Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144117.roa
File: AS144117.roa (raw, json)
Hash identifier: rGPb22iMOJwIa3l5SlgnCmcKy4Swx+XpslueMmNNhuI=
Subject key identifier: 7B:CD:98:64:1E:75:70:CF:03:6A:A4:19:39:95:5D:A1:27:02:BE:0F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 311208DDF88C45FAEE46EE81387A4505ACB8FF81
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144117.roa
Signing time: Fri 22 May 2026 06:05:24 +0000
ROA not before: Fri 22 May 2026 06:00:24 +0000
ROA not after: Fri 21 May 2027 06:05:24 +0000
asID: 144117
IP address blocks: 240a:a5bb::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:12:08:dd:f8:8c:45:fa:ee:46:ee:81:38:7a:45:05:ac:b8:ff:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:24 2026 GMT
Not After : May 21 06:05:24 2027 GMT
Subject: CN=7BCD98641E7570CF036AA41939955DA12702BE0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:03:b1:5e:91:0a:d7:df:fa:a9:d8:b9:71:fa:
c7:74:1e:98:70:a9:68:30:b4:cb:91:bf:96:68:55:
a1:47:27:21:ca:3b:30:cc:0f:7b:60:fc:89:f5:d4:
fb:e0:49:f3:77:3c:01:b6:78:26:ca:91:6b:70:37:
cb:c6:e8:90:08:4e:c5:ba:f4:a0:8d:37:c1:ec:c0:
7f:a1:82:c1:13:ab:6c:0d:25:66:d3:2e:f9:dd:60:
12:af:5b:c3:ad:2a:56:07:1c:22:d6:46:64:7a:35:
41:20:83:56:6a:95:3b:e3:b8:02:6e:a0:64:5f:3a:
7e:95:fc:a1:dc:b7:91:81:d8:06:c1:34:b0:7c:a1:
2c:95:6a:55:5d:ef:4f:d2:a7:13:a3:7f:dc:27:15:
39:f6:50:29:9e:93:7b:ad:48:0d:a5:48:2d:f4:db:
8b:9a:b9:ab:55:04:2d:7f:0a:ae:03:d9:5a:f2:41:
ee:74:51:af:30:60:af:6b:58:f6:99:95:bf:2e:fc:
de:86:83:17:40:e3:d4:b8:6d:1f:32:c3:9f:67:bd:
c1:41:fe:07:20:93:d7:8a:39:aa:15:21:5a:68:a4:
26:c0:f3:0f:d4:4e:1a:36:f8:68:01:88:a1:10:f6:
b2:ee:fa:9c:16:e7:54:21:56:48:c6:af:da:4c:2b:
55:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:CD:98:64:1E:75:70:CF:03:6A:A4:19:39:95:5D:A1:27:02:BE:0F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144117.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a5bb::/32
Signature Algorithm: sha256WithRSAEncryption
0d:5f:b2:4e:3e:dc:29:ce:9f:e2:a3:75:ce:21:0b:2d:a9:6f:
b7:74:df:f1:2c:06:2d:6b:54:0e:93:99:92:3d:46:e2:e9:41:
9c:4c:67:f1:bd:be:e7:84:db:6a:6b:db:84:84:73:b9:79:5c:
66:a7:db:92:3e:50:9c:5e:f3:e3:d3:2b:ba:44:34:c4:13:5d:
e2:b6:41:70:a6:df:66:9f:1c:c5:d6:96:48:87:a1:fe:31:8f:
ff:90:5f:25:d0:d3:8f:59:c7:b5:34:72:11:be:c3:28:31:82:
8c:d5:56:7d:23:0d:aa:42:40:dd:b5:84:d0:85:90:2a:26:1b:
77:2d:dd:64:d0:43:56:33:4e:fc:22:c6:c7:48:0f:28:6c:59:
46:ca:4b:5c:57:c7:b9:ad:f7:b5:2b:37:61:61:18:12:42:f4:
e6:50:ae:85:36:4f:7a:78:a2:7e:19:08:bf:c5:84:40:68:34:
1f:78:80:27:86:95:51:75:2c:dc:49:21:de:77:ff:8c:49:9f:
84:40:fe:fa:ca:da:19:43:b4:c0:89:e7:53:a8:93:7a:ea:05:
e4:4a:c5:5f:d6:0c:a5:b6:98:a9:f6:3a:21:35:df:d5:32:f9:
3c:e5:90:d7:58:fb:e6:8e:c0:76:32:9c:58:fc:59:4f:67:64:
34:11:5f:c6
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUMRII3fiMRfruRu6BOHpFBay4/4EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjAwMjRaFw0yNzA1MjEwNjA1MjRaMDMxMTAvBgNV
BAMTKDdCQ0Q5ODY0MUU3NTcwQ0YwMzZBQTQxOTM5OTU1REExMjcwMkJFMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLA7FekQrX3/qp2Llx+sd0Hphw
qWgwtMuRv5ZoVaFHJyHKOzDMD3tg/In11PvgSfN3PAG2eCbKkWtwN8vG6JAITsW6
9KCNN8HswH+hgsETq2wNJWbTLvndYBKvW8OtKlYHHCLWRmR6NUEgg1ZqlTvjuAJu
oGRfOn6V/KHct5GB2AbBNLB8oSyValVd70/SpxOjf9wnFTn2UCmek3utSA2lSC30
24uauatVBC1/Cq4D2VryQe50Ua8wYK9rWPaZlb8u/N6GgxdA49S4bR8yw59nvcFB
/gcgk9eKOaoVIVpopCbA8w/UTho2+GgBiKEQ9rLu+pwW51QhVkjGr9pMK1XDAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUe82YZB51cM8DaqQZOZVdoScCvg8wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0MTE3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqluzANBgkqhkiG9w0BAQsFAAOCAQEADV+y
Tj7cKc6f4qN1ziELLalvt3Tf8SwGLWtUDpOZkj1G4ulBnExn8b2+54TbamvbhIRz
uXlcZqfbkj5QnF7z49MrukQ0xBNd4rZBcKbfZp8cxdaWSIeh/jGP/5BfJdDTj1nH
tTRyEb7DKDGCjNVWfSMNqkJA3bWE0IWQKiYbdy3dZNBDVjNO/CLGx0gPKGxZRspL
XFfHua33tSs3YWEYEkL05lCuhTZPeniifhkIv8WEQGg0H3iAJ4aVUXUs3Ekh3nf/
jEmfhED++sraGUO0wInnU6iTeuoF5ErFX9YMpbaYqfY6ITXf1TL5POWQ11j75o7A
djKcWPxZT2dkNBFfxg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:06 2026 by rpki-client