Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144324.roa
File: AS144324.roa (raw, json)
Hash identifier: mScX2bTbyKHEpQwZsUqmrngXXhvm9BfkHgrMZ2zttN8=
Subject key identifier: 28:99:40:F0:C2:89:5E:CE:5F:01:14:16:BC:59:9D:A7:B8:15:95:41
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 415BFAA29CCD6463082A1972378A8AF26CA847A0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144324.roa
Signing time: Fri 22 May 2026 02:47:32 +0000
ROA not before: Fri 22 May 2026 02:42:32 +0000
ROA not after: Fri 21 May 2027 02:47:32 +0000
asID: 144324
IP address blocks: 240a:a68a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:5b:fa:a2:9c:cd:64:63:08:2a:19:72:37:8a:8a:f2:6c:a8:47:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:32 2026 GMT
Not After : May 21 02:47:32 2027 GMT
Subject: CN=289940F0C2895ECE5F011416BC599DA7B8159541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:70:e5:6b:8d:99:ad:45:89:fa:54:69:9d:7a:
fc:53:64:ae:66:df:61:0d:47:c5:76:d3:54:53:90:
ff:f9:c0:56:ee:f4:c8:20:68:f6:36:f4:1c:76:b8:
c0:de:ff:a4:41:29:9d:dd:da:1b:05:77:b5:f9:83:
03:ba:c7:c4:f7:83:87:9b:09:5a:94:e0:3f:6c:68:
73:e2:f7:37:5e:1e:95:12:38:db:1c:4a:be:4f:f5:
f2:1a:d5:de:53:cd:6a:5a:0e:9b:f7:54:f8:33:95:
a3:5a:b5:4b:d9:11:ea:05:ba:f7:a5:f9:2f:99:aa:
7b:8c:83:17:7f:db:75:d6:8c:bc:c1:86:f6:ac:ae:
25:f1:19:1a:42:0f:7c:e8:0e:9c:88:fa:f9:49:e2:
67:7c:f3:78:cd:2b:66:eb:00:97:c7:9c:57:ae:ba:
b9:e9:ca:34:d2:0f:65:5b:ef:69:40:f4:56:b6:bb:
14:a5:13:88:e2:58:b1:ba:e0:a8:73:33:94:15:57:
c3:d6:a6:ec:96:22:f3:52:d0:e6:95:76:26:ce:cb:
a8:b6:f3:db:de:c8:88:65:b3:b0:29:5a:ab:b1:83:
1e:a2:a6:a1:cf:a2:89:cb:e7:57:91:17:e9:05:60:
2d:01:9f:e1:e3:a5:d2:82:a7:f2:8b:b2:38:45:89:
e5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:99:40:F0:C2:89:5E:CE:5F:01:14:16:BC:59:9D:A7:B8:15:95:41
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144324.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a68a::/32
Signature Algorithm: sha256WithRSAEncryption
70:2d:e9:d0:9e:0b:ae:b6:e6:4e:b6:26:cc:66:f6:de:cc:21:
fa:81:e7:18:e2:e1:9d:11:11:c6:41:69:5b:b9:84:db:93:3f:
6f:5b:ad:2a:79:9f:ed:04:61:5c:90:70:65:eb:d3:e9:9f:17:
20:b5:cb:99:20:82:fd:f1:70:ec:67:5c:e5:07:9a:cb:a6:d5:
5a:a3:87:ae:16:e4:d2:66:f8:8f:f8:10:2f:21:d2:88:e8:0d:
ca:a3:28:c9:6d:0a:c4:95:91:7e:55:b0:ec:6b:03:2a:25:ad:
70:9b:a7:a3:2f:26:0c:61:c6:b1:64:6f:ac:f4:72:00:ce:e9:
7d:13:18:b4:e5:ef:bf:d8:5d:01:e8:66:0c:d1:9e:63:b7:75:
ba:32:2d:05:91:e0:67:ad:a3:db:bc:14:77:ec:a3:85:1c:6b:
71:3a:df:b6:b2:de:ee:d8:34:87:4e:20:3d:fa:93:a0:62:d7:
44:66:c5:ed:a6:fc:02:98:75:65:3a:fc:d5:7e:c4:64:f3:32:
df:c9:2b:4a:3f:7b:cf:74:5c:1d:6f:0f:3b:7c:00:52:c9:e6:
cb:c9:ea:23:a4:95:fe:3c:ff:a0:c9:17:e0:9d:ec:39:cb:5f:
83:c5:4c:65:c0:2f:d7:c7:8b:c5:1a:63:a1:7e:a4:e0:c3:a9:
94:02:49:f3
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUQVv6opzNZGMIKhlyN4qK8myoR6AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwMjQyMzJaFw0yNzA1MjEwMjQ3MzJaMDMxMTAvBgNV
BAMTKDI4OTk0MEYwQzI4OTVFQ0U1RjAxMTQxNkJDNTk5REE3QjgxNTk1NDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrcOVrjZmtRYn6VGmdevxTZK5m
32ENR8V201RTkP/5wFbu9MggaPY29Bx2uMDe/6RBKZ3d2hsFd7X5gwO6x8T3g4eb
CVqU4D9saHPi9zdeHpUSONscSr5P9fIa1d5TzWpaDpv3VPgzlaNatUvZEeoFuvel
+S+ZqnuMgxd/23XWjLzBhvasriXxGRpCD3zoDpyI+vlJ4md883jNK2brAJfHnFeu
urnpyjTSD2Vb72lA9Fa2uxSlE4jiWLG64KhzM5QVV8PWpuyWIvNS0OaVdibOy6i2
89veyIhls7ApWquxgx6ipqHPoonL51eRF+kFYC0Bn+HjpdKCp/KLsjhFieVbAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUKJlA8MKJXs5fARQWvFmdp7gVlUEwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0MzI0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqmijANBgkqhkiG9w0BAQsFAAOCAQEAcC3p
0J4LrrbmTrYmzGb23swh+oHnGOLhnRERxkFpW7mE25M/b1utKnmf7QRhXJBwZevT
6Z8XILXLmSCC/fFw7Gdc5Qeay6bVWqOHrhbk0mb4j/gQLyHSiOgNyqMoyW0KxJWR
flWw7GsDKiWtcJunoy8mDGHGsWRvrPRyAM7pfRMYtOXvv9hdAehmDNGeY7d1ujIt
BZHgZ62j27wUd+yjhRxrcTrftrLe7tg0h04gPfqToGLXRGbF7ab8Aph1ZTr81X7E
ZPMy38krSj97z3RcHW8PO3wAUsnmy8nqI6SV/jz/oMkX4J3sOctfg8VMZcAv18eL
xRpjoX6k4MOplAJJ8w==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:56 2026 by rpki-client