Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144092.roa
File: AS144092.roa (raw, json)
Hash identifier: 9wG/ksqbn3/SJOmElnifg07mNbc5+q9yVKRnMK3MQaw=
Subject key identifier: DA:CD:91:65:4C:4F:B6:52:97:C7:33:05:D0:58:73:2F:53:F8:F8:C4
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7958FCF9AEF6B2E3445599AFBB57E0797A241BCC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144092.roa
Signing time: Mon 25 May 2026 01:51:10 +0000
ROA not before: Mon 25 May 2026 01:46:10 +0000
ROA not after: Mon 24 May 2027 01:51:10 +0000
asID: 144092
IP address blocks: 240a:a5a2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:58:fc:f9:ae:f6:b2:e3:44:55:99:af:bb:57:e0:79:7a:24:1b:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:10 2026 GMT
Not After : May 24 01:51:10 2027 GMT
Subject: CN=DACD91654C4FB65297C73305D058732F53F8F8C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:48:3c:e3:17:cd:da:f7:34:85:6c:34:58:ad:
ec:4d:6a:f3:0a:ae:5f:97:1a:04:24:79:cd:ac:23:
d3:3e:59:2d:23:b0:48:e9:33:24:6f:dc:1b:54:af:
43:f2:68:53:61:35:55:dc:79:d8:9c:7d:a8:88:99:
9f:aa:2c:f8:b4:37:b4:62:99:ed:65:2a:c3:25:d2:
4c:c4:a2:c8:6d:5a:f4:0f:77:1f:57:c4:63:81:fc:
bc:c7:60:91:b0:20:09:a7:46:da:3a:04:25:6a:9c:
3f:ed:2a:bf:a5:75:8c:3e:05:3c:d2:89:c2:7d:be:
c0:ce:a3:b5:45:57:82:4c:b5:59:56:e1:c3:c8:3e:
b9:f9:14:e5:9e:38:8c:b1:8d:3a:cc:f4:c2:48:2c:
1f:ae:60:88:5b:9e:ff:99:99:ab:22:fa:3b:a5:f6:
e5:f8:49:27:57:dc:b3:c6:9d:eb:0a:61:b2:73:76:
92:5f:7e:d1:d4:2a:f3:25:06:f7:6e:6e:88:6f:f1:
09:fb:d3:62:7f:ee:e1:91:cd:9d:dc:68:21:17:d0:
5d:96:63:e1:04:01:de:e0:7b:0d:df:80:4c:26:56:
25:61:dc:ae:91:17:66:01:5a:f4:88:f1:f7:13:9d:
99:7c:36:a1:21:8d:51:44:93:bf:7f:45:71:6e:20:
8a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:CD:91:65:4C:4F:B6:52:97:C7:33:05:D0:58:73:2F:53:F8:F8:C4
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144092.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a5a2::/32
Signature Algorithm: sha256WithRSAEncryption
32:d9:97:f0:43:e4:b1:21:f1:4d:b4:e2:ff:e5:65:6c:c4:45:
c5:7e:58:84:fb:cd:53:64:90:05:bd:4f:d0:94:d4:b1:b0:0a:
22:b0:ee:5c:d4:c2:b1:e7:6f:63:1b:26:73:d7:53:96:53:90:
67:d1:a3:8a:cc:14:c2:a8:1b:b1:7d:bf:33:9e:90:c1:34:3d:
f2:b5:3f:da:ee:53:9e:25:30:16:f1:3c:ed:e0:70:e3:44:7f:
66:80:10:7e:88:fb:64:ab:89:ed:d2:20:11:87:88:b4:db:f2:
fb:10:16:ae:5b:aa:57:83:c3:e7:31:6e:0e:5d:2d:35:97:5b:
b6:58:33:a2:12:fe:1a:ba:69:86:86:1e:38:ed:79:de:4e:19:
07:66:be:83:13:57:e2:c4:bd:7f:e8:7e:d9:88:d8:7d:dc:d2:
ea:18:00:30:bf:55:ee:62:e8:db:db:8f:32:84:fe:98:f9:f4:
58:c5:ca:12:a5:b0:09:3f:c5:dc:3e:d9:df:3f:e5:d2:45:64:
69:5b:aa:6f:c1:95:57:6d:14:51:6c:6f:a4:d5:fc:91:86:e1:
0b:ad:9f:53:21:07:31:82:92:c4:78:9b:b5:b2:ed:d3:ba:de:
e0:aa:34:5e:63:16:ba:69:77:d7:34:e4:86:bf:dd:b4:71:d8:
c8:ed:4c:37
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUeVj8+a72suNEVZmvu1fgeXokG8wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTQ2MTBaFw0yNzA1MjQwMTUxMTBaMDMxMTAvBgNV
BAMTKERBQ0Q5MTY1NEM0RkI2NTI5N0M3MzMwNUQwNTg3MzJGNTNGOEY4QzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkSDzjF83a9zSFbDRYrexNavMK
rl+XGgQkec2sI9M+WS0jsEjpMyRv3BtUr0PyaFNhNVXcedicfaiImZ+qLPi0N7Ri
me1lKsMl0kzEoshtWvQPdx9XxGOB/LzHYJGwIAmnRto6BCVqnD/tKr+ldYw+BTzS
icJ9vsDOo7VFV4JMtVlW4cPIPrn5FOWeOIyxjTrM9MJILB+uYIhbnv+Zmasi+jul
9uX4SSdX3LPGnesKYbJzdpJfftHUKvMlBvdubohv8Qn702J/7uGRzZ3caCEX0F2W
Y+EEAd7gew3fgEwmViVh3K6RF2YBWvSI8fcTnZl8NqEhjVFEk79/RXFuIIppAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU2s2RZUxPtlKXxzMF0FhzL1P4+MQwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0MDkyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqlojANBgkqhkiG9w0BAQsFAAOCAQEAMtmX
8EPksSHxTbTi/+VlbMRFxX5YhPvNU2SQBb1P0JTUsbAKIrDuXNTCsedvYxsmc9dT
llOQZ9GjiswUwqgbsX2/M56QwTQ98rU/2u5TniUwFvE87eBw40R/ZoAQfoj7ZKuJ
7dIgEYeItNvy+xAWrluqV4PD5zFuDl0tNZdbtlgzohL+GrpphoYeOO153k4ZB2a+
gxNX4sS9f+h+2YjYfdzS6hgAML9V7mLo29uPMoT+mPn0WMXKEqWwCT/F3D7Z3z/l
0kVkaVuqb8GVV20UUWxvpNX8kYbhC62fUyEHMYKSxHibtbLt07re4Ko0XmMWuml3
1zTkhr/dtHHYyO1MNw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:05 2026 by rpki-client