Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144185.roa
File: AS144185.roa (raw, json)
Hash identifier: yl9buTb85e7aGbMdZChcb5LAYezHNqzyYR2if9xK874=
Subject key identifier: 95:34:3E:D0:3E:70:4B:43:60:FF:F8:0A:86:9D:DE:86:CA:6C:EE:E1
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7C762B9070164883DDA6F11B1CCA4791EFE8F67D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144185.roa
Signing time: Fri 22 May 2026 02:47:41 +0000
ROA not before: Fri 22 May 2026 02:42:41 +0000
ROA not after: Fri 21 May 2027 02:47:41 +0000
asID: 144185
IP address blocks: 240a:a5ff::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:76:2b:90:70:16:48:83:dd:a6:f1:1b:1c:ca:47:91:ef:e8:f6:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:41 2026 GMT
Not After : May 21 02:47:41 2027 GMT
Subject: CN=95343ED03E704B4360FFF80A869DDE86CA6CEEE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:66:f9:bb:5a:28:b1:42:fe:7b:5a:bc:9e:7d:
da:68:34:71:ec:73:fb:72:77:d5:72:f1:c0:8f:85:
7a:a4:af:69:5c:0f:0e:c0:8f:8e:8a:99:46:3f:f3:
db:fd:6c:24:11:9c:a5:01:74:0b:c9:82:0a:a9:19:
a0:0f:fd:30:55:ab:28:f1:fa:e5:e3:3e:23:35:70:
5b:c3:4e:f3:13:de:2e:83:73:00:d8:97:df:d2:09:
0c:2a:10:b0:5a:c4:5b:53:8d:51:6f:6a:5d:51:02:
7a:01:81:50:72:d1:dc:0d:f8:d8:a1:fc:04:dd:c0:
00:63:33:35:e2:17:5b:25:5a:e6:76:63:c5:c3:21:
be:0c:dd:53:34:14:a7:29:9d:25:de:ad:b7:e1:2b:
4e:b4:f2:72:76:4e:57:21:ca:50:e6:18:13:7c:4a:
e9:da:bc:82:ff:ca:5e:2c:36:d8:b8:bb:79:96:a2:
53:8e:ad:95:56:91:01:07:ed:61:02:f2:2d:48:ab:
d9:12:49:7b:0b:ac:78:47:90:2b:8a:54:e4:f8:28:
bb:51:f5:7c:6c:b2:1b:cd:32:66:1a:93:3b:77:39:
fb:44:0a:cf:b6:16:f2:dd:94:03:8f:0e:59:8b:61:
75:7a:ee:17:40:7c:75:50:c7:9a:c9:d9:05:5b:20:
7c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:34:3E:D0:3E:70:4B:43:60:FF:F8:0A:86:9D:DE:86:CA:6C:EE:E1
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144185.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a5ff::/32
Signature Algorithm: sha256WithRSAEncryption
92:c4:92:d9:81:32:68:3b:46:28:e1:6f:56:fe:5a:ba:8a:3d:
ba:03:ef:33:27:a3:4d:67:cc:f2:c5:df:d8:cf:7e:9e:f6:ed:
95:2d:09:b0:66:f6:0b:c0:46:bb:fd:69:fd:c5:ac:11:b6:d8:
cc:c5:ae:89:ab:9c:d2:85:bd:ea:1f:19:ae:f7:f7:0d:d9:82:
31:99:1b:7e:9c:89:a8:00:5a:c4:12:6d:62:a3:b4:8b:d6:49:
05:cc:e1:02:b3:e4:8b:f9:d9:a9:a2:96:5f:7b:ba:34:55:c6:
49:af:1c:6d:0b:ff:1d:f7:53:5f:1f:fa:8b:74:34:89:ac:a0:
23:80:be:c0:29:82:4e:28:f3:18:6f:bb:90:c3:41:23:3a:32:
c1:cc:1a:06:91:80:74:70:e1:40:f3:0f:ce:6a:2b:3c:d3:cc:
95:c6:9f:29:f2:f2:4b:ba:67:b7:ab:cb:66:46:9e:33:84:25:
0e:42:e7:7b:aa:1c:98:ec:ba:48:90:07:0c:f9:e7:3c:bb:0d:
57:85:4f:5b:a0:02:1a:54:dd:ac:3b:cc:be:91:66:10:43:f1:
fb:2c:8d:dc:d6:3f:07:d8:d6:03:5d:84:50:28:52:39:93:d8:
5a:bd:1c:19:7f:7a:7b:1e:70:d4:c6:62:bc:4c:d0:d6:c7:4e:
d1:78:1a:2b
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUfHYrkHAWSIPdpvEbHMpHke/o9n0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwMjQyNDFaFw0yNzA1MjEwMjQ3NDFaMDMxMTAvBgNV
BAMTKDk1MzQzRUQwM0U3MDRCNDM2MEZGRjgwQTg2OURERTg2Q0E2Q0VFRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjZvm7WiixQv57WryefdpoNHHs
c/tyd9Vy8cCPhXqkr2lcDw7Aj46KmUY/89v9bCQRnKUBdAvJggqpGaAP/TBVqyjx
+uXjPiM1cFvDTvMT3i6DcwDYl9/SCQwqELBaxFtTjVFval1RAnoBgVBy0dwN+Nih
/ATdwABjMzXiF1slWuZ2Y8XDIb4M3VM0FKcpnSXerbfhK0608nJ2TlchylDmGBN8
SunavIL/yl4sNti4u3mWolOOrZVWkQEH7WEC8i1Iq9kSSXsLrHhHkCuKVOT4KLtR
9XxsshvNMmYakzt3OftECs+2FvLdlAOPDlmLYXV67hdAfHVQx5rJ2QVbIHxzAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUlTQ+0D5wS0Ng//gKhp3ehsps7uEwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0MTg1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAql/zANBgkqhkiG9w0BAQsFAAOCAQEAksSS
2YEyaDtGKOFvVv5auoo9ugPvMyejTWfM8sXf2M9+nvbtlS0JsGb2C8BGu/1p/cWs
EbbYzMWuiauc0oW96h8Zrvf3DdmCMZkbfpyJqABaxBJtYqO0i9ZJBczhArPki/nZ
qaKWX3u6NFXGSa8cbQv/HfdTXx/6i3Q0iaygI4C+wCmCTijzGG+7kMNBIzoywcwa
BpGAdHDhQPMPzmorPNPMlcafKfLyS7pnt6vLZkaeM4QlDkLne6ocmOy6SJAHDPnn
PLsNV4VPW6ACGlTdrDvMvpFmEEPx+yyN3NY/B9jWA12EUChSOZPYWr0cGX96ex5w
1MZivEzQ1sdO0XgaKw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:29 2026 by rpki-client