Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144089.roa
File: AS144089.roa (raw, json)
Hash identifier: 115vpAElylKx96LgHue94aF3jeu0sVPdOLatCRfNYrQ=
Subject key identifier: 28:21:BE:3E:61:36:4A:D6:5E:C8:D5:37:F9:2C:C3:CF:D2:57:43:C6
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6B540ED1469C9E76A11FAE4949E9DC0BD3EB9EFC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144089.roa
Signing time: Fri 22 May 2026 06:58:20 +0000
ROA not before: Fri 22 May 2026 06:53:20 +0000
ROA not after: Fri 21 May 2027 06:58:20 +0000
asID: 144089
IP address blocks: 240a:a59f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:54:0e:d1:46:9c:9e:76:a1:1f:ae:49:49:e9:dc:0b:d3:eb:9e:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:20 2026 GMT
Not After : May 21 06:58:20 2027 GMT
Subject: CN=2821BE3E61364AD65EC8D537F92CC3CFD25743C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:64:4b:95:9e:3a:0d:ee:2c:6e:a0:ae:28:4c:
77:15:f0:50:99:6f:3f:bf:88:2a:34:11:3c:68:89:
28:be:17:fa:5a:85:16:a3:24:3f:4a:d7:71:b9:61:
fc:d1:62:94:cd:40:6f:cb:0a:39:be:88:a3:f5:c5:
bf:d0:40:2c:83:a7:ff:30:21:f9:f4:62:ee:eb:81:
ce:ff:ff:31:90:4d:32:5b:d2:f2:39:fe:d5:d2:d3:
71:49:9d:f3:49:90:a3:ee:de:6f:af:a7:38:ec:4b:
79:b9:19:b1:11:58:ac:0c:3f:eb:64:36:93:ea:0a:
78:4b:69:11:47:d6:d1:10:4c:08:a8:d8:61:62:56:
5c:c5:8c:c6:90:15:42:8d:8e:6e:ac:3c:0a:08:b4:
fb:00:7e:a3:0e:d6:37:ce:dc:7e:0c:c1:8c:66:70:
db:57:f8:5c:3f:01:f0:ab:c4:9f:2a:8e:14:a6:b9:
20:f2:80:54:c2:bd:02:03:93:b3:4e:2d:43:25:21:
6a:4f:4d:6d:82:00:8e:99:52:a7:78:e0:98:f9:ad:
c9:86:e6:a2:3f:e9:9f:f7:ea:cf:ac:a5:25:88:72:
58:02:88:41:d0:d0:83:19:2d:15:aa:94:67:cf:91:
a9:3c:a4:f1:91:d3:87:61:47:d1:d6:d8:2b:1d:5e:
c1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:21:BE:3E:61:36:4A:D6:5E:C8:D5:37:F9:2C:C3:CF:D2:57:43:C6
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144089.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a59f::/32
Signature Algorithm: sha256WithRSAEncryption
98:08:bd:ce:06:a9:47:80:92:49:99:23:fc:9d:eb:ad:a1:b7:
83:63:56:c0:40:bf:50:04:e1:b5:b7:8c:43:77:75:28:00:a2:
de:b0:20:69:3c:27:06:f2:7e:e8:bd:37:ba:46:75:47:a0:f1:
d8:b1:4e:3c:47:52:87:81:9e:31:43:1f:ae:e5:f7:5c:83:d7:
1b:f9:18:f6:2a:60:2d:eb:18:41:a8:6d:dc:e8:79:3e:5c:3f:
f4:1c:ab:d2:14:4a:02:98:88:21:d3:fb:ea:37:bf:aa:5a:44:
83:28:4c:71:38:9b:58:ac:b8:b7:5d:57:03:e1:4f:26:a4:5b:
1e:a8:22:6b:92:58:0e:bf:5e:f1:01:7b:8a:b6:a6:80:42:c5:
d5:16:1a:59:20:9c:7c:44:f0:25:c9:23:54:96:3f:45:a4:86:
8f:39:16:bb:9d:8c:1b:80:9c:f1:1c:37:b4:6d:f7:05:1a:a0:
3b:81:36:99:00:9f:45:4a:12:14:d7:bc:fd:e9:c5:21:24:16:
7f:4f:c8:bb:af:d7:bd:34:2d:c5:b5:43:62:80:cb:c7:da:b0:
15:ff:28:87:92:47:f7:db:af:36:11:fd:ae:7f:ee:e7:b2:22:
f6:33:0c:f1:51:e8:9c:21:56:52:04:45:06:11:ad:44:9d:ec:
e0:20:16:e2
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUa1QO0UacnnahH65JSencC9PrnvwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjUzMjBaFw0yNzA1MjEwNjU4MjBaMDMxMTAvBgNV
BAMTKDI4MjFCRTNFNjEzNjRBRDY1RUM4RDUzN0Y5MkNDM0NGRDI1NzQzQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXZEuVnjoN7ixuoK4oTHcV8FCZ
bz+/iCo0ETxoiSi+F/pahRajJD9K13G5YfzRYpTNQG/LCjm+iKP1xb/QQCyDp/8w
Ifn0Yu7rgc7//zGQTTJb0vI5/tXS03FJnfNJkKPu3m+vpzjsS3m5GbERWKwMP+tk
NpPqCnhLaRFH1tEQTAio2GFiVlzFjMaQFUKNjm6sPAoItPsAfqMO1jfO3H4MwYxm
cNtX+Fw/AfCrxJ8qjhSmuSDygFTCvQIDk7NOLUMlIWpPTW2CAI6ZUqd44Jj5rcmG
5qI/6Z/36s+spSWIclgCiEHQ0IMZLRWqlGfPkak8pPGR04dhR9HW2CsdXsE/AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUKCG+PmE2StZeyNU3+SzDz9JXQ8YwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0MDg5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqlnzANBgkqhkiG9w0BAQsFAAOCAQEAmAi9
zgapR4CSSZkj/J3rraG3g2NWwEC/UAThtbeMQ3d1KACi3rAgaTwnBvJ+6L03ukZ1
R6Dx2LFOPEdSh4GeMUMfruX3XIPXG/kY9ipgLesYQaht3Oh5Plw/9Byr0hRKApiI
IdP76je/qlpEgyhMcTibWKy4t11XA+FPJqRbHqgia5JYDr9e8QF7iramgELF1RYa
WSCcfETwJckjVJY/RaSGjzkWu52MG4Cc8Rw3tG33BRqgO4E2mQCfRUoSFNe8/enF
ISQWf0/Iu6/XvTQtxbVDYoDLx9qwFf8oh5JH99uvNhH9rn/u57Ii9jMM8VHonCFW
UgRFBhGtRJ3s4CAW4g==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:40 2026 by rpki-client