Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144212.roa
File: AS144212.roa (raw, json)
Hash identifier: o08NiZkFw28urr1tR7h220dZlhBSipTWzUmda+Uhzps=
Subject key identifier: 63:2B:37:71:86:D4:6D:A5:B7:1F:A2:BA:13:1C:2D:40:8E:F7:F3:13
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 14C3D40AC2E18D4D552D71743C83269208358356
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144212.roa
Signing time: Tue 26 May 2026 02:34:52 +0000
ROA not before: Tue 26 May 2026 02:29:52 +0000
ROA not after: Tue 25 May 2027 02:34:52 +0000
asID: 144212
IP address blocks: 240a:a61a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:c3:d4:0a:c2:e1:8d:4d:55:2d:71:74:3c:83:26:92:08:35:83:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:29:52 2026 GMT
Not After : May 25 02:34:52 2027 GMT
Subject: CN=632B377186D46DA5B71FA2BA131C2D408EF7F313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b8:58:18:e9:61:92:8c:ce:f8:22:8d:0a:32:
66:cb:a5:3f:7b:2c:e0:65:07:e8:12:e8:a0:39:9b:
08:67:32:3d:e1:72:44:0f:8d:35:bd:3b:28:39:fa:
cc:a7:0d:c7:a3:c1:2a:0b:05:1a:ce:b1:4d:00:ec:
13:ea:a9:f2:d8:07:9c:ac:3e:bd:3f:e0:91:f0:f7:
2a:8c:4a:7f:6f:61:01:fc:b5:39:4b:f4:08:2c:41:
a0:61:e9:86:cc:ea:57:25:04:f3:77:94:75:be:ec:
d2:6f:1a:19:4f:27:8a:fb:06:90:fe:db:8c:28:26:
55:e6:c7:e4:f7:2a:06:23:8b:af:73:2c:c7:7e:a3:
07:94:69:b3:68:3d:49:6b:bb:16:36:39:8a:0e:63:
c2:96:45:66:bc:52:56:0d:c6:d3:5a:d5:4b:ce:2e:
2f:a5:57:c6:4e:73:17:b9:80:3a:ae:c9:7a:b5:1f:
7b:f3:d3:e2:f0:5b:a6:9d:99:96:0d:01:fb:2f:11:
fd:39:58:3a:6d:57:8d:47:b0:1d:e9:4f:3e:53:00:
a3:f1:10:c4:0b:68:d9:79:c8:e8:a3:f8:27:6c:d4:
61:c1:3f:85:8c:c9:43:e4:57:75:f3:30:6d:c5:07:
54:6c:53:db:24:f0:26:b2:b5:54:13:30:51:60:a2:
3d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:2B:37:71:86:D4:6D:A5:B7:1F:A2:BA:13:1C:2D:40:8E:F7:F3:13
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144212.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a61a::/32
Signature Algorithm: sha256WithRSAEncryption
31:d7:2c:6e:14:86:e3:4a:35:0d:2d:94:07:4d:15:24:2d:85:
c1:ec:dc:cf:e3:e0:fc:c7:32:a7:48:68:99:f2:02:ae:c8:08:
e0:1b:43:b9:77:69:02:2d:64:21:1a:42:32:7e:a5:9d:bf:9a:
62:9d:04:ef:41:ec:9c:c3:a5:ad:97:f1:7d:0c:3a:4a:80:6d:
2f:44:1d:9c:ea:c5:97:79:44:de:dd:fb:68:99:09:61:ef:2a:
38:cf:b5:81:7d:5d:74:be:13:1f:29:20:55:e4:52:e4:5e:30:
27:ee:30:6e:87:94:54:fa:47:b3:03:d4:c5:16:59:c3:b9:b6:
66:ae:fc:04:f7:73:11:ac:bf:d7:95:f3:15:4e:38:2f:0b:f0:
c0:13:72:6a:34:a5:60:7d:04:f1:cb:00:b5:c2:1d:0c:a3:07:
39:15:d1:51:88:3f:95:f9:bb:94:81:9f:9c:a1:97:0e:85:0d:
3f:d3:d0:2b:c0:18:67:1d:06:71:5e:22:e3:d3:09:d3:a4:c0:
9f:fd:83:17:28:5a:ee:7e:92:31:32:c1:33:92:5b:35:bc:41:
0d:87:4e:e9:9d:6e:2b:59:9f:cd:8f:ee:0b:07:86:82:54:6a:
70:bf:db:e9:51:63:d5:a3:89:91:f7:05:77:71:29:b2:77:56:
21:cc:f6:52
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUFMPUCsLhjU1VLXF0PIMmkgg1g1YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMjI5NTJaFw0yNzA1MjUwMjM0NTJaMDMxMTAvBgNV
BAMTKDYzMkIzNzcxODZENDZEQTVCNzFGQTJCQTEzMUMyRDQwOEVGN0YzMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/uFgY6WGSjM74Io0KMmbLpT97
LOBlB+gS6KA5mwhnMj3hckQPjTW9Oyg5+synDcejwSoLBRrOsU0A7BPqqfLYB5ys
Pr0/4JHw9yqMSn9vYQH8tTlL9AgsQaBh6YbM6lclBPN3lHW+7NJvGhlPJ4r7BpD+
24woJlXmx+T3KgYji69zLMd+oweUabNoPUlruxY2OYoOY8KWRWa8UlYNxtNa1UvO
Li+lV8ZOcxe5gDquyXq1H3vz0+LwW6admZYNAfsvEf05WDptV41HsB3pTz5TAKPx
EMQLaNl5yOij+Cds1GHBP4WMyUPkV3XzMG3FB1RsU9sk8CaytVQTMFFgoj0nAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUYys3cYbUbaW3H6K6ExwtQI738xMwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0MjEyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqmGjANBgkqhkiG9w0BAQsFAAOCAQEAMdcs
bhSG40o1DS2UB00VJC2Fwezcz+Pg/Mcyp0homfICrsgI4BtDuXdpAi1kIRpCMn6l
nb+aYp0E70HsnMOlrZfxfQw6SoBtL0QdnOrFl3lE3t37aJkJYe8qOM+1gX1ddL4T
HykgVeRS5F4wJ+4wboeUVPpHswPUxRZZw7m2Zq78BPdzEay/15XzFU44LwvwwBNy
ajSlYH0E8csAtcIdDKMHORXRUYg/lfm7lIGfnKGXDoUNP9PQK8AYZx0GcV4i49MJ
06TAn/2DFyha7n6SMTLBM5JbNbxBDYdO6Z1uK1mfzY/uCweGglRqcL/b6VFj1aOJ
kfcFd3EpsndWIcz2Ug==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:25 2026 by rpki-client