGzvQ
KCBSOsy2t4IuLqxS7Q==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:47 2026 by rpki-client