Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144090.roa
File: AS144090.roa (raw, json)
Hash identifier: zClquwnKX481Qnt0WPh4oaR1Sf1jHMLWayCeCO4P1u4=
Subject key identifier: 9F:70:23:B5:21:9E:B4:34:F0:73:C9:69:7E:77:04:8B:AE:42:83:1A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2B94FAB462B67599F2D848C0CFB872AB40B3F1A9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144090.roa
Signing time: Fri 22 May 2026 01:50:32 +0000
ROA not before: Fri 22 May 2026 01:45:32 +0000
ROA not after: Fri 21 May 2027 01:50:32 +0000
asID: 144090
IP address blocks: 240a:a5a0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:94:fa:b4:62:b6:75:99:f2:d8:48:c0:cf:b8:72:ab:40:b3:f1:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:32 2026 GMT
Not After : May 21 01:50:32 2027 GMT
Subject: CN=9F7023B5219EB434F073C9697E77048BAE42831A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7a:68:05:50:c5:fd:20:f6:d3:44:ca:8a:dc:
ad:23:82:df:d2:d4:ba:62:83:24:27:a6:3a:1b:af:
a5:6a:9a:9d:ae:6b:4d:fe:35:94:76:f7:2c:24:ad:
69:26:68:6e:77:c0:de:90:03:c9:35:ee:03:3f:50:
d9:6d:6c:55:ab:91:f2:07:ec:7b:eb:4b:1d:04:18:
c5:82:19:bc:80:e0:69:57:b2:6c:3d:21:50:84:da:
ed:c9:6b:47:64:58:68:57:5a:d0:60:66:d7:8c:45:
10:20:5b:e6:b1:4d:87:e4:7a:fe:61:f1:a0:2b:d8:
81:1d:15:9a:01:54:8f:0f:84:02:d1:85:e7:81:37:
a5:ae:0f:48:5d:06:2c:63:63:87:65:ca:ba:eb:1f:
99:87:74:01:b9:71:86:3d:f8:ac:e6:64:c4:fc:85:
05:02:59:2d:fe:46:c4:66:00:e1:08:40:5c:a8:61:
aa:34:ef:d5:b9:64:78:16:a7:b0:07:c1:80:74:a6:
8b:c0:2e:76:79:3d:33:ae:82:65:f5:c9:16:7f:61:
24:bb:45:de:76:c7:79:48:99:da:73:87:0e:bd:41:
9f:ed:be:9c:dc:00:55:b6:fe:c8:51:91:91:62:73:
1e:47:64:90:52:ae:6d:4c:c6:b2:df:2e:71:85:9e:
56:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:70:23:B5:21:9E:B4:34:F0:73:C9:69:7E:77:04:8B:AE:42:83:1A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144090.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a5a0::/32
Signature Algorithm: sha256WithRSAEncryption
3b:83:42:7c:eb:b2:f5:c8:f8:20:07:c1:b9:27:28:23:b4:6c:
18:3f:15:1b:af:13:ae:e5:94:14:ad:0a:a9:2e:37:e2:da:9a:
23:5a:7f:02:a2:c3:15:2a:30:ac:66:36:fe:44:18:cb:99:45:
eb:cb:2e:cf:19:6c:41:c3:ab:c6:11:0c:29:b6:c8:f0:dc:fa:
d6:ba:f2:06:9e:b7:e4:98:23:dd:b3:48:e4:a3:45:58:20:38:
c2:40:b5:04:29:53:41:97:a7:7e:17:ee:94:62:34:a4:cc:84:
1d:84:a8:a5:97:4a:aa:5e:34:ec:f5:d2:cf:36:5c:a2:9c:81:
51:32:e4:3a:63:23:ab:ce:c4:45:dd:66:d8:04:c7:17:78:a0:
f2:40:6c:d7:6b:d2:78:4a:3b:d5:ef:a8:1e:74:a8:f8:54:0e:
0b:82:8e:af:c1:27:93:0b:4a:fb:d8:cd:20:34:8d:e6:0b:58:
5b:10:63:0e:ea:1f:b8:8e:27:03:0d:8b:6b:cc:85:cf:b7:f2:
ac:bb:1a:eb:52:cf:c2:6e:f4:3e:8c:65:5c:13:af:37:5f:c9:
20:46:90:05:46:90:61:ac:29:c6:42:6c:aa:3a:3e:0f:c8:9b:
65:6e:8a:ab:21:9e:de:68:08:c1:93:7b:45:a6:e3:04:de:66:
5c:cd:a3:bf
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUK5T6tGK2dZny2EjAz7hyq0Cz8akwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwMTQ1MzJaFw0yNzA1MjEwMTUwMzJaMDMxMTAvBgNV
BAMTKDlGNzAyM0I1MjE5RUI0MzRGMDczQzk2OTdFNzcwNDhCQUU0MjgzMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFemgFUMX9IPbTRMqK3K0jgt/S
1LpigyQnpjobr6Vqmp2ua03+NZR29ywkrWkmaG53wN6QA8k17gM/UNltbFWrkfIH
7HvrSx0EGMWCGbyA4GlXsmw9IVCE2u3Ja0dkWGhXWtBgZteMRRAgW+axTYfkev5h
8aAr2IEdFZoBVI8PhALRheeBN6WuD0hdBixjY4dlyrrrH5mHdAG5cYY9+KzmZMT8
hQUCWS3+RsRmAOEIQFyoYao079W5ZHgWp7AHwYB0povALnZ5PTOugmX1yRZ/YSS7
Rd52x3lImdpzhw69QZ/tvpzcAFW2/shRkZFicx5HZJBSrm1MxrLfLnGFnlaxAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUn3AjtSGetDTwc8lpfncEi65CgxowHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0MDkwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqloDANBgkqhkiG9w0BAQsFAAOCAQEAO4NC
fOuy9cj4IAfBuScoI7RsGD8VG68TruWUFK0KqS434tqaI1p/AqLDFSowrGY2/kQY
y5lF68suzxlsQcOrxhEMKbbI8Nz61rryBp635Jgj3bNI5KNFWCA4wkC1BClTQZen
fhfulGI0pMyEHYSopZdKql407PXSzzZcopyBUTLkOmMjq87ERd1m2ATHF3ig8kBs
12vSeEo71e+oHnSo+FQOC4KOr8EnkwtK+9jNIDSN5gtYWxBjDuofuI4nAw2La8yF
z7fyrLsa61LPwm70PoxlXBOvN1/JIEaQBUaQYawpxkJsqjo+D8ibZW6KqyGe3mgI
wZN7RabjBN5mXM2jvw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:20 2026 by rpki-client