Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144221.roa
File: AS144221.roa (raw, json)
Hash identifier: BQMV0IbEjcIsnIUufyyrELpGV02K0KSXGMO0L+mWOz0=
Subject key identifier: 38:13:1E:5F:F8:D4:E7:BB:17:42:01:4F:04:FF:5C:C7:72:09:98:EE
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2311251D6BE3A9EDE71A1A3F2DB7937EC983D35B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144221.roa
Signing time: Fri 22 May 2026 07:24:38 +0000
ROA not before: Fri 22 May 2026 07:19:38 +0000
ROA not after: Fri 21 May 2027 07:24:38 +0000
asID: 144221
IP address blocks: 240a:a623::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:11:25:1d:6b:e3:a9:ed:e7:1a:1a:3f:2d:b7:93:7e:c9:83:d3:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:38 2026 GMT
Not After : May 21 07:24:38 2027 GMT
Subject: CN=38131E5FF8D4E7BB1742014F04FF5CC7720998EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:5e:4d:ca:fe:cd:fc:2b:82:95:3a:93:d3:0d:
9a:9f:8e:d0:2a:b6:0d:04:8d:9e:d2:0c:4c:7f:b5:
8b:49:bb:44:d7:df:71:81:dd:57:e7:43:42:9e:14:
bf:95:95:7d:07:f7:d2:d2:fd:10:cf:a5:97:4f:1a:
af:7e:15:69:b1:18:66:a2:a9:10:73:07:e3:64:67:
b5:49:a9:2e:61:38:cf:99:de:8e:72:0f:45:10:49:
88:45:0c:1b:05:f5:b5:17:9a:bb:3a:73:a7:d3:df:
8c:23:2e:1a:f4:c1:6c:d0:26:4e:17:23:9b:12:95:
67:59:36:be:3d:1f:02:85:ab:e1:5e:68:b4:cc:74:
eb:d1:7c:3c:20:27:28:ac:1e:af:84:a2:7f:34:f1:
4e:2b:8b:2f:46:40:b6:f1:c9:7c:95:a6:96:37:8f:
42:17:dd:58:0a:dd:27:73:95:72:58:4e:40:66:a3:
c1:2f:22:05:e6:66:79:cc:64:3e:f2:e3:c9:b7:d8:
09:16:46:c5:1b:17:7f:c4:43:30:eb:02:b4:08:64:
4b:34:a5:f5:96:06:c3:f9:ae:3e:01:de:e6:4f:b5:
ff:2c:8a:11:c4:50:dc:23:89:8f:a6:be:8f:02:22:
b1:1d:2e:45:8d:a0:4a:d3:a8:cc:40:ce:7c:00:d0:
08:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:13:1E:5F:F8:D4:E7:BB:17:42:01:4F:04:FF:5C:C7:72:09:98:EE
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144221.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a623::/32
Signature Algorithm: sha256WithRSAEncryption
93:5e:38:d4:aa:aa:50:dd:77:01:9f:05:a9:80:7d:ae:08:f6:
42:ae:20:3f:d2:fb:49:98:27:95:dc:3b:9b:62:a6:07:11:fd:
75:a1:80:ec:0e:a0:01:42:9e:10:1a:24:85:51:df:58:8e:18:
28:dc:9a:41:35:45:7c:64:49:3b:68:ae:2a:70:fa:3d:5d:d3:
90:c3:56:a1:ca:de:f0:46:02:db:f1:25:63:72:f0:bf:79:a5:
3c:0f:f7:bf:bc:a5:83:a0:c1:30:73:96:18:27:df:21:d4:05:
54:6f:bf:c8:3e:8d:a1:fc:d9:95:6c:a2:0e:22:38:38:c3:e2:
d2:24:3f:1a:86:74:15:e3:80:0b:84:e8:41:98:45:c6:d0:5f:
0e:92:0f:db:1d:10:1d:10:01:97:5e:c0:27:b0:2e:92:fc:b1:
f1:8f:46:35:4f:ad:ad:10:13:33:27:03:be:db:c7:2d:fd:f8:
62:38:d6:2b:e2:cb:a4:aa:50:48:78:91:8b:0d:e1:9f:e4:23:
ce:d2:95:8f:bf:0c:6d:9d:d4:40:9b:f2:f8:f0:1a:20:a3:ab:
c5:9c:86:f8:2f:d4:63:23:df:47:48:4a:17:d2:1f:cf:9e:3b:
5a:ce:0e:7e:be:4b:6a:d0:a5:37:d4:6f:db:63:4f:92:6b:93:
35:32:ba:94
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUIxElHWvjqe3nGho/LbeTfsmD01swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzE5MzhaFw0yNzA1MjEwNzI0MzhaMDMxMTAvBgNV
BAMTKDM4MTMxRTVGRjhENEU3QkIxNzQyMDE0RjA0RkY1Q0M3NzIwOTk4RUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4Xk3K/s38K4KVOpPTDZqfjtAq
tg0EjZ7SDEx/tYtJu0TX33GB3VfnQ0KeFL+VlX0H99LS/RDPpZdPGq9+FWmxGGai
qRBzB+NkZ7VJqS5hOM+Z3o5yD0UQSYhFDBsF9bUXmrs6c6fT34wjLhr0wWzQJk4X
I5sSlWdZNr49HwKFq+FeaLTMdOvRfDwgJyisHq+Eon808U4riy9GQLbxyXyVppY3
j0IX3VgK3SdzlXJYTkBmo8EvIgXmZnnMZD7y48m32AkWRsUbF3/EQzDrArQIZEs0
pfWWBsP5rj4B3uZPtf8sihHEUNwjiY+mvo8CIrEdLkWNoErTqMxAznwA0AiZAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUOBMeX/jU57sXQgFPBP9cx3IJmO4wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0MjIxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqmIzANBgkqhkiG9w0BAQsFAAOCAQEAk144
1KqqUN13AZ8FqYB9rgj2Qq4gP9L7SZgnldw7m2KmBxH9daGA7A6gAUKeEBokhVHf
WI4YKNyaQTVFfGRJO2iuKnD6PV3TkMNWocre8EYC2/ElY3Lwv3mlPA/3v7ylg6DB
MHOWGCffIdQFVG+/yD6NofzZlWyiDiI4OMPi0iQ/GoZ0FeOAC4ToQZhFxtBfDpIP
2x0QHRABl17AJ7Aukvyx8Y9GNU+trRATMycDvtvHLf34YjjWK+LLpKpQSHiRiw3h
n+QjztKVj78MbZ3UQJvy+PAaIKOrxZyG+C/UYyPfR0hKF9Ifz547Ws4Ofr5LatCl
N9Rv22NPkmuTNTK6lA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:04 2026 by rpki-client