Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144130.roa
File: AS144130.roa (raw, json)
Hash identifier: l8tQo4iHbf6JGkJqtVNC7Axu+wwuN8pgt4LiteY1iy8=
Subject key identifier: C8:91:E5:8B:41:39:F8:D4:DD:2D:E0:F2:F8:3A:75:25:E6:F6:14:0A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3313243D35A698E7FEF422A95B1BCE5C02F7B953
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144130.roa
Signing time: Fri 22 May 2026 04:26:59 +0000
ROA not before: Fri 22 May 2026 04:21:59 +0000
ROA not after: Fri 21 May 2027 04:26:59 +0000
asID: 144130
IP address blocks: 240a:a5c8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:13:24:3d:35:a6:98:e7:fe:f4:22:a9:5b:1b:ce:5c:02:f7:b9:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:21:59 2026 GMT
Not After : May 21 04:26:59 2027 GMT
Subject: CN=C891E58B4139F8D4DD2DE0F2F83A7525E6F6140A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:18:89:cb:ae:d5:11:cc:e2:58:ef:19:c5:87:
41:09:dc:5d:51:e9:f0:90:4f:a2:11:3f:a6:6c:e6:
21:86:92:ac:36:e3:4b:c8:ad:b3:37:f4:a8:b0:24:
ed:62:f6:38:2f:40:78:d1:77:86:47:b0:62:bf:7f:
8a:db:a1:51:f8:42:9c:f6:77:ee:4c:78:9b:55:24:
ac:84:1c:2b:5e:55:d3:85:fe:08:cf:d1:da:20:0c:
ec:cf:b0:6e:b6:7a:75:23:1f:99:4c:39:8a:fe:d2:
53:76:86:fe:e2:86:d6:80:5a:92:17:9a:4f:2a:d1:
1d:46:19:c2:f0:86:a0:95:41:2c:42:ed:26:80:31:
41:d0:7d:b8:0e:c6:fb:8b:50:2f:65:9f:3f:e3:b9:
66:5f:a3:2e:2d:35:7e:ae:d5:fb:be:be:a1:89:b5:
f1:4d:3e:a6:03:75:ff:b5:a2:54:84:b0:c1:44:62:
1a:a7:69:26:39:63:94:9b:2b:d5:8c:27:33:84:7b:
83:d9:00:81:e3:2c:e1:49:8e:53:29:d3:de:5e:f5:
3f:57:f8:68:4f:8b:42:4c:40:c7:ed:da:5a:07:27:
72:d8:65:40:24:6c:ca:9d:d3:8d:a6:74:b0:3c:0c:
0e:a4:39:1d:1a:2a:89:e1:33:ef:75:90:2d:e7:7a:
21:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:91:E5:8B:41:39:F8:D4:DD:2D:E0:F2:F8:3A:75:25:E6:F6:14:0A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a5c8::/32
Signature Algorithm: sha256WithRSAEncryption
7d:eb:4b:85:49:8a:09:e0:41:a0:21:ae:bd:f6:f2:84:b6:b3:
5e:a1:73:a3:25:d5:58:12:18:6e:38:10:56:f7:90:d2:1e:e5:
51:06:37:02:fa:8d:cb:93:ca:71:fe:f8:76:8e:89:83:40:05:
74:bc:ac:dd:f4:f1:3a:ac:45:d6:b5:31:63:48:83:e1:93:7a:
b0:5a:85:ce:5e:6e:dc:cf:8e:67:a7:86:8b:42:2e:d8:78:d5:
47:38:7c:1e:e3:32:17:1f:77:d4:0b:82:d9:37:aa:77:99:e8:
3e:38:a6:4a:41:c9:b7:73:5a:43:57:98:a4:87:f1:bb:f2:a5:
69:0d:8d:94:a7:38:0b:9c:f6:0d:2f:09:e1:eb:b7:a3:74:ca:
24:67:ff:f0:d3:fd:4d:b0:99:e8:80:b3:35:23:33:8d:7f:7b:
60:7f:00:81:dd:5a:06:43:60:11:cf:75:1a:c9:57:d6:5e:23:
88:d4:a9:ab:70:3f:fa:1b:63:b4:b9:97:28:4d:ba:80:a9:d8:
8b:71:81:b2:f2:c1:8f:1a:e6:90:51:cc:a8:da:81:3e:d3:89:
4a:37:7e:59:89:9f:08:ed:ff:3a:91:3e:c8:0d:22:b3:d5:04:
cf:4b:15:c1:26:83:b0:eb:82:00:89:05:00:9e:73:5e:7d:8b:
18:ac:60:ed
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUMxMkPTWmmOf+9CKpWxvOXAL3uVMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNDIxNTlaFw0yNzA1MjEwNDI2NTlaMDMxMTAvBgNV
BAMTKEM4OTFFNThCNDEzOUY4RDRERDJERTBGMkY4M0E3NTI1RTZGNjE0MEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1GInLrtURzOJY7xnFh0EJ3F1R
6fCQT6IRP6Zs5iGGkqw240vIrbM39KiwJO1i9jgvQHjRd4ZHsGK/f4rboVH4Qpz2
d+5MeJtVJKyEHCteVdOF/gjP0dogDOzPsG62enUjH5lMOYr+0lN2hv7ihtaAWpIX
mk8q0R1GGcLwhqCVQSxC7SaAMUHQfbgOxvuLUC9lnz/juWZfoy4tNX6u1fu+vqGJ
tfFNPqYDdf+1olSEsMFEYhqnaSY5Y5SbK9WMJzOEe4PZAIHjLOFJjlMp095e9T9X
+GhPi0JMQMft2loHJ3LYZUAkbMqd042mdLA8DA6kOR0aKonhM+91kC3neiHtAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUyJHli0E5+NTdLeDy+Dp1Jeb2FAowHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0MTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqlyDANBgkqhkiG9w0BAQsFAAOCAQEAfetL
hUmKCeBBoCGuvfbyhLazXqFzoyXVWBIYbjgQVveQ0h7lUQY3AvqNy5PKcf74do6J
g0AFdLys3fTxOqxF1rUxY0iD4ZN6sFqFzl5u3M+OZ6eGi0Iu2HjVRzh8HuMyFx93
1AuC2Teqd5noPjimSkHJt3NaQ1eYpIfxu/KlaQ2NlKc4C5z2DS8J4eu3o3TKJGf/
8NP9TbCZ6ICzNSMzjX97YH8Agd1aBkNgEc91GslX1l4jiNSpq3A/+htjtLmXKE26
gKnYi3GBsvLBjxrmkFHMqNqBPtOJSjd+WYmfCO3/OpE+yA0is9UEz0sVwSaDsOuC
AIkFAJ5zXn2LGKxg7Q==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:18 2026 by rpki-client