Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144042.roa
File: AS144042.roa (raw, json)
Hash identifier: 0hS2gMENGok5p5B9Ww/lLDMPZOvdIbAF7yfthlkoRbc=
Subject key identifier: 2A:B5:2B:31:1C:D2:C8:5D:47:BE:62:93:74:48:97:0A:D2:7B:2C:01
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5A04B3CA5E2E1F695D66AC2CB73A6108517942FF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144042.roa
Signing time: Fri 22 May 2026 07:41:07 +0000
ROA not before: Fri 22 May 2026 07:36:07 +0000
ROA not after: Fri 21 May 2027 07:41:07 +0000
asID: 144042
IP address blocks: 240a:a570::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:04:b3:ca:5e:2e:1f:69:5d:66:ac:2c:b7:3a:61:08:51:79:42:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:36:07 2026 GMT
Not After : May 21 07:41:07 2027 GMT
Subject: CN=2AB52B311CD2C85D47BE62937448970AD27B2C01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7a:b2:6d:fd:9a:f4:2f:6f:0a:7b:20:8a:b7:
8c:2b:30:05:8c:80:cd:15:ab:ba:0e:24:42:95:4e:
1c:29:df:ef:54:a7:9c:b7:19:f5:ac:61:21:7b:51:
cb:ac:51:90:18:5f:0a:aa:5e:07:13:d7:e5:61:cc:
04:ba:56:ae:b9:38:26:76:bc:5b:8a:7a:2e:df:2d:
db:02:42:cb:38:78:54:b1:4e:98:f3:23:f0:51:9a:
4f:34:84:c2:ee:3e:a8:56:7d:a0:32:70:e6:77:97:
72:be:66:a5:0e:01:c6:a9:53:cb:4a:91:90:21:9c:
52:e0:a6:22:cd:97:34:d0:d1:df:b2:54:ac:23:8f:
70:ca:ac:54:56:44:a7:ed:81:1a:b4:4e:b3:e5:66:
58:fd:9f:9c:16:a1:a1:fd:0d:44:4b:50:d6:dc:ae:
f3:e2:2f:c8:bc:34:60:5a:b0:61:3f:0d:85:fc:8f:
83:17:dc:f8:10:e5:1c:91:4c:e3:09:6d:6f:87:33:
8d:8f:b5:be:94:10:d0:6f:84:79:28:66:94:3b:1b:
7c:17:65:18:0e:fb:bb:1d:1d:69:21:32:6d:9f:3e:
29:4d:c9:78:88:e0:88:75:8a:5f:a3:34:e0:78:b8:
79:f2:38:d1:81:08:16:a9:da:ee:f0:28:32:07:9c:
9b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B5:2B:31:1C:D2:C8:5D:47:BE:62:93:74:48:97:0A:D2:7B:2C:01
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144042.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a570::/32
Signature Algorithm: sha256WithRSAEncryption
8c:b3:d4:61:04:64:32:8e:8b:2f:f7:80:3b:a8:44:5d:5f:f7:
ce:54:84:c4:8d:75:d8:8f:47:98:01:91:e9:02:eb:aa:4d:44:
58:43:df:03:99:95:86:a6:33:95:04:18:ed:20:db:79:28:0d:
70:70:68:7e:1e:b7:1a:b4:aa:e1:1f:95:55:0f:f8:5f:dc:88:
ad:26:91:0a:46:a3:d2:af:e1:cf:30:69:65:82:64:fd:46:32:
57:58:3e:d1:5d:b6:16:d2:a6:86:66:8c:8a:5d:ad:52:f4:47:
a9:30:82:09:b6:6f:8b:0f:73:ac:4e:0a:81:7e:9a:36:6c:a5:
bf:47:72:f2:3e:15:cf:e0:6d:3b:6f:a9:a4:65:f4:d1:2f:9e:
94:ea:4d:51:57:24:f7:5a:d7:aa:fb:40:22:f7:43:13:b5:fe:
09:5e:4c:fa:46:5d:a5:6e:6e:2e:a4:c1:44:be:e0:03:54:cc:
99:c8:b1:be:5d:aa:bc:25:0a:31:96:42:2e:b2:36:cd:b8:7c:
1a:a1:65:69:ac:fd:a8:1a:08:c0:44:45:63:5f:23:d3:8a:18:
30:52:e8:d5:b5:9d:c4:99:dc:18:c5:0e:e0:49:71:a8:c8:16:
b2:32:12:2a:e6:6e:2f:8a:39:aa:8d:fd:34:d7:23:65:46:14:
86:1c:fb:6c
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUWgSzyl4uH2ldZqwstzphCFF5Qv8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzM2MDdaFw0yNzA1MjEwNzQxMDdaMDMxMTAvBgNV
BAMTKDJBQjUyQjMxMUNEMkM4NUQ0N0JFNjI5Mzc0NDg5NzBBRDI3QjJDMDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWerJt/Zr0L28KeyCKt4wrMAWM
gM0Vq7oOJEKVThwp3+9Up5y3GfWsYSF7UcusUZAYXwqqXgcT1+VhzAS6Vq65OCZ2
vFuKei7fLdsCQss4eFSxTpjzI/BRmk80hMLuPqhWfaAycOZ3l3K+ZqUOAcapU8tK
kZAhnFLgpiLNlzTQ0d+yVKwjj3DKrFRWRKftgRq0TrPlZlj9n5wWoaH9DURLUNbc
rvPiL8i8NGBasGE/DYX8j4MX3PgQ5RyRTOMJbW+HM42Ptb6UENBvhHkoZpQ7G3wX
ZRgO+7sdHWkhMm2fPilNyXiI4Ih1il+jNOB4uHnyONGBCBap2u7wKDIHnJtRAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUKrUrMRzSyF1HvmKTdEiXCtJ7LAEwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0MDQyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqlcDANBgkqhkiG9w0BAQsFAAOCAQEAjLPU
YQRkMo6LL/eAO6hEXV/3zlSExI112I9HmAGR6QLrqk1EWEPfA5mVhqYzlQQY7SDb
eSgNcHBofh63GrSq4R+VVQ/4X9yIrSaRCkaj0q/hzzBpZYJk/UYyV1g+0V22FtKm
hmaMil2tUvRHqTCCCbZviw9zrE4KgX6aNmylv0dy8j4Vz+BtO2+ppGX00S+elOpN
UVck91rXqvtAIvdDE7X+CV5M+kZdpW5uLqTBRL7gA1TMmcixvl2qvCUKMZZCLrI2
zbh8GqFlaaz9qBoIwERFY18j04oYMFLo1bWdxJncGMUO4ElxqMgWsjISKuZuL4o5
qo39NNcjZUYUhhz7bA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:27 2026 by rpki-client