Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144058.roa
File: AS144058.roa (raw, json)
Hash identifier: MUmmxaovOUhJZHmrpmzrxAY+iZJYbKpfOdSqrDzMGJ8=
Subject key identifier: DC:A7:B5:BF:88:41:F2:38:E3:B3:AC:34:1C:69:4E:9E:FE:2B:75:57
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3AD496A91A40ADA93C601FAF83932EBF8E214E94
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144058.roa
Signing time: Fri 22 May 2026 07:41:03 +0000
ROA not before: Fri 22 May 2026 07:36:03 +0000
ROA not after: Fri 21 May 2027 07:41:03 +0000
asID: 144058
IP address blocks: 240a:a580::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:d4:96:a9:1a:40:ad:a9:3c:60:1f:af:83:93:2e:bf:8e:21:4e:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:36:03 2026 GMT
Not After : May 21 07:41:03 2027 GMT
Subject: CN=DCA7B5BF8841F238E3B3AC341C694E9EFE2B7557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4e:3a:26:0b:03:ee:3a:1a:a6:d2:e2:bd:00:
c7:b0:24:62:c3:0c:d0:e4:94:7c:a8:81:99:3f:b7:
d3:6d:55:e8:4b:bf:09:32:cf:ec:b3:64:8a:e6:48:
73:fa:b8:cc:6d:27:1b:8d:f1:50:4b:ce:3d:33:36:
3e:29:5a:ad:db:f4:19:83:55:0d:58:5b:7b:06:89:
e8:20:b7:a3:42:e5:11:ae:6d:e5:28:4a:9d:5a:6e:
e4:42:c4:d7:85:de:97:e6:a7:82:80:e1:9e:2f:71:
a5:6a:8b:24:1d:ae:e7:aa:40:16:b9:bd:59:f0:60:
c6:58:f8:99:cb:51:bd:21:39:83:dd:75:9b:e3:fc:
2f:a4:39:65:54:da:b7:de:84:a2:dd:cf:7a:09:29:
8f:2c:5e:c2:de:1b:1a:b7:7b:25:90:a3:90:89:1c:
29:54:ca:1d:1b:8c:ee:c0:81:48:d3:08:af:01:11:
05:37:87:30:76:8f:af:aa:75:f2:36:c5:bb:91:9d:
09:c6:f0:de:f9:b2:c7:84:a7:c2:c2:56:7c:e8:9b:
db:e6:9d:ac:59:7a:39:1f:f6:e9:0c:70:43:7e:11:
20:b7:78:10:2e:73:6a:b5:ec:c3:2d:29:ab:da:9c:
4c:80:cc:42:7f:1e:6d:46:d2:1a:9f:d8:6c:5d:07:
d9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A7:B5:BF:88:41:F2:38:E3:B3:AC:34:1C:69:4E:9E:FE:2B:75:57
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144058.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a580::/32
Signature Algorithm: sha256WithRSAEncryption
2d:5a:27:d1:24:62:f3:28:c9:f3:d5:ac:9e:59:24:92:99:2c:
5f:b9:d3:c0:75:0a:89:7c:f1:3f:cb:2a:17:39:e5:3e:f1:28:
be:98:0e:be:5b:c6:ec:d7:38:26:f3:68:a3:e8:97:5d:ea:46:
34:f9:f7:b2:24:40:b7:90:e4:44:c1:a3:58:b2:aa:e2:df:0f:
4c:10:da:3c:0e:8a:5c:b5:cc:55:54:6d:bf:ad:2e:e1:df:c9:
b3:9b:e0:ea:da:f5:16:59:68:99:c2:f7:31:b6:81:8a:b7:9d:
9d:d7:e6:43:55:33:c6:38:85:4c:0d:81:63:f5:89:70:98:fc:
40:8a:2e:6d:96:00:e2:7f:1e:71:ab:9a:2f:f4:b5:4f:44:d6:
e6:92:20:c5:9a:66:eb:8e:d7:02:a5:6e:6b:44:7a:27:16:24:
96:66:dd:95:c2:58:14:db:5d:03:b2:d4:d9:d1:ee:d5:b9:a6:
7a:34:a5:af:41:5e:b3:8b:64:4c:55:7e:2a:02:e8:fa:c8:89:
3a:f4:f1:4b:1d:be:dd:1a:17:a9:3f:0b:b8:79:bf:f4:51:36:
cc:bd:6c:e4:4b:95:54:b6:de:fc:f3:ee:0c:f1:c1:a5:47:b9:
a6:58:17:7e:11:bc:e8:15:a6:e6:59:2c:22:2b:2d:a0:5f:28:
13:f9:23:a8
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUOtSWqRpArak8YB+vg5Muv44hTpQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzM2MDNaFw0yNzA1MjEwNzQxMDNaMDMxMTAvBgNV
BAMTKERDQTdCNUJGODg0MUYyMzhFM0IzQUMzNDFDNjk0RTlFRkUyQjc1NTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUTjomCwPuOhqm0uK9AMewJGLD
DNDklHyogZk/t9NtVehLvwkyz+yzZIrmSHP6uMxtJxuN8VBLzj0zNj4pWq3b9BmD
VQ1YW3sGieggt6NC5RGubeUoSp1abuRCxNeF3pfmp4KA4Z4vcaVqiyQdrueqQBa5
vVnwYMZY+JnLUb0hOYPddZvj/C+kOWVU2rfehKLdz3oJKY8sXsLeGxq3eyWQo5CJ
HClUyh0bjO7AgUjTCK8BEQU3hzB2j6+qdfI2xbuRnQnG8N75sseEp8LCVnzom9vm
naxZejkf9ukMcEN+ESC3eBAuc2q17MMtKavanEyAzEJ/Hm1G0hqf2GxdB9n7AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU3Ke1v4hB8jjjs6w0HGlOnv4rdVcwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0MDU4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqlgDANBgkqhkiG9w0BAQsFAAOCAQEALVon
0SRi8yjJ89WsnlkkkpksX7nTwHUKiXzxP8sqFznlPvEovpgOvlvG7Nc4JvNoo+iX
XepGNPn3siRAt5DkRMGjWLKq4t8PTBDaPA6KXLXMVVRtv60u4d/Js5vg6tr1Fllo
mcL3MbaBiredndfmQ1UzxjiFTA2BY/WJcJj8QIoubZYA4n8ecauaL/S1T0TW5pIg
xZpm647XAqVua0R6JxYklmbdlcJYFNtdA7LU2dHu1bmmejSlr0Fes4tkTFV+KgLo
+siJOvTxSx2+3RoXqT8LuHm/9FE2zL1s5EuVVLbe/PPuDPHBpUe5plgXfhG86BWm
5lksIistoF8oE/kjqA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:03 2026 by rpki-client