Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144070.roa
File: AS144070.roa (raw, json)
Hash identifier: gVamBlOieHksyDpq5Fbe+nVADXBSUpnBts2/YOion3I=
Subject key identifier: 66:28:15:75:78:03:0B:C2:42:38:5A:ED:D5:11:D4:C7:A5:E1:70:40
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 45BB91E17C55A43CE8B6E428AF4C62BFCA04701E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144070.roa
Signing time: Mon 25 May 2026 03:19:15 +0000
ROA not before: Mon 25 May 2026 03:14:15 +0000
ROA not after: Mon 24 May 2027 03:19:15 +0000
asID: 144070
IP address blocks: 240a:a58c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:bb:91:e1:7c:55:a4:3c:e8:b6:e4:28:af:4c:62:bf:ca:04:70:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:15 2026 GMT
Not After : May 24 03:19:15 2027 GMT
Subject: CN=6628157578030BC242385AEDD511D4C7A5E17040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9b:47:e1:da:5c:0b:6d:67:1f:64:f6:f5:cb:
46:b4:a4:23:13:4d:da:8c:a3:a7:20:b5:cb:62:de:
62:de:85:9d:4d:c0:53:46:2e:66:1a:c4:2c:5c:93:
84:91:e7:de:17:7c:97:76:89:14:0c:20:15:ba:be:
66:5a:7a:3a:bf:56:83:b9:f6:ff:87:85:fb:00:d3:
6c:85:fc:17:5f:a6:9a:5b:58:ff:1a:a3:20:1d:37:
91:91:b2:f1:71:79:00:c7:2c:35:bc:73:55:1d:0a:
c3:4b:cc:5f:fc:38:9c:00:36:0f:68:c5:1d:41:e4:
c8:1b:15:76:bb:b1:27:61:3e:95:b8:89:95:7a:b9:
a4:d4:9b:de:b4:7a:73:df:5b:14:61:21:f5:f5:07:
a0:b9:1a:62:43:07:2c:9c:03:0f:c4:10:a0:ca:3f:
5d:41:5d:19:76:12:24:2d:32:a0:5c:db:6e:9c:35:
51:b6:21:9e:44:66:eb:51:34:e3:00:ec:30:36:54:
6e:e1:db:7f:34:46:25:ce:d8:d1:dc:1a:a3:74:b4:
c9:36:35:33:02:aa:ce:35:bf:fc:57:53:5c:09:1b:
75:5e:35:a5:40:bb:ea:70:a0:b0:8b:3c:40:de:aa:
96:06:09:3d:1f:1b:22:78:45:8d:34:0c:da:ca:e3:
db:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:28:15:75:78:03:0B:C2:42:38:5A:ED:D5:11:D4:C7:A5:E1:70:40
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144070.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a58c::/32
Signature Algorithm: sha256WithRSAEncryption
4a:f9:05:63:52:75:77:69:4c:fa:ed:27:b3:c0:4d:6e:60:1c:
cf:dc:8c:e9:9b:ca:bc:d5:25:b4:61:dc:a9:09:37:85:4d:35:
ed:18:71:b5:f5:e1:4b:76:87:f1:c3:b4:da:d6:78:bf:47:e0:
61:93:06:9f:8a:d5:ce:df:6e:34:2d:28:5f:c5:8f:f4:50:c3:
ff:b4:17:58:1a:ad:a9:e4:fd:96:f0:4f:ba:55:f8:f2:1d:53:
15:1a:46:aa:8c:52:32:e1:ba:ab:67:ea:8f:50:41:9f:81:9f:
94:73:a9:f4:09:42:f6:59:b3:66:55:62:5d:fc:2b:97:a7:a5:
26:e1:9e:a3:c4:ae:f1:92:8d:2a:45:2a:fc:44:75:12:f1:b1:
d5:8f:3b:2c:95:5b:c8:f9:b2:fd:d1:76:8b:81:b3:0d:7f:de:
40:8d:8f:30:37:36:83:57:75:33:b0:c9:a7:49:4d:bb:d8:38:
4a:c3:75:c6:fe:9b:c7:e6:a4:87:d0:f1:c8:19:9e:20:dd:9a:
60:36:22:b0:21:11:ea:3a:0f:9c:bb:be:7c:fa:86:58:14:5e:
ca:cb:55:4f:37:0e:10:42:99:2e:f9:16:60:39:b6:70:5b:26:
25:ab:e4:f9:23:cc:f6:62:fa:22:9b:e1:76:76:29:0e:59:c7:
b4:a3:3f:ba
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIURbuR4XxVpDzotuQor0xiv8oEcB4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMzE0MTVaFw0yNzA1MjQwMzE5MTVaMDMxMTAvBgNV
BAMTKDY2MjgxNTc1NzgwMzBCQzI0MjM4NUFFREQ1MTFENEM3QTVFMTcwNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvm0fh2lwLbWcfZPb1y0a0pCMT
TdqMo6cgtcti3mLehZ1NwFNGLmYaxCxck4SR594XfJd2iRQMIBW6vmZaejq/VoO5
9v+HhfsA02yF/BdfpppbWP8aoyAdN5GRsvFxeQDHLDW8c1UdCsNLzF/8OJwANg9o
xR1B5MgbFXa7sSdhPpW4iZV6uaTUm960enPfWxRhIfX1B6C5GmJDByycAw/EEKDK
P11BXRl2EiQtMqBc226cNVG2IZ5EZutRNOMA7DA2VG7h2380RiXO2NHcGqN0tMk2
NTMCqs41v/xXU1wJG3VeNaVAu+pwoLCLPEDeqpYGCT0fGyJ4RY00DNrK49sDAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUZigVdXgDC8JCOFrt1RHUx6XhcEAwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0MDcwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqljDANBgkqhkiG9w0BAQsFAAOCAQEASvkF
Y1J1d2lM+u0ns8BNbmAcz9yM6ZvKvNUltGHcqQk3hU017RhxtfXhS3aH8cO02tZ4
v0fgYZMGn4rVzt9uNC0oX8WP9FDD/7QXWBqtqeT9lvBPulX48h1TFRpGqoxSMuG6
q2fqj1BBn4GflHOp9AlC9lmzZlViXfwrl6elJuGeo8Su8ZKNKkUq/ER1EvGx1Y87
LJVbyPmy/dF2i4GzDX/eQI2PMDc2g1d1M7DJp0lNu9g4SsN1xv6bx+akh9DxyBme
IN2aYDYisCER6joPnLu+fPqGWBReystVTzcOEEKZLvkWYDm2cFsmJavk+SPM9mL6
IpvhdnYpDlnHtKM/ug==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:06 2026 by rpki-client