Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144118.roa
File: AS144118.roa (raw, json)
Hash identifier: PPBCKOe0j2z5kQKgnZAzIgM4xuHtvRXTRsX41IUWCeM=
Subject key identifier: A5:F9:02:F6:AB:91:5B:EB:AB:8C:06:6D:EB:F7:2F:97:37:1A:7F:D9
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3403AA6AB135A936CDC5D5BC8B5F5D94C47E8D43
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144118.roa
Signing time: Fri 22 May 2026 07:09:02 +0000
ROA not before: Fri 22 May 2026 07:04:02 +0000
ROA not after: Fri 21 May 2027 07:09:02 +0000
asID: 144118
IP address blocks: 240a:a5bc::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:03:aa:6a:b1:35:a9:36:cd:c5:d5:bc:8b:5f:5d:94:c4:7e:8d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:04:02 2026 GMT
Not After : May 21 07:09:02 2027 GMT
Subject: CN=A5F902F6AB915BEBAB8C066DEBF72F97371A7FD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8e:26:37:74:79:00:ae:78:c1:f4:40:44:7e:
8f:23:e9:83:b4:15:45:4b:6c:dd:77:cc:b2:db:5e:
b7:27:66:7c:1f:29:02:23:ed:d0:ed:61:be:9a:a3:
56:10:b8:7e:cd:b8:2f:e9:20:85:c0:9a:63:9e:b4:
3f:6e:09:85:0f:1b:b4:00:fd:e3:71:9d:5b:b4:d2:
0e:63:fd:13:ba:9c:7b:36:25:ce:8d:fc:88:02:8e:
16:cc:fc:98:46:20:71:b7:f7:33:80:7b:fc:d5:2a:
22:94:c2:7a:2a:a1:80:b1:4a:80:17:11:00:3a:e2:
a8:33:11:87:7b:c0:47:5b:6d:be:3f:ee:eb:02:a2:
6c:f5:52:56:67:a4:bc:d9:da:27:cc:90:ab:e6:34:
17:fe:4d:58:2a:c0:2a:b9:43:9e:42:be:4a:39:30:
06:a9:c4:94:a4:79:bb:1b:52:24:d7:4f:f7:1c:18:
f9:7d:ce:5b:06:06:b3:63:19:f5:b6:74:c1:bb:f5:
a0:f2:cb:98:5e:2b:ee:62:41:8f:ca:6f:52:c2:87:
64:1c:62:60:b7:aa:ff:ba:60:8d:66:01:e0:75:ad:
5a:d8:55:b2:e1:b4:17:30:b9:2c:26:3d:90:17:5e:
29:a3:d8:c1:19:82:89:24:1a:03:4a:9a:84:c1:d7:
0c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F9:02:F6:AB:91:5B:EB:AB:8C:06:6D:EB:F7:2F:97:37:1A:7F:D9
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144118.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a5bc::/32
Signature Algorithm: sha256WithRSAEncryption
69:01:08:ac:c4:0a:ea:53:65:8e:91:39:9e:08:be:e6:0e:81:
d5:b1:a6:b7:4c:98:29:25:df:eb:a7:a0:b3:84:ef:1c:bf:96:
d3:21:43:12:da:03:7a:73:36:96:e8:72:05:32:ff:85:cf:bb:
f1:6e:ac:38:4e:20:30:67:c5:97:02:ab:63:e2:8d:36:61:22:
1d:02:0d:c9:f2:40:63:9b:ac:b0:db:50:ed:c8:36:de:ab:2c:
50:15:f5:d3:b8:c4:5c:48:e4:66:3e:4c:8f:93:9b:14:01:6e:
4a:58:b2:a7:49:c0:8e:8a:63:15:d7:c7:42:1d:b5:3c:62:90:
23:c2:e5:6e:6e:3d:66:39:85:c6:4c:47:39:00:29:af:15:63:
c9:a3:f4:5b:f3:92:1f:de:b2:5a:33:67:2d:94:58:13:84:c7:
c5:08:d8:19:b4:7d:68:14:41:1d:63:63:d0:d6:6b:ef:a1:d4:
60:d0:f3:6a:53:3f:5d:b2:e5:75:db:aa:54:98:b0:b3:81:12:
8d:6b:3e:9d:95:6f:a7:72:4a:0f:a5:c8:1c:0c:eb:05:5b:ab:
96:28:97:ae:08:5c:0d:a5:c8:29:8a:54:5e:e9:28:6f:ac:75:
30:ea:df:7b:8e:59:6d:e2:db:32:3f:35:30:55:7f:0a:9a:09:
42:4d:69:c4
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUNAOqarE1qTbNxdW8i19dlMR+jUMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzA0MDJaFw0yNzA1MjEwNzA5MDJaMDMxMTAvBgNV
BAMTKEE1RjkwMkY2QUI5MTVCRUJBQjhDMDY2REVCRjcyRjk3MzcxQTdGRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8jiY3dHkArnjB9EBEfo8j6YO0
FUVLbN13zLLbXrcnZnwfKQIj7dDtYb6ao1YQuH7NuC/pIIXAmmOetD9uCYUPG7QA
/eNxnVu00g5j/RO6nHs2Jc6N/IgCjhbM/JhGIHG39zOAe/zVKiKUwnoqoYCxSoAX
EQA64qgzEYd7wEdbbb4/7usComz1UlZnpLzZ2ifMkKvmNBf+TVgqwCq5Q55Cvko5
MAapxJSkebsbUiTXT/ccGPl9zlsGBrNjGfW2dMG79aDyy5heK+5iQY/Kb1LCh2Qc
YmC3qv+6YI1mAeB1rVrYVbLhtBcwuSwmPZAXXimj2MEZgokkGgNKmoTB1wzBAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUpfkC9quRW+urjAZt6/cvlzcaf9kwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0MTE4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqlvDANBgkqhkiG9w0BAQsFAAOCAQEAaQEI
rMQK6lNljpE5ngi+5g6B1bGmt0yYKSXf66egs4TvHL+W0yFDEtoDenM2luhyBTL/
hc+78W6sOE4gMGfFlwKrY+KNNmEiHQINyfJAY5ussNtQ7cg23qssUBX107jEXEjk
Zj5Mj5ObFAFuSliyp0nAjopjFdfHQh21PGKQI8Llbm49ZjmFxkxHOQAprxVjyaP0
W/OSH96yWjNnLZRYE4THxQjYGbR9aBRBHWNj0NZr76HUYNDzalM/XbLldduqVJiw
s4ESjWs+nZVvp3JKD6XIHAzrBVurliiXrghcDaXIKYpUXukob6x1MOrfe45ZbeLb
Mj81MFV/CpoJQk1pxA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:59 2026 by rpki-client