Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144168.roa
File: AS144168.roa (raw, json)
Hash identifier: /mRX9BlZiohNmz4Xj9IQnOx9Y0anVU4VpbnojaSumus=
Subject key identifier: 86:65:22:27:4E:E4:EC:D4:45:96:28:FB:0A:92:27:46:7A:9E:91:2D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2C33E96607ECAE32D99021B8F5B1BBDD91913C78
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144168.roa
Signing time: Fri 22 May 2026 07:24:52 +0000
ROA not before: Fri 22 May 2026 07:19:52 +0000
ROA not after: Fri 21 May 2027 07:24:52 +0000
asID: 144168
IP address blocks: 240a:a5ee::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:33:e9:66:07:ec:ae:32:d9:90:21:b8:f5:b1:bb:dd:91:91:3c:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:52 2026 GMT
Not After : May 21 07:24:52 2027 GMT
Subject: CN=866522274EE4ECD4459628FB0A9227467A9E912D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e5:b1:dd:cc:34:46:0c:00:85:97:57:5c:75:
59:b9:3d:20:8c:1b:0e:bb:25:08:2b:b8:1c:f0:a4:
c6:6d:38:eb:b5:e1:c3:3d:4f:c9:4e:50:66:b5:cf:
b0:6e:f5:b4:1b:5a:3d:bb:73:3c:4f:02:13:ab:c5:
1e:8c:26:13:1e:2b:b7:02:ae:f5:2f:63:5c:79:fe:
07:ed:d6:8d:70:ec:ff:57:3d:d6:95:3e:f6:37:45:
10:6a:a6:68:92:3f:85:e3:40:95:f1:19:04:24:aa:
a0:80:ee:1d:da:ef:66:aa:48:84:bf:c7:f1:55:ff:
7e:5e:1a:ff:ae:09:85:c5:07:ff:df:fa:7a:f7:0d:
2b:d1:b9:ff:60:15:00:fe:7b:12:1e:ec:b0:b5:fd:
a2:c4:8e:e7:2f:9f:39:d6:da:98:90:af:03:f7:07:
47:6b:94:80:c9:17:42:24:66:7d:6f:a2:bd:4f:3b:
56:4a:82:58:42:18:4b:5e:6c:8a:ea:1d:9c:f0:7e:
e1:e4:6d:69:b5:5f:5a:4f:b7:3d:09:2d:cb:06:23:
2a:c2:c8:35:27:dd:fa:56:f3:1b:ce:5c:b9:45:8d:
c9:22:6c:53:12:b4:80:ff:f9:96:2e:31:e0:4e:9a:
0f:a2:0d:0f:5c:f8:a8:6b:9d:30:27:37:a0:af:f4:
71:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:65:22:27:4E:E4:EC:D4:45:96:28:FB:0A:92:27:46:7A:9E:91:2D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144168.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a5ee::/32
Signature Algorithm: sha256WithRSAEncryption
85:f7:8f:49:99:7e:a6:33:b8:5d:f1:08:1a:02:c0:ba:f1:70:
b2:82:df:39:62:aa:e2:4f:4d:f5:4b:54:13:71:08:0d:09:c6:
40:9e:28:e4:00:fc:de:7a:ae:b1:20:00:4f:6a:e4:b0:1f:b2:
c9:d4:be:83:df:8e:de:23:2c:9a:cf:b8:6d:20:d8:ef:be:c2:
bf:26:ef:bf:bc:95:55:98:82:65:1d:9f:28:b7:e9:d4:48:5c:
10:fe:62:63:ab:b4:3c:3d:ca:69:1f:5a:a7:a2:7d:bf:15:13:
a4:f5:76:c3:ad:bc:02:7f:de:a5:06:f3:5a:a5:ee:8a:81:9d:
a2:58:71:19:b6:a4:c3:f0:e0:cd:c7:15:37:b1:f0:08:94:cc:
d8:22:aa:20:57:8c:d6:cc:b4:d2:49:5c:3b:a4:8f:ad:72:05:
4d:43:68:24:a9:9a:75:53:3a:db:97:7e:fe:52:96:fd:3c:3b:
0d:00:83:35:7f:55:8e:5d:d8:47:b4:da:1b:96:52:dd:ce:88:
da:38:9f:e2:d8:3f:d7:9c:ac:29:a6:d9:48:99:2e:dd:5a:50:
26:9d:e5:8f:d5:ff:e2:06:ae:fe:11:9f:97:ac:f6:15:c9:3b:
0e:e6:3d:dc:32:46:e1:f2:48:b4:ad:80:cc:2b:64:89:10:ec:
67:f6:c9:21
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIULDPpZgfsrjLZkCG49bG73ZGRPHgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzE5NTJaFw0yNzA1MjEwNzI0NTJaMDMxMTAvBgNV
BAMTKDg2NjUyMjI3NEVFNEVDRDQ0NTk2MjhGQjBBOTIyNzQ2N0E5RTkxMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy5bHdzDRGDACFl1dcdVm5PSCM
Gw67JQgruBzwpMZtOOu14cM9T8lOUGa1z7Bu9bQbWj27czxPAhOrxR6MJhMeK7cC
rvUvY1x5/gft1o1w7P9XPdaVPvY3RRBqpmiSP4XjQJXxGQQkqqCA7h3a72aqSIS/
x/FV/35eGv+uCYXFB//f+nr3DSvRuf9gFQD+exIe7LC1/aLEjucvnznW2piQrwP3
B0drlIDJF0IkZn1vor1PO1ZKglhCGEtebIrqHZzwfuHkbWm1X1pPtz0JLcsGIyrC
yDUn3fpW8xvOXLlFjckibFMStID/+ZYuMeBOmg+iDQ9c+KhrnTAnN6Cv9HEBAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUhmUiJ07k7NRFlij7CpInRnqekS0wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0MTY4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAql7jANBgkqhkiG9w0BAQsFAAOCAQEAhfeP
SZl+pjO4XfEIGgLAuvFwsoLfOWKq4k9N9UtUE3EIDQnGQJ4o5AD83nqusSAAT2rk
sB+yydS+g9+O3iMsms+4bSDY777Cvybvv7yVVZiCZR2fKLfp1EhcEP5iY6u0PD3K
aR9ap6J9vxUTpPV2w628An/epQbzWqXuioGdolhxGbakw/DgzccVN7HwCJTM2CKq
IFeM1sy00klcO6SPrXIFTUNoJKmadVM625d+/lKW/Tw7DQCDNX9Vjl3YR7TaG5ZS
3c6I2jif4tg/15ysKabZSJku3VpQJp3lj9X/4gau/hGfl6z2Fck7DuY93DJG4fJI
tK2AzCtkiRDsZ/bJIQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:10 2026 by rpki-client