Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144091.roa
File: AS144091.roa (raw, json)
Hash identifier: 05T3ai41vOzgLhXuUrlfHjaEQmywzHdOTQq5FHisnBI=
Subject key identifier: 6D:C2:43:E9:E1:8C:E5:F5:36:A0:41:96:98:42:CD:03:23:96:53:29
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7F401D9B4F813FD62C07AD8C196D7F408905F97E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144091.roa
Signing time: Fri 22 May 2026 07:09:09 +0000
ROA not before: Fri 22 May 2026 07:04:09 +0000
ROA not after: Fri 21 May 2027 07:09:09 +0000
asID: 144091
IP address blocks: 240a:a5a1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:40:1d:9b:4f:81:3f:d6:2c:07:ad:8c:19:6d:7f:40:89:05:f9:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:04:09 2026 GMT
Not After : May 21 07:09:09 2027 GMT
Subject: CN=6DC243E9E18CE5F536A041969842CD0323965329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fd:07:ca:e2:25:97:19:16:fb:15:01:48:ff:
73:73:2e:82:eb:69:7b:3c:8a:88:13:4a:07:e0:64:
84:e8:c1:ac:d2:a2:a8:0b:0d:b1:48:d9:bc:fa:40:
5d:7b:f2:d1:09:dd:0d:99:4f:78:a6:49:16:d9:80:
e1:3b:ba:ad:6e:f5:5c:65:c6:09:23:b2:ef:cf:24:
bc:a9:17:74:7d:6b:9c:f2:2c:ea:df:cb:1d:f7:3e:
a5:bf:20:dd:d0:61:30:82:c6:b2:94:3c:3e:02:53:
6b:ab:ae:57:a3:33:41:5a:e7:ad:d7:3c:58:f8:23:
9e:e6:89:68:16:9a:c0:8c:7a:9a:ac:0b:92:d9:66:
7b:30:e3:9c:43:29:e8:e8:dd:09:cd:36:3f:33:ba:
89:54:5e:e8:be:9f:06:c6:88:8a:e2:f8:40:fb:eb:
2a:81:11:ef:d1:a9:10:e2:c9:4e:4f:85:32:47:6f:
f5:a5:d8:64:9c:e8:cc:95:ca:9b:19:c8:41:5f:9f:
80:4b:ea:0f:76:2f:ac:42:a4:21:c6:02:8d:62:f9:
31:65:c2:d6:c3:2a:e2:30:73:aa:3f:a2:98:f9:77:
bb:ad:dd:b4:cf:4c:5d:18:6f:43:54:11:61:b1:4a:
cb:16:5a:6e:b1:7e:c4:7f:5e:be:7c:ce:81:1b:81:
93:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C2:43:E9:E1:8C:E5:F5:36:A0:41:96:98:42:CD:03:23:96:53:29
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144091.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a5a1::/32
Signature Algorithm: sha256WithRSAEncryption
39:8a:2d:01:1a:68:36:c5:73:97:75:fc:2e:17:0a:8c:cf:21:
1f:48:79:62:e7:3a:15:c5:a9:e4:9b:28:f1:56:93:10:ce:50:
fb:28:97:8a:a0:15:06:58:01:f2:5d:21:a0:a6:07:0d:6e:0a:
c0:b2:8a:d3:16:90:ee:d8:80:07:74:e3:20:9b:d4:32:10:e8:
38:b9:ed:88:85:9b:9d:c9:f2:40:03:89:a2:89:a4:62:78:2b:
61:26:c2:f5:a4:ec:86:12:22:4e:f0:97:21:f4:00:e3:83:26:
8f:8a:a3:77:22:ce:ee:ce:3c:dd:e5:cb:16:56:31:e1:6a:d5:
46:ff:53:50:96:fa:f3:a0:9a:b3:d8:56:07:da:d0:61:4c:86:
13:58:36:1c:97:b8:8e:f5:ac:41:5d:68:d7:20:f3:8a:4f:87:
0f:ee:fd:33:0a:cc:bf:0d:2f:42:d8:64:0b:a7:9b:d0:c9:dc:
c2:26:3a:54:f2:dd:05:d4:05:ac:55:39:6a:35:93:31:1b:fc:
67:6f:02:64:87:6c:62:59:2b:0d:12:28:1f:97:27:58:fa:b4:
43:fc:80:e6:a3:8a:a3:a8:5e:06:cd:27:9b:88:73:4e:92:1b:
91:59:43:5b:5f:08:60:fb:2e:f4:fa:ae:8c:13:95:9c:19:5b:
a1:4c:3d:f9
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUf0Adm0+BP9YsB62MGW1/QIkF+X4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzA0MDlaFw0yNzA1MjEwNzA5MDlaMDMxMTAvBgNV
BAMTKDZEQzI0M0U5RTE4Q0U1RjUzNkEwNDE5Njk4NDJDRDAzMjM5NjUzMjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX/QfK4iWXGRb7FQFI/3NzLoLr
aXs8iogTSgfgZITowazSoqgLDbFI2bz6QF178tEJ3Q2ZT3imSRbZgOE7uq1u9Vxl
xgkjsu/PJLypF3R9a5zyLOrfyx33PqW/IN3QYTCCxrKUPD4CU2urrlejM0Fa563X
PFj4I57miWgWmsCMepqsC5LZZnsw45xDKejo3QnNNj8zuolUXui+nwbGiIri+ED7
6yqBEe/RqRDiyU5PhTJHb/Wl2GSc6MyVypsZyEFfn4BL6g92L6xCpCHGAo1i+TFl
wtbDKuIwc6o/opj5d7ut3bTPTF0Yb0NUEWGxSssWWm6xfsR/Xr58zoEbgZMzAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUbcJD6eGM5fU2oEGWmELNAyOWUykwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0MDkxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqloTANBgkqhkiG9w0BAQsFAAOCAQEAOYot
ARpoNsVzl3X8LhcKjM8hH0h5Yuc6FcWp5Jso8VaTEM5Q+yiXiqAVBlgB8l0hoKYH
DW4KwLKK0xaQ7tiAB3TjIJvUMhDoOLntiIWbncnyQAOJoomkYngrYSbC9aTshhIi
TvCXIfQA44Mmj4qjdyLO7s483eXLFlYx4WrVRv9TUJb686Cas9hWB9rQYUyGE1g2
HJe4jvWsQV1o1yDzik+HD+79MwrMvw0vQthkC6eb0MncwiY6VPLdBdQFrFU5ajWT
MRv8Z28CZIdsYlkrDRIoH5cnWPq0Q/yA5qOKo6heBs0nm4hzTpIbkVlDW18IYPsu
9PqujBOVnBlboUw9+Q==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:43 2026 by rpki-client