Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144067.roa
File: AS144067.roa (raw, json)
Hash identifier: /Sx+ZJ18LajftXPBAmxHTAr9kyz4iHoLS/jy5lEiBh4=
Subject key identifier: 6E:09:37:97:FD:35:C4:7F:27:93:E2:0E:A0:29:E0:5D:88:35:24:99
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3104D7738206C729981192EF6339B5A81CDA31AC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144067.roa
Signing time: Mon 25 May 2026 06:28:44 +0000
ROA not before: Mon 25 May 2026 06:23:44 +0000
ROA not after: Mon 24 May 2027 06:28:44 +0000
asID: 144067
IP address blocks: 240a:a589::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:04:d7:73:82:06:c7:29:98:11:92:ef:63:39:b5:a8:1c:da:31:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:44 2026 GMT
Not After : May 24 06:28:44 2027 GMT
Subject: CN=6E093797FD35C47F2793E20EA029E05D88352499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f4:09:df:87:b4:c8:a9:cc:12:1b:e1:23:51:
0e:c2:e1:c8:60:09:3f:45:4b:b9:f1:70:fb:23:ce:
a8:77:65:15:12:d4:6e:66:99:e1:9f:01:3a:77:b7:
42:6f:39:a0:8c:f0:03:8b:2a:02:d2:51:85:e8:6e:
a1:03:d1:70:19:af:54:25:07:0d:f9:be:11:81:d0:
e7:ae:be:04:6a:95:0d:91:0a:c8:82:77:a9:c3:1a:
2b:19:70:a8:49:8f:64:50:01:2a:8a:0a:d1:a7:74:
19:ce:2f:0e:f4:c7:b0:52:f3:37:ca:2c:5d:64:3a:
47:6b:6f:84:f2:87:84:b8:e8:52:fe:fa:95:63:ce:
65:31:47:cb:2f:45:f6:c9:f1:df:5c:4c:42:88:6a:
ff:c3:1a:72:82:05:15:1b:a1:91:e8:a0:68:ff:05:
eb:a0:9d:d4:b4:6d:ce:f9:09:6d:1c:aa:a1:19:e6:
60:d2:e2:18:d2:8a:f1:b1:0c:8e:91:54:55:0e:93:
23:46:e2:ba:e7:e1:64:86:65:bb:c2:98:c4:33:a0:
b0:05:57:79:1c:9b:a5:95:ff:11:e2:aa:fa:bf:a8:
ed:c1:90:dd:55:ba:3e:5a:6d:b4:6d:f0:1e:18:f0:
06:19:08:c8:15:0d:b5:99:57:8e:94:fe:2d:72:37:
b9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:09:37:97:FD:35:C4:7F:27:93:E2:0E:A0:29:E0:5D:88:35:24:99
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144067.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a589::/32
Signature Algorithm: sha256WithRSAEncryption
59:0d:c9:42:ca:be:9c:51:cb:0c:60:a3:5c:a5:22:32:87:9a:
15:93:57:87:dd:08:07:78:ec:71:23:0e:c2:07:86:db:3b:be:
d1:7b:f1:9d:ed:be:5f:97:3f:7b:b1:1a:ab:63:c3:72:57:7e:
5a:dd:7f:9d:d3:4b:85:b0:81:8a:3b:45:f1:6c:4f:9e:b7:de:
6b:cb:96:8d:06:30:7b:a3:8a:24:d0:c5:35:67:69:7f:69:d7:
f1:38:44:79:1d:5d:bc:23:69:4c:36:4e:b9:80:d8:6d:f5:bd:
1b:7a:aa:c5:ad:89:81:a6:c4:af:af:b4:0f:3c:04:fc:55:5a:
03:7d:6a:6d:e0:7f:3a:cc:cd:3a:05:e4:bb:63:fd:6c:4a:0f:
45:35:ab:41:43:41:55:1a:77:49:da:b2:2b:31:2b:2f:da:f2:
f8:f1:a9:8b:4f:7c:a5:8f:ab:ce:6b:92:95:bb:b0:e1:a3:b2:
a6:da:e4:54:31:0c:12:ad:02:47:88:7a:6d:2a:95:31:90:4c:
e6:76:d7:e0:d8:4f:b9:6e:af:4e:16:57:19:42:7b:dd:04:8c:
62:d5:b6:b8:fa:bc:a1:02:a1:40:90:b8:0c:12:ff:fd:cd:25:
98:89:dd:7f:16:1e:00:2c:e8:79:af:2a:2d:75:b1:a0:18:76:
0c:65:c0:fe
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUMQTXc4IGxymYEZLvYzm1qBzaMawwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwNjIzNDRaFw0yNzA1MjQwNjI4NDRaMDMxMTAvBgNV
BAMTKDZFMDkzNzk3RkQzNUM0N0YyNzkzRTIwRUEwMjlFMDVEODgzNTI0OTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC39Anfh7TIqcwSG+EjUQ7C4chg
CT9FS7nxcPsjzqh3ZRUS1G5mmeGfATp3t0JvOaCM8AOLKgLSUYXobqED0XAZr1Ql
Bw35vhGB0OeuvgRqlQ2RCsiCd6nDGisZcKhJj2RQASqKCtGndBnOLw70x7BS8zfK
LF1kOkdrb4Tyh4S46FL++pVjzmUxR8svRfbJ8d9cTEKIav/DGnKCBRUboZHooGj/
BeugndS0bc75CW0cqqEZ5mDS4hjSivGxDI6RVFUOkyNG4rrn4WSGZbvCmMQzoLAF
V3kcm6WV/xHiqvq/qO3BkN1Vuj5abbRt8B4Y8AYZCMgVDbWZV46U/i1yN7njAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUbgk3l/01xH8nk+IOoCngXYg1JJkwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0MDY3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqliTANBgkqhkiG9w0BAQsFAAOCAQEAWQ3J
Qsq+nFHLDGCjXKUiMoeaFZNXh90IB3jscSMOwgeG2zu+0Xvxne2+X5c/e7Eaq2PD
cld+Wt1/ndNLhbCBijtF8WxPnrfea8uWjQYwe6OKJNDFNWdpf2nX8ThEeR1dvCNp
TDZOuYDYbfW9G3qqxa2JgabEr6+0DzwE/FVaA31qbeB/OszNOgXku2P9bEoPRTWr
QUNBVRp3SdqyKzErL9ry+PGpi098pY+rzmuSlbuw4aOyptrkVDEMEq0CR4h6bSqV
MZBM5nbX4NhPuW6vThZXGUJ73QSMYtW2uPq8oQKhQJC4DBL//c0lmIndfxYeACzo
ea8qLXWxoBh2DGXA/g==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:56 2026 by rpki-client