Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144128.roa
File: AS144128.roa (raw, json)
Hash identifier: +bObVFAcTr76G4s0jIT1Oufcqc+Xe8UOpA+DJHnWscw=
Subject key identifier: 59:C2:CA:23:A0:F3:15:0C:09:45:6C:03:ED:A2:C0:8C:D1:CF:B7:81
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6182FFADD306100F83D6A95D6C8C5BF31A931084
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144128.roa
Signing time: Fri 22 May 2026 02:47:36 +0000
ROA not before: Fri 22 May 2026 02:42:36 +0000
ROA not after: Fri 21 May 2027 02:47:36 +0000
asID: 144128
IP address blocks: 240a:a5c6::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:82:ff:ad:d3:06:10:0f:83:d6:a9:5d:6c:8c:5b:f3:1a:93:10:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:36 2026 GMT
Not After : May 21 02:47:36 2027 GMT
Subject: CN=59C2CA23A0F3150C09456C03EDA2C08CD1CFB781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:de:96:3d:78:13:2c:aa:ff:27:6d:df:d9:6b:
ba:f1:fb:fc:ff:5a:b9:8c:69:97:bf:ec:31:48:d0:
00:07:55:6f:fe:f6:ea:52:2a:e6:e9:6b:7f:7d:a2:
43:7d:e4:d6:78:01:64:85:9e:98:5f:9e:b0:66:69:
27:a8:37:5d:98:e7:b9:16:3c:de:c2:f4:5e:a1:bb:
83:c5:6d:2a:9b:df:27:0e:2d:91:e4:c5:c8:e3:4e:
17:20:0a:35:56:2f:23:90:87:b1:04:18:29:c3:20:
5d:82:17:6a:00:ed:37:b7:92:b9:13:88:be:5a:f8:
e0:3d:8e:29:19:20:28:5a:c7:41:3c:3b:9f:aa:a9:
29:e0:18:a8:ca:d4:b5:3f:43:1c:c8:28:c5:3e:dd:
99:73:10:ed:55:24:4d:25:dc:63:a3:08:04:fe:94:
44:65:e1:59:9f:3e:0a:a3:43:f2:76:d5:20:15:b3:
15:cd:85:0f:11:26:3f:bb:09:76:6e:fd:25:7b:11:
0f:e0:86:f6:b0:41:46:34:cb:ac:34:0b:2d:07:34:
c2:b7:9f:c3:83:86:da:49:dc:85:7f:13:9d:20:46:
00:5e:5c:8a:17:b2:7e:fc:e5:0b:36:38:4e:6e:91:
b0:16:4c:e2:6c:72:6d:8f:df:99:31:a0:db:cd:50:
dc:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C2:CA:23:A0:F3:15:0C:09:45:6C:03:ED:A2:C0:8C:D1:CF:B7:81
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144128.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a5c6::/32
Signature Algorithm: sha256WithRSAEncryption
6b:e9:62:2e:e2:ac:8c:29:1d:2e:55:51:da:12:09:6f:b4:60:
f9:8f:c1:5c:0e:6b:29:ab:60:98:91:36:29:b0:5e:17:48:7c:
c5:93:31:b2:f2:dc:dc:d2:57:05:e9:85:ed:de:33:c3:f5:af:
e4:31:4c:3a:cb:8b:7b:70:c5:fe:8a:c7:a0:f4:35:78:7d:59:
32:22:51:89:9d:51:a8:3b:c0:f4:19:67:88:5d:44:5a:00:62:
7f:14:35:ca:f4:45:6b:1e:f0:e8:7b:46:79:b0:87:9a:73:f5:
a4:48:1f:2f:0a:ae:5c:a4:3a:82:ba:f8:98:bc:6a:94:7a:ee:
ac:5c:ce:c0:ff:74:cc:3c:a9:b9:e6:78:da:71:e4:48:01:ec:
bb:aa:aa:53:92:68:39:c8:cd:cd:bc:59:8b:5c:93:4f:74:d6:
1d:a6:ef:0b:11:e9:a9:3e:2a:69:78:ff:e4:1b:7b:0f:03:59:
4a:5f:19:cc:4a:c3:dc:da:5b:bb:c5:b4:38:c7:24:0a:fa:d7:
12:3f:e1:e4:30:d7:0f:78:9b:54:f4:38:81:18:2d:ca:da:42:
b9:d8:31:d4:a2:38:da:d7:30:ee:48:9b:d1:33:c1:5a:98:6c:
30:31:de:c7:a7:3e:c3:cc:49:49:e0:ee:7b:22:09:92:29:4a:
29:ee:aa:32
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUYYL/rdMGEA+D1qldbIxb8xqTEIQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwMjQyMzZaFw0yNzA1MjEwMjQ3MzZaMDMxMTAvBgNV
BAMTKDU5QzJDQTIzQTBGMzE1MEMwOTQ1NkMwM0VEQTJDMDhDRDFDRkI3ODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn3pY9eBMsqv8nbd/Za7rx+/z/
WrmMaZe/7DFI0AAHVW/+9upSKubpa399okN95NZ4AWSFnphfnrBmaSeoN12Y57kW
PN7C9F6hu4PFbSqb3ycOLZHkxcjjThcgCjVWLyOQh7EEGCnDIF2CF2oA7Te3krkT
iL5a+OA9jikZIChax0E8O5+qqSngGKjK1LU/QxzIKMU+3ZlzEO1VJE0l3GOjCAT+
lERl4VmfPgqjQ/J21SAVsxXNhQ8RJj+7CXZu/SV7EQ/ghvawQUY0y6w0Cy0HNMK3
n8ODhtpJ3IV/E50gRgBeXIoXsn785Qs2OE5ukbAWTOJscm2P35kxoNvNUNwXAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUWcLKI6DzFQwJRWwD7aLAjNHPt4EwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0MTI4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqlxjANBgkqhkiG9w0BAQsFAAOCAQEAa+li
LuKsjCkdLlVR2hIJb7Rg+Y/BXA5rKatgmJE2KbBeF0h8xZMxsvLc3NJXBemF7d4z
w/Wv5DFMOsuLe3DF/orHoPQ1eH1ZMiJRiZ1RqDvA9BlniF1EWgBifxQ1yvRFax7w
6HtGebCHmnP1pEgfLwquXKQ6grr4mLxqlHrurFzOwP90zDypueZ42nHkSAHsu6qq
U5JoOcjNzbxZi1yTT3TWHabvCxHpqT4qaXj/5Bt7DwNZSl8ZzErD3Npbu8W0OMck
CvrXEj/h5DDXD3ibVPQ4gRgtytpCudgx1KI42tcw7kib0TPBWphsMDHex6c+w8xJ
SeDueyIJkilKKe6qMg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:13 2026 by rpki-client