Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144277.roa
File: AS144277.roa (raw, json)
Hash identifier: ENmR0vyu4i8FPEhqkTDTYD6/pBmW8G1TJ4Z+eDgaPis=
Subject key identifier: 23:D7:E7:4C:77:F8:79:23:D8:E1:D0:C1:1C:A9:CC:4E:01:D6:C2:8A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 235B69F9311CAFCF3235FA745C002E13C84701FC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144277.roa
Signing time: Tue 26 May 2026 06:31:01 +0000
ROA not before: Tue 26 May 2026 06:26:01 +0000
ROA not after: Tue 25 May 2027 06:31:01 +0000
asID: 144277
IP address blocks: 240a:a65b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:5b:69:f9:31:1c:af:cf:32:35:fa:74:5c:00:2e:13:c8:47:01:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:26:01 2026 GMT
Not After : May 25 06:31:01 2027 GMT
Subject: CN=23D7E74C77F87923D8E1D0C11CA9CC4E01D6C28A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:47:f0:c0:d6:2a:31:52:9e:c6:8b:7b:60:19:
ca:ea:3d:ac:0f:ca:97:ed:bd:4b:32:a4:d0:6e:a3:
aa:a4:a9:08:73:fa:a6:75:fe:9c:79:9b:77:6c:76:
36:58:85:7a:46:a8:e9:1d:1f:c8:17:6a:8c:75:3f:
f7:7b:33:35:83:db:4b:b2:a5:39:7a:4a:05:b1:39:
2d:49:19:e7:c3:60:61:25:ed:c1:24:18:40:ee:31:
c5:1e:80:38:93:18:e2:c1:41:e4:2c:94:29:93:c4:
b4:07:d1:c9:17:30:26:cb:30:9e:38:7e:7e:71:31:
e2:f3:44:65:a8:e3:43:b3:07:48:34:dd:d2:d7:fa:
b3:f6:d1:da:bf:70:74:74:18:84:e3:51:fb:76:03:
71:40:64:ee:3a:4d:74:d6:54:32:ae:7e:23:7e:4d:
06:71:85:27:45:fd:73:74:3e:7d:2d:d0:44:57:4f:
ea:88:8e:d7:78:8f:8a:f0:53:00:0b:21:ea:4c:0f:
e0:84:1d:7a:d5:22:15:91:bd:53:c4:c7:97:5b:e4:
58:76:a6:76:e9:28:90:55:94:79:91:cd:ee:3a:ec:
40:81:48:f7:31:87:49:61:1b:36:a0:4b:03:f3:10:
f6:85:d0:f5:67:eb:6f:aa:df:fe:fb:6e:02:b6:0f:
f2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D7:E7:4C:77:F8:79:23:D8:E1:D0:C1:1C:A9:CC:4E:01:D6:C2:8A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144277.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a65b::/32
Signature Algorithm: sha256WithRSAEncryption
71:bb:a1:fa:16:fc:fa:d5:f3:64:5b:0b:bd:55:78:c5:25:9a:
6c:c8:b4:c2:1d:4c:d5:10:e2:50:da:f4:bd:b4:6e:54:d3:98:
19:87:6b:95:87:29:19:6f:90:86:bc:0b:e7:3e:f9:94:37:e4:
7e:79:b6:bd:24:7c:0c:34:b0:ae:88:f5:1e:2b:a7:be:ab:3b:
42:10:59:81:51:8c:40:d9:65:6d:c1:64:57:2b:cd:c3:9c:dd:
72:36:7f:b2:71:5d:e0:78:93:5e:3e:c5:31:3e:5a:f2:c1:fb:
ac:d8:e0:f3:36:97:22:e3:0b:a9:5d:60:45:22:13:7b:4f:b1:
1c:76:4e:1b:72:d8:ed:ab:13:ce:2f:0f:a8:2a:c5:b5:5d:bb:
64:91:68:4a:77:60:92:1d:5f:3f:07:e9:08:a3:e2:06:da:75:
20:02:92:29:83:0e:45:61:2f:08:a3:d8:0d:63:1a:54:a9:78:
33:b2:4d:c6:df:9a:77:50:de:f9:34:d6:04:f3:50:5c:fa:c5:
20:67:40:af:47:6d:ee:37:58:85:e5:a6:6e:5c:6b:e9:8c:cf:
22:5d:11:2e:3f:67:d6:71:de:e1:57:a8:9b:c6:24:cd:61:00:
8c:1f:4c:e1:07:63:9c:59:e7:39:0e:86:c6:e0:ae:49:a6:cf:
d0:ff:4d:5e
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUI1tp+TEcr88yNfp0XAAuE8hHAfwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwNjI2MDFaFw0yNzA1MjUwNjMxMDFaMDMxMTAvBgNV
BAMTKDIzRDdFNzRDNzdGODc5MjNEOEUxRDBDMTFDQTlDQzRFMDFENkMyOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzR/DA1ioxUp7Gi3tgGcrqPawP
ypftvUsypNBuo6qkqQhz+qZ1/px5m3dsdjZYhXpGqOkdH8gXaox1P/d7MzWD20uy
pTl6SgWxOS1JGefDYGEl7cEkGEDuMcUegDiTGOLBQeQslCmTxLQH0ckXMCbLMJ44
fn5xMeLzRGWo40OzB0g03dLX+rP20dq/cHR0GITjUft2A3FAZO46TXTWVDKufiN+
TQZxhSdF/XN0Pn0t0ERXT+qIjtd4j4rwUwALIepMD+CEHXrVIhWRvVPEx5db5Fh2
pnbpKJBVlHmRze467ECBSPcxh0lhGzagSwPzEPaF0PVn62+q3/77bgK2D/KtAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUI9fnTHf4eSPY4dDBHKnMTgHWwoowHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0Mjc3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqmWzANBgkqhkiG9w0BAQsFAAOCAQEAcbuh
+hb8+tXzZFsLvVV4xSWabMi0wh1M1RDiUNr0vbRuVNOYGYdrlYcpGW+QhrwL5z75
lDfkfnm2vSR8DDSwroj1Hiunvqs7QhBZgVGMQNllbcFkVyvNw5zdcjZ/snFd4HiT
Xj7FMT5a8sH7rNjg8zaXIuMLqV1gRSITe0+xHHZOG3LY7asTzi8PqCrFtV27ZJFo
Sndgkh1fPwfpCKPiBtp1IAKSKYMORWEvCKPYDWMaVKl4M7JNxt+ad1De+TTWBPNQ
XPrFIGdAr0dt7jdYheWmblxr6YzPIl0RLj9n1nHe4Veom8YkzWEAjB9M4QdjnFnn
OQ6GxuCuSabP0P9NXg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:44 2026 by rpki-client