Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144279.roa
File: AS144279.roa (raw, json)
Hash identifier: r1fvhRBVRsiMy9jIlYe1VmekmPY/wZCeyCZeyb6oquA=
Subject key identifier: 71:85:02:90:54:98:FF:D9:0D:1A:0B:BB:9F:F0:C6:7D:49:73:E0:E5
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 40FED75C89131EFA407FE2A673B9D189CFBF5FD5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144279.roa
Signing time: Tue 26 May 2026 06:30:28 +0000
ROA not before: Tue 26 May 2026 06:25:28 +0000
ROA not after: Tue 25 May 2027 06:30:28 +0000
asID: 144279
IP address blocks: 240a:a65d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:fe:d7:5c:89:13:1e:fa:40:7f:e2:a6:73:b9:d1:89:cf:bf:5f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:25:28 2026 GMT
Not After : May 25 06:30:28 2027 GMT
Subject: CN=718502905498FFD90D1A0BBB9FF0C67D4973E0E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:3c:95:e6:b2:4e:b4:97:90:c5:66:84:92:e9:
2d:a9:56:e9:2e:30:d6:e7:d3:a1:b5:e4:f0:63:c3:
41:4e:7c:e9:3c:46:81:67:4b:12:c7:74:01:75:bb:
f9:a2:8f:06:82:86:c4:2d:8f:c3:f2:02:1f:81:a5:
e5:44:41:1c:8b:7c:ec:81:75:fb:0a:61:e0:58:51:
35:88:6b:4f:1a:26:3c:cb:f7:00:79:42:ca:b9:04:
11:31:d6:fe:b0:fe:cf:23:a6:5b:83:6a:6d:bd:5b:
88:96:73:19:7a:da:0c:b1:51:ea:26:b1:85:97:b9:
a7:0f:83:d0:37:a1:7f:12:88:48:d5:cd:77:17:e6:
eb:cc:0d:a1:d9:8a:5e:4b:39:56:0e:3b:d3:cd:b4:
75:17:26:53:a9:0d:9a:bd:8b:5a:b7:e0:0f:d5:76:
6e:54:80:96:0f:96:86:42:72:40:4b:fb:5f:eb:d4:
84:9f:fa:cd:3e:22:88:26:7f:37:44:46:49:2f:37:
a9:40:0c:cb:64:7f:bc:bb:80:6e:4e:f1:9e:a2:d6:
b8:06:4b:1a:8a:60:03:d9:94:5e:67:2d:58:4c:09:
57:c1:d8:ce:fa:c5:38:ba:b1:3f:66:86:d1:48:47:
92:59:e5:63:77:a1:3c:f8:90:15:32:98:d1:30:45:
29:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:85:02:90:54:98:FF:D9:0D:1A:0B:BB:9F:F0:C6:7D:49:73:E0:E5
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144279.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a65d::/32
Signature Algorithm: sha256WithRSAEncryption
3a:2f:24:23:52:23:58:df:31:18:b6:8b:fe:33:07:59:c9:0c:
5f:c7:2d:05:99:35:91:b3:5b:ec:94:d1:e0:da:36:f0:a8:de:
92:e0:9c:21:74:eb:bd:cc:10:0d:15:dd:89:26:3a:79:53:e5:
ee:74:03:00:73:3c:d5:51:7e:02:42:68:3f:af:8c:e3:ae:f6:
8a:de:4f:fe:6d:18:42:8a:9d:23:e4:9a:10:ce:92:fa:16:61:
89:ea:fb:c0:b0:fe:53:16:24:f1:e8:47:6e:23:42:b5:9f:1f:
93:54:98:e1:a8:55:f3:c2:65:66:82:73:76:e9:87:04:f7:b1:
e3:27:4c:48:1f:09:7f:5e:01:4b:b2:c9:93:92:49:89:3f:28:
ea:30:2e:9f:40:43:74:d0:b2:c6:df:26:fa:b0:3f:80:95:92:
69:09:e2:05:3c:f7:8d:82:98:c9:44:69:d1:82:cf:84:ea:73:
a6:62:7c:a3:2c:ad:c8:00:a3:b0:e7:cc:86:3c:bf:b7:05:c8:
d0:d0:7a:a5:71:af:d7:b6:1c:b4:e9:38:9f:ff:47:76:27:c8:
f8:97:a8:30:9f:bc:5a:82:e1:9f:0b:c5:d6:b9:c1:9e:ea:95:
e5:d1:5b:a0:d0:d7:01:01:b5:39:f8:3c:56:c6:72:28:68:5e:
86:65:dd:59
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUQP7XXIkTHvpAf+Kmc7nRic+/X9UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwNjI1MjhaFw0yNzA1MjUwNjMwMjhaMDMxMTAvBgNV
BAMTKDcxODUwMjkwNTQ5OEZGRDkwRDFBMEJCQjlGRjBDNjdENDk3M0UwRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtPJXmsk60l5DFZoSS6S2pVuku
MNbn06G15PBjw0FOfOk8RoFnSxLHdAF1u/mijwaChsQtj8PyAh+BpeVEQRyLfOyB
dfsKYeBYUTWIa08aJjzL9wB5Qsq5BBEx1v6w/s8jpluDam29W4iWcxl62gyxUeom
sYWXuacPg9A3oX8SiEjVzXcX5uvMDaHZil5LOVYOO9PNtHUXJlOpDZq9i1q34A/V
dm5UgJYPloZCckBL+1/r1ISf+s0+IogmfzdERkkvN6lADMtkf7y7gG5O8Z6i1rgG
SxqKYAPZlF5nLVhMCVfB2M76xTi6sT9mhtFIR5JZ5WN3oTz4kBUymNEwRSmFAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUcYUCkFSY/9kNGgu7n/DGfUlz4OUwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0Mjc5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqmXTANBgkqhkiG9w0BAQsFAAOCAQEAOi8k
I1IjWN8xGLaL/jMHWckMX8ctBZk1kbNb7JTR4No28KjekuCcIXTrvcwQDRXdiSY6
eVPl7nQDAHM81VF+AkJoP6+M4672it5P/m0YQoqdI+SaEM6S+hZhier7wLD+UxYk
8ehHbiNCtZ8fk1SY4ahV88JlZoJzdumHBPex4ydMSB8Jf14BS7LJk5JJiT8o6jAu
n0BDdNCyxt8m+rA/gJWSaQniBTz3jYKYyURp0YLPhOpzpmJ8oyytyACjsOfMhjy/
twXI0NB6pXGv17YctOk4n/9HdifI+JeoMJ+8WoLhnwvF1rnBnuqV5dFboNDXAQG1
Ofg8VsZyKGhehmXdWQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:42:13 2026 by rpki-client