Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144162.roa
File: AS144162.roa (raw, json)
Hash identifier: kOAHcrULsVlWjkzzpbKP+xIYS+NUE28GhaZYzBna7TU=
Subject key identifier: 67:65:03:4B:65:56:C0:51:08:39:00:C9:B2:85:38:0E:E6:DC:ED:4D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 34242BC681E0FFC7EDF98BCB5057093BB0E18BD9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144162.roa
Signing time: Fri 22 May 2026 02:47:38 +0000
ROA not before: Fri 22 May 2026 02:42:38 +0000
ROA not after: Fri 21 May 2027 02:47:38 +0000
asID: 144162
IP address blocks: 240a:a5e8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:24:2b:c6:81:e0:ff:c7:ed:f9:8b:cb:50:57:09:3b:b0:e1:8b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:38 2026 GMT
Not After : May 21 02:47:38 2027 GMT
Subject: CN=6765034B6556C051083900C9B285380EE6DCED4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ea:05:1f:ba:c8:a9:2c:91:ee:34:df:16:86:
1e:b6:de:fe:a7:9a:80:f9:3f:5b:bd:08:dc:70:b0:
cc:c2:66:63:90:d9:51:fe:c5:31:4a:26:8e:ba:a7:
3a:49:b7:b2:6f:01:86:3d:1e:5e:ac:e7:29:7d:19:
30:67:28:ef:84:6b:b1:5b:8f:19:7e:e0:67:17:27:
01:37:a4:ab:ce:55:de:6c:8b:5d:db:a5:99:bf:6b:
1e:c3:94:ca:5c:d5:9f:f7:11:d7:15:33:63:7c:5b:
cc:e7:65:e3:4c:13:af:a3:5e:23:89:bb:fa:d9:d0:
66:91:2d:a7:46:0b:fc:15:59:f0:b7:12:b3:e8:80:
40:c7:c7:5c:5c:15:e6:9e:ee:f2:47:3b:60:dc:1e:
0e:15:3d:c3:cd:00:e1:86:ee:1b:2b:a3:4d:32:9e:
bb:3c:81:a3:d7:cd:26:df:dc:fa:b4:a3:5f:18:17:
d8:32:8e:a8:1a:94:05:25:3d:46:17:f9:28:65:5e:
56:6d:1d:03:2a:ac:0f:a2:ca:7e:da:88:43:48:0f:
bf:46:27:ca:a5:be:6a:c7:46:6d:11:e1:42:0b:6f:
f6:e6:6c:cb:ee:b5:bf:a1:44:26:cf:1e:b5:f9:4d:
2b:2e:02:fc:55:90:f9:04:c1:a5:e3:91:74:07:30:
e1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:65:03:4B:65:56:C0:51:08:39:00:C9:B2:85:38:0E:E6:DC:ED:4D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144162.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a5e8::/32
Signature Algorithm: sha256WithRSAEncryption
3b:fc:8d:08:e3:80:d5:b2:3e:36:73:97:08:39:09:4e:f4:08:
70:17:25:a2:ad:6c:e9:85:05:eb:c5:43:ac:43:f1:a8:d6:8e:
90:f6:cc:a3:84:b8:34:8d:77:24:3c:64:40:90:6d:1f:e4:22:
2c:c5:86:8f:f1:1e:22:1d:b6:1b:6a:39:65:2c:c7:bf:3d:44:
27:c8:dd:1a:8b:64:b2:8f:cc:b5:00:0e:45:e1:0e:22:1e:53:
fa:65:17:df:ca:98:99:7d:67:eb:e7:db:24:3d:9e:f1:ff:73:
44:8b:95:20:99:69:55:57:3d:bc:eb:f7:4a:c0:08:78:45:7d:
a1:87:82:d6:d5:d2:19:05:4b:e9:b6:ee:1e:56:2f:3f:2d:1c:
5a:b5:14:a5:02:e6:f8:a2:84:a3:be:3c:e8:98:dc:7b:b2:fd:
dd:ed:75:9d:58:b7:7e:52:17:00:11:d4:0c:16:24:57:cd:ce:
80:3e:43:95:a0:b1:7e:4c:63:34:49:bf:57:ea:45:eb:05:bd:
80:6c:ae:df:7c:fb:67:c7:3f:0c:b4:20:51:45:8f:78:49:86:
89:05:46:13:20:e0:63:43:4c:34:17:a7:09:fa:92:50:29:d9:
21:a7:33:69:0b:f0:b6:55:3f:a2:14:8c:4f:57:41:f7:76:1f:
5d:4b:e1:95
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUNCQrxoHg/8ft+YvLUFcJO7Dhi9kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwMjQyMzhaFw0yNzA1MjEwMjQ3MzhaMDMxMTAvBgNV
BAMTKDY3NjUwMzRCNjU1NkMwNTEwODM5MDBDOUIyODUzODBFRTZEQ0VENEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCI6gUfusipLJHuNN8Whh623v6n
moD5P1u9CNxwsMzCZmOQ2VH+xTFKJo66pzpJt7JvAYY9Hl6s5yl9GTBnKO+Ea7Fb
jxl+4GcXJwE3pKvOVd5si13bpZm/ax7DlMpc1Z/3EdcVM2N8W8znZeNME6+jXiOJ
u/rZ0GaRLadGC/wVWfC3ErPogEDHx1xcFeae7vJHO2DcHg4VPcPNAOGG7hsro00y
nrs8gaPXzSbf3Pq0o18YF9gyjqgalAUlPUYX+ShlXlZtHQMqrA+iyn7aiENID79G
J8qlvmrHRm0R4UILb/bmbMvutb+hRCbPHrX5TSsuAvxVkPkEwaXjkXQHMOFTAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUZ2UDS2VWwFEIOQDJsoU4Dubc7U0wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0MTYyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAql6DANBgkqhkiG9w0BAQsFAAOCAQEAO/yN
COOA1bI+NnOXCDkJTvQIcBcloq1s6YUF68VDrEPxqNaOkPbMo4S4NI13JDxkQJBt
H+QiLMWGj/EeIh22G2o5ZSzHvz1EJ8jdGotkso/MtQAOReEOIh5T+mUX38qYmX1n
6+fbJD2e8f9zRIuVIJlpVVc9vOv3SsAIeEV9oYeC1tXSGQVL6bbuHlYvPy0cWrUU
pQLm+KKEo7486Jjce7L93e11nVi3flIXABHUDBYkV83OgD5DlaCxfkxjNEm/V+pF
6wW9gGyu33z7Z8c/DLQgUUWPeEmGiQVGEyDgY0NMNBenCfqSUCnZIaczaQvwtlU/
ohSMT1dB93YfXUvhlQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:36 2026 by rpki-client