Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144233.roa
File: AS144233.roa (raw, json)
Hash identifier: IQ26wluaeXE5Fz/+NSERBnb7LV5UJpuWMNhxgOPvTfg=
Subject key identifier: 07:AE:84:DD:14:18:34:94:FE:A4:2C:2E:CC:AE:3A:0A:70:11:39:0E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 538D9AE4C6E13716FAB7213B4480A7F48DC5587A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144233.roa
Signing time: Fri 22 May 2026 07:32:31 +0000
ROA not before: Fri 22 May 2026 07:27:31 +0000
ROA not after: Fri 21 May 2027 07:32:31 +0000
asID: 144233
IP address blocks: 240a:a62f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:8d:9a:e4:c6:e1:37:16:fa:b7:21:3b:44:80:a7:f4:8d:c5:58:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:31 2026 GMT
Not After : May 21 07:32:31 2027 GMT
Subject: CN=07AE84DD14183494FEA42C2ECCAE3A0A7011390E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:fb:9a:4d:62:e5:00:d6:cc:a8:f1:bc:ef:7f:
4c:60:64:d4:99:f7:14:08:ef:dd:f1:04:ec:15:40:
2c:f8:4b:41:ab:34:23:76:ae:1f:f0:e6:98:b8:15:
3b:1f:7d:e2:d7:0d:9a:b5:6c:78:78:6d:ed:21:6e:
71:4d:0d:45:3b:7b:2d:30:ee:87:b6:1d:bb:e7:be:
92:c0:a1:83:00:ce:e5:29:ce:6b:90:24:07:73:17:
ca:f0:8d:bb:bc:ce:87:fd:c9:19:05:ab:bf:b0:48:
4d:7c:5d:a1:a5:2a:60:12:f6:b6:28:15:bb:bb:78:
29:65:31:fd:80:51:5b:22:da:23:f2:24:f6:d7:75:
8e:05:85:dc:68:38:dc:2b:84:9e:25:be:ff:8d:38:
df:cd:a3:cf:80:4f:ec:25:95:38:f8:5f:72:af:40:
b7:56:96:c6:12:cb:a4:8d:06:8e:e0:c4:25:b8:18:
09:7a:00:f3:60:85:65:e1:c7:60:59:fe:92:a2:82:
88:c1:b8:b5:b7:16:2c:43:ba:1b:84:49:92:89:8c:
75:37:0c:11:0a:93:85:58:db:90:5b:45:8e:f2:e3:
79:d0:08:12:3f:b2:7b:fe:74:d2:88:d6:e1:85:e6:
a1:79:1e:c5:1d:7e:29:db:dd:b4:45:71:fc:8a:f7:
08:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:AE:84:DD:14:18:34:94:FE:A4:2C:2E:CC:AE:3A:0A:70:11:39:0E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a62f::/32
Signature Algorithm: sha256WithRSAEncryption
0f:57:72:c8:11:05:c4:83:34:b7:ee:16:00:c5:2d:64:c0:5b:
b8:59:5c:5b:56:50:88:c3:07:d2:4b:b0:ef:e7:42:d9:5a:51:
2d:7f:e4:77:2a:df:8c:a1:30:04:71:9b:9d:47:b2:f7:7a:73:
71:18:c8:ac:68:08:dd:8f:4c:55:74:72:02:0d:a8:18:59:47:
2a:f3:e6:c3:9c:0d:0f:b5:ca:df:bc:13:b6:73:ae:4d:8a:d2:
35:c3:08:43:d7:0c:3c:e3:14:b7:51:b3:61:bd:19:3a:5c:4d:
ab:16:f5:39:a6:96:0f:18:d3:32:ec:f1:ec:42:18:03:60:cc:
53:7d:8f:f6:86:9e:10:f0:f0:f9:bd:b9:f7:5d:c0:43:e0:57:
f1:c9:a0:4b:2d:30:82:f0:19:d2:93:58:24:95:6f:fa:1e:e6:
a2:37:67:0e:f1:65:dc:88:00:14:72:5e:0a:e0:99:52:c8:f5:
98:84:c0:17:31:43:00:4d:f6:c5:2c:52:53:c1:11:38:c6:e1:
10:c5:9c:d7:e2:43:c1:02:7f:b5:72:64:c6:be:25:e5:80:c1:
ef:fb:4e:e6:68:d3:bc:4f:00:37:68:bc:de:f4:1e:b4:be:5c:
a5:b4:8e:0a:fb:37:44:4a:19:da:42:d9:10:46:fb:1c:94:36:
e7:eb:b3:0b
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUU42a5MbhNxb6tyE7RICn9I3FWHowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzI3MzFaFw0yNzA1MjEwNzMyMzFaMDMxMTAvBgNV
BAMTKDA3QUU4NEREMTQxODM0OTRGRUE0MkMyRUNDQUUzQTBBNzAxMTM5MEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj+5pNYuUA1syo8bzvf0xgZNSZ
9xQI793xBOwVQCz4S0GrNCN2rh/w5pi4FTsffeLXDZq1bHh4be0hbnFNDUU7ey0w
7oe2HbvnvpLAoYMAzuUpzmuQJAdzF8rwjbu8zof9yRkFq7+wSE18XaGlKmAS9rYo
Fbu7eCllMf2AUVsi2iPyJPbXdY4FhdxoONwrhJ4lvv+NON/No8+AT+wllTj4X3Kv
QLdWlsYSy6SNBo7gxCW4GAl6APNghWXhx2BZ/pKigojBuLW3FixDuhuESZKJjHU3
DBEKk4VY25BbRY7y43nQCBI/snv+dNKI1uGF5qF5HsUdfinb3bRFcfyK9wijAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUB66E3RQYNJT+pCwuzK46CnAROQ4wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0MjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqmLzANBgkqhkiG9w0BAQsFAAOCAQEAD1dy
yBEFxIM0t+4WAMUtZMBbuFlcW1ZQiMMH0kuw7+dC2VpRLX/kdyrfjKEwBHGbnUey
93pzcRjIrGgI3Y9MVXRyAg2oGFlHKvPmw5wND7XK37wTtnOuTYrSNcMIQ9cMPOMU
t1GzYb0ZOlxNqxb1OaaWDxjTMuzx7EIYA2DMU32P9oaeEPDw+b25913AQ+BX8cmg
Sy0wgvAZ0pNYJJVv+h7mojdnDvFl3IgAFHJeCuCZUsj1mITAFzFDAE32xSxSU8ER
OMbhEMWc1+JDwQJ/tXJkxr4l5YDB7/tO5mjTvE8AN2i83vQetL5cpbSOCvs3REoZ
2kLZEEb7HJQ25+uzCw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:54 2026 by rpki-client