Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144189.roa
File: AS144189.roa (raw, json)
Hash identifier: J78DC9V4aKY5dLd6iXa5OkNMDopl1TGCFewoUPvx92s=
Subject key identifier: C5:9C:0A:A7:60:7C:EB:71:D3:EE:C9:F7:D7:23:E1:F9:07:D5:E3:D7
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 30D0252E0DAE34CBC24B2F195A84469FB6ADE230
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144189.roa
Signing time: Fri 22 May 2026 01:50:45 +0000
ROA not before: Fri 22 May 2026 01:45:45 +0000
ROA not after: Fri 21 May 2027 01:50:45 +0000
asID: 144189
IP address blocks: 240a:a603::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:d0:25:2e:0d:ae:34:cb:c2:4b:2f:19:5a:84:46:9f:b6:ad:e2:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:45 2026 GMT
Not After : May 21 01:50:45 2027 GMT
Subject: CN=C59C0AA7607CEB71D3EEC9F7D723E1F907D5E3D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a1:fa:2e:da:fa:56:2b:bd:a6:e4:82:b4:b8:
f4:d4:3b:26:b7:21:a2:4a:88:c1:f8:88:7c:f1:54:
72:6f:0e:e7:08:65:34:ae:56:8c:d6:f0:04:a3:02:
52:63:a8:e6:61:ee:ff:36:41:a7:8b:6b:21:96:9f:
98:ca:92:1c:63:c9:a8:40:74:07:49:5d:6b:ef:33:
a9:0e:84:19:09:ec:47:b5:aa:7c:93:9e:ef:80:f1:
f2:07:44:61:b5:1a:a8:8e:0c:23:a3:8a:19:f0:e6:
b0:71:56:62:3c:39:b0:1f:59:02:39:68:69:24:f3:
4d:29:98:45:0a:28:42:2a:7c:75:37:88:2d:f6:ec:
b8:40:01:ad:91:42:1d:b0:db:d5:c8:e4:1f:43:1f:
9b:fb:06:b6:55:c0:3d:7e:40:3a:84:67:3f:f9:0c:
78:f8:5b:57:c0:05:9c:12:21:f6:ff:69:2e:25:ea:
01:a2:e8:af:d8:1e:b3:3a:cc:38:a0:5c:d7:cd:b9:
08:02:ae:ea:13:71:44:34:88:ed:02:d7:da:5e:c7:
f2:56:8b:8c:8a:56:2a:7d:6e:a4:dd:45:66:86:c4:
68:5e:27:d5:7f:e4:4d:6b:5f:37:6a:c1:43:bc:87:
b0:00:e6:ea:a4:b9:f6:6f:13:95:bf:62:53:e4:1b:
12:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:9C:0A:A7:60:7C:EB:71:D3:EE:C9:F7:D7:23:E1:F9:07:D5:E3:D7
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144189.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a603::/32
Signature Algorithm: sha256WithRSAEncryption
63:dd:d6:11:3a:ea:bb:82:df:29:ff:59:d9:e8:a4:1e:fa:ee:
49:e4:67:0e:2c:f2:e7:e6:61:26:dc:4b:94:27:c9:0f:e2:b6:
be:d3:6a:ec:97:26:82:bf:02:af:72:01:c3:ae:52:bb:15:b7:
c4:8c:a6:d5:6c:18:83:29:35:00:c5:43:df:0d:a1:bb:a9:c8:
2e:3e:a7:06:64:e4:59:b4:c3:e8:d8:8c:6d:bb:1b:b1:96:71:
ba:4a:dc:3e:8d:3f:9e:04:fb:08:39:71:92:a1:cc:e5:16:8f:
a3:f7:08:72:b0:a3:5f:8a:39:68:f2:32:69:b4:cf:0b:46:1d:
98:cf:99:3b:e0:b7:ff:48:78:e2:23:96:cd:b6:41:53:71:17:
95:ab:ca:b0:f5:8b:7d:53:b4:96:6f:88:10:c3:e4:82:01:f4:
e5:b4:fb:5e:83:6b:40:9e:fe:90:de:6f:e0:ea:21:5f:5c:4f:
f7:f5:eb:61:d4:bc:15:4e:4e:e9:d7:19:13:4d:fc:0a:83:a1:
3a:8a:04:3e:64:80:f7:70:3e:9d:3d:89:2d:02:3f:ea:7a:fc:
41:43:dd:71:d5:d8:41:f9:5d:ec:bf:50:99:6d:25:70:de:c0:
36:3d:f2:65:6e:c1:e1:66:b2:54:ce:dc:95:56:8b:0d:ce:b9:
f2:b5:3d:9f
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUMNAlLg2uNMvCSy8ZWoRGn7at4jAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwMTQ1NDVaFw0yNzA1MjEwMTUwNDVaMDMxMTAvBgNV
BAMTKEM1OUMwQUE3NjA3Q0VCNzFEM0VFQzlGN0Q3MjNFMUY5MDdENUUzRDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIofou2vpWK72m5IK0uPTUOya3
IaJKiMH4iHzxVHJvDucIZTSuVozW8ASjAlJjqOZh7v82QaeLayGWn5jKkhxjyahA
dAdJXWvvM6kOhBkJ7Ee1qnyTnu+A8fIHRGG1GqiODCOjihnw5rBxVmI8ObAfWQI5
aGkk800pmEUKKEIqfHU3iC327LhAAa2RQh2w29XI5B9DH5v7BrZVwD1+QDqEZz/5
DHj4W1fABZwSIfb/aS4l6gGi6K/YHrM6zDigXNfNuQgCruoTcUQ0iO0C19pex/JW
i4yKVip9bqTdRWaGxGheJ9V/5E1rXzdqwUO8h7AA5uqkufZvE5W/YlPkGxK5AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUxZwKp2B863HT7sn31yPh+QfV49cwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0MTg5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqmAzANBgkqhkiG9w0BAQsFAAOCAQEAY93W
ETrqu4LfKf9Z2eikHvruSeRnDizy5+ZhJtxLlCfJD+K2vtNq7Jcmgr8Cr3IBw65S
uxW3xIym1WwYgyk1AMVD3w2hu6nILj6nBmTkWbTD6NiMbbsbsZZxukrcPo0/ngT7
CDlxkqHM5RaPo/cIcrCjX4o5aPIyabTPC0YdmM+ZO+C3/0h44iOWzbZBU3EXlavK
sPWLfVO0lm+IEMPkggH05bT7XoNrQJ7+kN5v4OohX1xP9/XrYdS8FU5O6dcZE038
CoOhOooEPmSA93A+nT2JLQI/6nr8QUPdcdXYQfld7L9QmW0lcN7ANj3yZW7B4Way
VM7clVaLDc658rU9nw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:56 2026 by rpki-client