Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144028.roa
File: AS144028.roa (raw, json)
Hash identifier: AI4HkJTjmP5tgtX5wY/2sgzi7IKt8UlwPWo+pd1bjbc=
Subject key identifier: 9E:40:38:DB:A5:29:48:B1:19:ED:21:72:F7:0F:5E:CD:45:A3:C8:E7
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 021AC465FEF081F30604822FC77F5E280809197C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144028.roa
Signing time: Fri 22 May 2026 02:48:00 +0000
ROA not before: Fri 22 May 2026 02:43:00 +0000
ROA not after: Fri 21 May 2027 02:48:00 +0000
asID: 144028
IP address blocks: 240a:a562::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:1a:c4:65:fe:f0:81:f3:06:04:82:2f:c7:7f:5e:28:08:09:19:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:43:00 2026 GMT
Not After : May 21 02:48:00 2027 GMT
Subject: CN=9E4038DBA52948B119ED2172F70F5ECD45A3C8E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9e:71:47:c2:da:d4:02:72:b5:ee:74:15:91:
13:8a:ff:b6:e6:8a:b5:b7:d0:4e:14:c7:d3:47:d2:
d2:8d:ec:76:2c:39:cb:ba:40:c9:a7:5f:12:c5:20:
e9:f1:f4:a2:0e:f9:45:ce:d6:45:0b:c0:54:f9:f9:
1f:b5:a4:2c:92:e7:9d:a5:93:6d:9b:a0:10:43:29:
03:3b:f0:db:34:26:c3:9b:50:a6:19:e3:b1:b7:58:
23:ed:f2:81:72:58:d6:78:a2:bb:c6:c1:5a:ab:9f:
71:35:4c:c5:dc:87:3f:d0:d4:30:93:39:fc:4e:73:
ba:3f:21:b1:29:b0:9f:4e:b3:66:6c:c4:5e:95:7c:
e0:0a:ac:5a:ba:4d:36:8c:43:7f:f0:90:34:e2:e8:
f1:5f:df:7e:25:98:6b:a7:1c:b8:a8:ec:b6:96:9a:
02:b3:78:8b:5b:90:84:57:de:51:45:5a:f6:eb:60:
e3:78:99:d8:9d:e3:c3:46:8d:07:db:5e:55:34:0a:
60:19:44:8f:53:9f:8b:e7:2a:30:67:03:4e:e8:7c:
a1:03:a7:b9:9f:00:aa:b8:5a:a3:ac:32:33:5f:98:
e8:c0:04:cc:6b:e6:6b:ae:9c:8e:50:f3:ea:bf:52:
a8:3e:56:16:7d:33:4e:28:59:65:db:ad:4b:b3:b3:
32:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:40:38:DB:A5:29:48:B1:19:ED:21:72:F7:0F:5E:CD:45:A3:C8:E7
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144028.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a562::/32
Signature Algorithm: sha256WithRSAEncryption
bb:d1:18:be:b8:18:16:20:fe:7c:6c:5e:eb:1b:f0:28:43:ca:
e4:72:50:fd:6c:18:bb:9f:2a:42:7a:99:f0:df:a7:c9:4d:e5:
03:42:e5:09:04:59:e6:8e:8b:eb:1a:ab:ab:f2:d8:a2:8e:60:
96:a6:d8:9b:3a:7e:d4:e2:4e:5c:f2:59:da:97:bd:33:f0:4b:
c2:c9:23:c8:b1:27:75:f3:0c:bf:cf:1b:52:6c:f0:21:e2:df:
99:22:8f:ff:0c:07:36:a5:61:61:07:bf:31:6b:c3:ca:91:c7:
9a:2e:a5:91:54:a6:6c:d6:dd:9f:b3:3f:b6:f8:f2:ad:df:04:
1e:25:1b:d7:3c:3a:a7:01:f5:29:d5:6f:63:3f:61:78:82:67:
72:97:d4:e0:f2:c1:30:87:4b:60:cf:d8:49:b1:55:33:28:83:
ab:54:02:27:b0:87:55:bf:2b:44:f7:7a:6b:d1:f3:0d:b4:9c:
d1:19:41:ef:73:cd:c1:7b:92:6c:99:28:18:4b:a9:38:b7:89:
d3:b6:01:e8:06:0b:8c:b6:42:b3:1d:58:fc:d3:86:28:a1:91:
4a:47:72:ef:4d:29:43:7b:f2:06:fc:db:d1:26:36:d9:cd:c0:
3f:f7:0d:ed:ef:cb:12:25:b0:c3:6e:60:6e:28:65:96:62:79:
bb:8a:8d:c2
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUAhrEZf7wgfMGBIIvx39eKAgJGXwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwMjQzMDBaFw0yNzA1MjEwMjQ4MDBaMDMxMTAvBgNV
BAMTKDlFNDAzOERCQTUyOTQ4QjExOUVEMjE3MkY3MEY1RUNENDVBM0M4RTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGnnFHwtrUAnK17nQVkROK/7bm
irW30E4Ux9NH0tKN7HYsOcu6QMmnXxLFIOnx9KIO+UXO1kULwFT5+R+1pCyS552l
k22boBBDKQM78Ns0JsObUKYZ47G3WCPt8oFyWNZ4orvGwVqrn3E1TMXchz/Q1DCT
OfxOc7o/IbEpsJ9Os2ZsxF6VfOAKrFq6TTaMQ3/wkDTi6PFf334lmGunHLio7LaW
mgKzeItbkIRX3lFFWvbrYON4mdid48NGjQfbXlU0CmAZRI9Tn4vnKjBnA07ofKED
p7mfAKq4WqOsMjNfmOjABMxr5muunI5Q8+q/Uqg+VhZ9M04oWWXbrUuzszIPAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUnkA426UpSLEZ7SFy9w9ezUWjyOcwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0MDI4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqlYjANBgkqhkiG9w0BAQsFAAOCAQEAu9EY
vrgYFiD+fGxe6xvwKEPK5HJQ/WwYu58qQnqZ8N+nyU3lA0LlCQRZ5o6L6xqrq/LY
oo5glqbYmzp+1OJOXPJZ2pe9M/BLwskjyLEndfMMv88bUmzwIeLfmSKP/wwHNqVh
YQe/MWvDypHHmi6lkVSmbNbdn7M/tvjyrd8EHiUb1zw6pwH1KdVvYz9heIJncpfU
4PLBMIdLYM/YSbFVMyiDq1QCJ7CHVb8rRPd6a9HzDbSc0RlB73PNwXuSbJkoGEup
OLeJ07YB6AYLjLZCsx1Y/NOGKKGRSkdy700pQ3vyBvzb0SY22c3AP/cN7e/LEiWw
w25gbihllmJ5u4qNwg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:59 2026 by rpki-client