Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144173.roa
File: AS144173.roa (raw, json)
Hash identifier: lnIHuLqCkDwgB3zvcb7bZ6tJ6nwAfP9xzGdiymtpzyY=
Subject key identifier: D5:CA:37:60:F6:3C:78:44:4C:2B:FA:2D:76:0A:42:82:4E:FD:3C:76
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 057D28531C40EA2A9BC51F498B1E0A3F4CB61694
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144173.roa
Signing time: Mon 25 May 2026 02:22:30 +0000
ROA not before: Mon 25 May 2026 02:17:30 +0000
ROA not after: Mon 24 May 2027 02:22:30 +0000
asID: 144173
IP address blocks: 240a:a5f3::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:7d:28:53:1c:40:ea:2a:9b:c5:1f:49:8b:1e:0a:3f:4c:b6:16:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:30 2026 GMT
Not After : May 24 02:22:30 2027 GMT
Subject: CN=D5CA3760F63C78444C2BFA2D760A42824EFD3C76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e4:f3:a5:22:01:d5:96:8a:ea:19:92:e0:55:
17:47:a7:4f:05:4b:75:8d:3f:00:fe:ee:f5:be:1b:
8b:10:4e:17:e5:2d:5a:12:07:fe:0c:d7:37:c4:c1:
ad:c2:d3:21:86:8d:b3:86:46:d6:74:20:5f:7d:9f:
b4:c6:69:c8:0b:0e:a5:49:c4:83:1f:47:a1:cc:51:
02:09:d5:72:1b:33:55:aa:8e:1c:d2:99:58:f1:f3:
d9:f2:4e:cb:b6:99:ea:ee:97:d1:81:89:72:34:17:
3b:fb:3a:b9:0d:98:7a:ff:1f:65:f1:f2:43:71:c4:
0b:6c:cb:77:52:66:ea:17:78:00:81:09:94:df:18:
af:1e:a6:e4:96:88:1e:2a:fa:4b:a3:ef:73:99:04:
ac:d9:ae:f8:61:e0:0d:9c:0b:5f:65:f4:fa:01:08:
06:06:13:73:9f:89:cb:b3:8a:f5:bb:47:1b:ce:5b:
74:fe:ff:7c:91:c1:16:bc:33:2c:43:be:bf:f0:bc:
ee:de:55:c2:d8:8c:f1:e1:68:73:2e:35:0f:36:c7:
0a:42:23:27:01:4d:ae:38:ad:f5:7a:5b:a7:40:35:
79:6e:09:e4:e2:d1:92:b3:ff:65:8e:89:d0:f6:9d:
66:10:59:2a:66:fe:8f:78:30:a0:36:f5:e1:f8:fa:
12:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:CA:37:60:F6:3C:78:44:4C:2B:FA:2D:76:0A:42:82:4E:FD:3C:76
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144173.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a5f3::/32
Signature Algorithm: sha256WithRSAEncryption
73:01:10:64:30:00:9c:2e:8a:e4:11:80:40:4f:1e:ca:9e:80:
41:d8:30:4c:d1:e7:10:c3:16:80:ec:cd:75:ca:7b:a0:2a:45:
f3:7a:ba:b0:ec:59:32:a9:bd:a5:af:a5:d8:8c:b2:49:27:b1:
25:ac:ca:b3:d6:fb:04:6b:57:85:68:bf:6d:76:60:3f:17:15:
97:ba:90:58:8d:e7:c1:10:0c:73:f8:c1:10:9e:70:1b:58:24:
c3:28:94:07:f1:44:90:2e:0a:01:56:3f:c9:13:42:b6:23:82:
96:c8:d9:6e:51:7f:8d:4f:a0:eb:b1:e5:7a:d7:21:41:3c:0d:
2b:9f:f6:54:56:ca:2f:3c:b4:fb:b1:01:29:07:19:0d:3b:1a:
7a:c5:a9:92:27:f9:79:1a:9f:2f:4d:66:a7:b6:66:81:dd:36:
e2:69:32:af:6d:2e:e4:2c:6f:d2:cf:01:5e:55:b7:e7:62:1b:
08:33:1f:37:eb:ba:f4:75:3a:5f:8a:dc:cd:e4:71:65:39:41:
26:e7:20:d7:e5:31:5a:35:e2:0c:b3:f9:87:1e:12:f2:73:bb:
61:ab:99:ce:b7:c2:82:ba:4b:5e:33:08:e2:d9:ea:b2:02:de:
b1:88:25:3c:2f:f0:ad:3a:51:6b:9b:cb:46:95:e9:81:96:af:
4a:2e:8c:28
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUBX0oUxxA6iqbxR9Jix4KP0y2FpQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMjE3MzBaFw0yNzA1MjQwMjIyMzBaMDMxMTAvBgNV
BAMTKEQ1Q0EzNzYwRjYzQzc4NDQ0QzJCRkEyRDc2MEE0MjgyNEVGRDNDNzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh5POlIgHVlorqGZLgVRdHp08F
S3WNPwD+7vW+G4sQThflLVoSB/4M1zfEwa3C0yGGjbOGRtZ0IF99n7TGacgLDqVJ
xIMfR6HMUQIJ1XIbM1WqjhzSmVjx89nyTsu2merul9GBiXI0Fzv7OrkNmHr/H2Xx
8kNxxAtsy3dSZuoXeACBCZTfGK8epuSWiB4q+kuj73OZBKzZrvhh4A2cC19l9PoB
CAYGE3OficuzivW7RxvOW3T+/3yRwRa8MyxDvr/wvO7eVcLYjPHhaHMuNQ82xwpC
IycBTa44rfV6W6dANXluCeTi0ZKz/2WOidD2nWYQWSpm/o94MKA29eH4+hJ7AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU1co3YPY8eERMK/otdgpCgk79PHYwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0MTczLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAql8zANBgkqhkiG9w0BAQsFAAOCAQEAcwEQ
ZDAAnC6K5BGAQE8eyp6AQdgwTNHnEMMWgOzNdcp7oCpF83q6sOxZMqm9pa+l2Iyy
SSexJazKs9b7BGtXhWi/bXZgPxcVl7qQWI3nwRAMc/jBEJ5wG1gkwyiUB/FEkC4K
AVY/yRNCtiOClsjZblF/jU+g67HletchQTwNK5/2VFbKLzy0+7EBKQcZDTsaesWp
kif5eRqfL01mp7Zmgd024mkyr20u5Cxv0s8BXlW352IbCDMfN+u69HU6X4rczeRx
ZTlBJucg1+UxWjXiDLP5hx4S8nO7YauZzrfCgrpLXjMI4tnqsgLesYglPC/wrTpR
a5vLRpXpgZavSi6MKA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:22 2026 by rpki-client