Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144248.roa
File: AS144248.roa (raw, json)
Hash identifier: Sm2PgB6vPxyJ31mgAHSSCQMgQYe76mBHrJRdN0NYrw8=
Subject key identifier: 79:40:1C:FA:5C:17:99:8E:F0:AB:CD:C4:03:BF:C8:D8:85:B1:CA:4A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6D3407BE8DCE5B3CB0CD2481EC6F886E1312F535
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144248.roa
Signing time: Mon 25 May 2026 01:38:03 +0000
ROA not before: Mon 25 May 2026 01:33:03 +0000
ROA not after: Mon 24 May 2027 01:38:03 +0000
asID: 144248
IP address blocks: 240a:a63e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:34:07:be:8d:ce:5b:3c:b0:cd:24:81:ec:6f:88:6e:13:12:f5:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:03 2026 GMT
Not After : May 24 01:38:03 2027 GMT
Subject: CN=79401CFA5C17998EF0ABCDC403BFC8D885B1CA4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1e:b2:7f:0c:b8:5e:0a:48:64:71:1d:da:64:
f7:40:d8:f0:52:d3:9c:01:a6:45:34:39:7f:ea:d9:
8e:1a:81:cd:56:79:bd:b2:88:dc:28:19:3f:c3:b2:
bf:98:4e:e7:cf:50:17:3e:93:aa:43:fb:25:ab:68:
0c:ca:76:86:57:4d:96:4c:ce:79:dc:f6:87:08:fe:
10:ea:3a:45:8f:83:81:17:e9:4d:dc:22:21:c8:a3:
02:b2:27:ad:e9:d3:15:5e:7b:c7:09:95:6c:ab:dd:
4b:3c:a4:14:14:00:2f:a9:31:ad:95:6e:bf:0a:56:
1e:8b:b3:c9:f8:83:7c:7f:26:c2:39:59:fd:09:e9:
cd:bf:ed:e6:c3:71:20:fc:bd:67:f2:03:80:30:a1:
67:a7:55:2e:f8:e5:d9:06:ff:e0:ad:f4:bb:5d:ee:
c2:e0:31:58:1d:d5:89:e8:b6:1d:94:41:8f:10:b9:
df:2a:10:ac:82:9b:5a:9e:29:09:bc:fd:bd:ad:70:
68:a4:8a:d8:98:2e:1b:6d:1d:cc:90:b7:fd:99:d6:
3b:ad:9f:5c:0e:b2:90:ff:81:9b:38:a7:da:1f:2e:
4c:2d:c8:89:e8:c2:85:98:b8:3f:c3:ab:26:a7:19:
3f:40:bc:ad:89:3e:34:48:0d:09:1a:ea:b8:39:af:
bd:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:40:1C:FA:5C:17:99:8E:F0:AB:CD:C4:03:BF:C8:D8:85:B1:CA:4A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144248.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a63e::/32
Signature Algorithm: sha256WithRSAEncryption
62:23:94:67:a7:7d:91:5e:1e:f6:e8:09:1e:a2:43:28:7a:67:
b6:81:a7:d2:83:7c:3c:59:8a:34:1a:87:3f:f7:6c:b0:e1:54:
d6:b6:2b:d4:0a:e5:0a:30:6e:a4:9a:9b:bf:12:9c:91:6c:51:
7c:9b:22:a9:05:4a:21:68:29:3c:eb:74:83:d7:11:0d:cb:80:
20:91:dc:2c:dc:c1:44:9c:97:87:86:1f:06:d2:8a:16:7b:be:
80:b3:1b:d9:f0:0c:59:88:5b:0c:27:7d:4d:32:ab:3c:b6:62:
98:47:31:56:fc:a4:2f:8a:db:7a:42:70:56:de:e1:eb:28:ad:
ea:ba:0f:48:0d:4a:b7:bb:fe:c0:7d:fe:d5:4a:37:7e:02:d4:
f1:b4:a6:c9:95:cd:b1:bc:75:f1:e6:48:49:9b:4c:73:2a:34:
c3:d5:e5:44:4a:87:83:12:9a:8c:99:b5:41:c8:10:00:18:20:
79:54:9f:7a:28:4f:f8:9d:2f:30:f1:95:03:d2:78:75:14:75:
82:86:21:6b:f8:93:40:ad:e4:c7:b1:83:dd:da:01:ee:b3:08:
68:8b:76:6e:de:35:34:5b:cf:11:b1:b5:49:ac:ea:c5:dd:48:
b2:35:e3:30:7c:52:30:5d:f9:0b:e6:2d:f6:92:d1:f5:9f:8c:
1f:56:f4:1e
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUbTQHvo3OWzywzSSB7G+IbhMS9TUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTMzMDNaFw0yNzA1MjQwMTM4MDNaMDMxMTAvBgNV
BAMTKDc5NDAxQ0ZBNUMxNzk5OEVGMEFCQ0RDNDAzQkZDOEQ4ODVCMUNBNEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgHrJ/DLheCkhkcR3aZPdA2PBS
05wBpkU0OX/q2Y4agc1Web2yiNwoGT/Dsr+YTufPUBc+k6pD+yWraAzKdoZXTZZM
znnc9ocI/hDqOkWPg4EX6U3cIiHIowKyJ63p0xVee8cJlWyr3Us8pBQUAC+pMa2V
br8KVh6Ls8n4g3x/JsI5Wf0J6c2/7ebDcSD8vWfyA4AwoWenVS745dkG/+Ct9Ltd
7sLgMVgd1Ynoth2UQY8Qud8qEKyCm1qeKQm8/b2tcGikitiYLhttHcyQt/2Z1jut
n1wOspD/gZs4p9ofLkwtyInowoWYuD/DqyanGT9AvK2JPjRIDQka6rg5r71nAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUeUAc+lwXmY7wq83EA7/I2IWxykowHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0MjQ4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqmPjANBgkqhkiG9w0BAQsFAAOCAQEAYiOU
Z6d9kV4e9ugJHqJDKHpntoGn0oN8PFmKNBqHP/dssOFU1rYr1ArlCjBupJqbvxKc
kWxRfJsiqQVKIWgpPOt0g9cRDcuAIJHcLNzBRJyXh4YfBtKKFnu+gLMb2fAMWYhb
DCd9TTKrPLZimEcxVvykL4rbekJwVt7h6yit6roPSA1Kt7v+wH3+1Uo3fgLU8bSm
yZXNsbx18eZISZtMcyo0w9XlREqHgxKajJm1QcgQABggeVSfeihP+J0vMPGVA9J4
dRR1goYha/iTQK3kx7GD3doB7rMIaIt2bt41NFvPEbG1Sazqxd1IsjXjMHxSMF35
C+Yt9pLR9Z+MH1b0Hg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:21 2026 by rpki-client