Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144253.roa
File: AS144253.roa (raw, json)
Hash identifier: 3oXG4eSel8249n+JGeSbZhAccW+2lOcxBFSReIvHs6U=
Subject key identifier: 80:D9:06:F8:10:84:5E:B2:80:0E:7A:A6:14:B8:22:18:5C:48:EE:DE
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 060335BB659627981083C9330DADF7504A24B623
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144253.roa
Signing time: Mon 25 May 2026 03:19:42 +0000
ROA not before: Mon 25 May 2026 03:14:42 +0000
ROA not after: Mon 24 May 2027 03:19:42 +0000
asID: 144253
IP address blocks: 240a:a643::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:03:35:bb:65:96:27:98:10:83:c9:33:0d:ad:f7:50:4a:24:b6:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:42 2026 GMT
Not After : May 24 03:19:42 2027 GMT
Subject: CN=80D906F810845EB2800E7AA614B822185C48EEDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ff:09:f7:0d:46:11:c2:a4:6c:f4:1b:fa:cb:
90:be:94:db:67:a5:4f:d2:f9:3b:20:1f:96:68:59:
d1:f9:bf:c4:a0:4c:1f:2b:20:f0:e7:69:0c:88:64:
b2:3f:0a:d7:c1:ad:b4:c1:fb:41:9b:e6:b8:24:07:
48:05:e1:a1:9c:ae:09:fa:b8:c7:d4:88:cf:d6:f3:
be:fe:f9:ca:51:24:b2:d9:cb:4a:b0:6e:3e:bb:b2:
e9:83:4e:84:14:93:a3:ea:4e:3d:ab:99:5c:17:61:
37:14:a8:4a:39:b8:df:1a:4d:ce:78:74:63:2d:db:
3a:97:57:c6:ef:ff:02:88:45:d2:31:49:19:8b:0a:
12:ba:7f:2f:4e:9a:e1:dc:89:0f:e4:fa:56:d8:20:
c0:12:58:fd:c7:1d:6e:31:9c:6a:de:36:78:e0:29:
0c:a0:c5:e3:70:50:1e:c2:b9:50:fd:42:81:b7:3a:
43:e8:58:88:6f:57:22:c8:8e:bd:06:c2:a1:40:12:
44:4b:0e:35:3e:a8:a0:36:93:3a:f5:1a:cf:2e:03:
52:ac:9d:97:09:87:65:e5:3a:75:6e:c8:7e:44:8e:
c4:9d:ae:27:07:26:93:51:ec:e1:9b:72:fe:c2:21:
90:89:7a:80:29:e7:cc:8f:76:ca:91:14:0c:ba:c5:
5f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D9:06:F8:10:84:5E:B2:80:0E:7A:A6:14:B8:22:18:5C:48:EE:DE
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144253.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a643::/32
Signature Algorithm: sha256WithRSAEncryption
b7:89:3b:2e:c8:fd:cc:68:2c:14:39:8d:b6:1c:54:57:63:a7:
9c:9a:95:e1:ce:ff:47:58:63:40:1d:17:3d:0a:a8:ad:cb:8a:
26:58:8c:c6:33:f2:15:13:c4:86:88:cb:08:a6:e9:ef:f8:88:
14:b2:0c:43:21:e6:01:9f:64:09:bf:84:64:b1:fe:79:37:a4:
b5:16:2b:33:86:2d:28:ba:7a:38:62:46:35:8b:cd:45:ad:ba:
1b:bc:f0:49:74:59:a3:bf:5e:49:ba:11:53:09:e4:78:13:7e:
c6:30:e8:32:b5:fc:28:55:09:e4:65:10:e7:94:3e:e1:11:1b:
30:b7:79:c2:05:e8:36:0f:15:6d:a9:e2:a1:fb:71:8e:0a:a1:
70:32:9d:7f:58:e6:8a:68:bc:23:79:c0:fe:1d:ed:7e:3e:c1:
c3:c2:65:12:1b:f1:37:8a:1e:46:c4:a8:dd:da:dd:3f:16:6f:
a1:9f:81:32:dd:46:a9:7e:37:ec:a3:96:22:d9:b5:7f:28:e1:
b5:4e:09:45:31:c5:14:2c:3a:73:c4:c4:2d:b7:86:6b:2e:c4:
be:ac:0d:0d:0a:79:51:4b:89:d0:06:52:16:2d:98:1f:4f:38:
0a:f9:2c:6c:c8:76:d6:e9:44:64:90:cf:9b:55:ac:6b:30:55:
ee:3e:3f:92
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUBgM1u2WWJ5gQg8kzDa33UEoktiMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMzE0NDJaFw0yNzA1MjQwMzE5NDJaMDMxMTAvBgNV
BAMTKDgwRDkwNkY4MTA4NDVFQjI4MDBFN0FBNjE0QjgyMjE4NUM0OEVFREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO/wn3DUYRwqRs9Bv6y5C+lNtn
pU/S+TsgH5ZoWdH5v8SgTB8rIPDnaQyIZLI/CtfBrbTB+0Gb5rgkB0gF4aGcrgn6
uMfUiM/W877++cpRJLLZy0qwbj67sumDToQUk6PqTj2rmVwXYTcUqEo5uN8aTc54
dGMt2zqXV8bv/wKIRdIxSRmLChK6fy9OmuHciQ/k+lbYIMASWP3HHW4xnGreNnjg
KQygxeNwUB7CuVD9QoG3OkPoWIhvVyLIjr0GwqFAEkRLDjU+qKA2kzr1Gs8uA1Ks
nZcJh2XlOnVuyH5EjsSdricHJpNR7OGbcv7CIZCJeoAp58yPdsqRFAy6xV9JAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUgNkG+BCEXrKADnqmFLgiGFxI7t4wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0MjUzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqmQzANBgkqhkiG9w0BAQsFAAOCAQEAt4k7
Lsj9zGgsFDmNthxUV2OnnJqV4c7/R1hjQB0XPQqorcuKJliMxjPyFRPEhojLCKbp
7/iIFLIMQyHmAZ9kCb+EZLH+eTektRYrM4YtKLp6OGJGNYvNRa26G7zwSXRZo79e
SboRUwnkeBN+xjDoMrX8KFUJ5GUQ55Q+4REbMLd5wgXoNg8VbanioftxjgqhcDKd
f1jmimi8I3nA/h3tfj7Bw8JlEhvxN4oeRsSo3drdPxZvoZ+BMt1GqX437KOWItm1
fyjhtU4JRTHFFCw6c8TELbeGay7EvqwNDQp5UUuJ0AZSFi2YH084CvksbMh21ulE
ZJDPm1WsazBV7j4/kg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:26 2026 by rpki-client