Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144325.roa
File: AS144325.roa (raw, json)
Hash identifier: Sj6mG4iMnB+d+dnJtmvE7LfxMN5/xXNRCWxWVJ8iyRo=
Subject key identifier: 9D:D7:7B:AC:9C:66:41:08:2F:9A:F4:B0:FC:A4:D6:B6:98:82:1E:EC
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 501BA849EC89313D2E7747D3B1F24F8ACB886317
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144325.roa
Signing time: Fri 22 May 2026 06:05:45 +0000
ROA not before: Fri 22 May 2026 06:00:45 +0000
ROA not after: Fri 21 May 2027 06:05:45 +0000
asID: 144325
IP address blocks: 240a:a68b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:1b:a8:49:ec:89:31:3d:2e:77:47:d3:b1:f2:4f:8a:cb:88:63:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:45 2026 GMT
Not After : May 21 06:05:45 2027 GMT
Subject: CN=9DD77BAC9C6641082F9AF4B0FCA4D6B698821EEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8f:52:7d:0e:8d:4e:61:26:d7:67:c1:9c:5b:
67:5e:85:d6:f7:38:52:1d:23:e4:f5:d9:2f:33:0a:
ff:f6:7b:4c:6b:9c:d3:4d:2c:f0:b8:80:08:7d:99:
0c:b9:c1:e7:7b:4e:20:6c:57:01:98:b0:db:2f:00:
92:e3:63:5a:c0:0b:4a:e0:83:cf:f9:14:a3:fb:cc:
eb:60:d9:d6:79:4e:1c:39:e6:bb:99:ae:3e:32:f8:
bc:c3:f8:af:3a:9a:b7:ce:58:80:f6:d3:98:38:85:
f0:27:b6:7d:e2:de:ed:11:2f:33:d7:e1:4d:65:ea:
55:1b:bf:0c:d8:0f:27:9b:6d:95:94:98:0e:42:14:
82:de:12:f6:79:c9:76:02:d1:ac:67:01:62:69:80:
c9:5f:cf:ba:14:d0:6b:01:df:dd:cd:2b:10:c7:d8:
1b:40:62:2e:4d:e6:23:a2:7c:03:1f:28:a1:56:e9:
e9:3e:57:a9:0c:75:86:83:5f:b8:cd:52:8a:32:62:
31:05:1e:ac:68:e9:75:3f:78:16:f4:c0:27:dd:b2:
f1:41:90:35:ac:76:92:fa:81:0f:b8:0b:89:eb:91:
d3:91:ef:cc:15:4c:25:3c:6d:24:e9:c1:a5:e7:50:
28:7c:ca:c6:4d:7d:06:ed:7e:fb:da:c4:38:d6:6d:
08:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D7:7B:AC:9C:66:41:08:2F:9A:F4:B0:FC:A4:D6:B6:98:82:1E:EC
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144325.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a68b::/32
Signature Algorithm: sha256WithRSAEncryption
b0:15:3e:ee:5a:74:19:eb:50:c3:d9:33:71:c5:56:29:27:18:
38:d5:84:20:84:bb:5e:39:15:b0:cf:d0:cb:8e:3e:80:6c:55:
07:05:d4:ed:a1:ae:a7:b0:ff:66:1e:fc:c4:59:2e:8a:11:c9:
d6:ed:42:c8:90:5d:6e:9f:bc:0e:72:82:12:16:55:be:bb:64:
8f:22:87:57:30:6f:00:53:8e:bc:7d:78:94:95:cf:05:52:ca:
8e:b4:41:66:15:e4:65:4a:7a:ef:88:95:2f:a8:91:cc:90:86:
eb:1a:37:21:9b:aa:5a:2b:7d:39:7e:89:a4:23:9b:4b:6e:8e:
45:8a:eb:fa:22:84:75:48:95:33:07:af:a5:b8:26:df:2b:37:
09:81:6f:84:15:b2:f7:5d:06:41:7c:92:6d:12:28:71:38:17:
c5:7f:f9:96:e4:71:31:ac:71:15:de:5a:7a:59:97:bb:bc:b8:
64:25:cc:b2:ae:b5:6d:e1:50:be:b5:49:2e:44:84:3c:5b:ad:
96:8e:a2:c7:25:45:7c:c5:54:74:26:6b:70:bc:0d:7d:fa:53:
13:e9:21:4b:85:23:6a:dd:85:5a:63:1a:51:02:21:50:22:0b:
76:91:56:64:de:87:3a:3b:5b:11:88:31:48:16:71:17:72:17:
55:af:68:b7
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUUBuoSeyJMT0ud0fTsfJPisuIYxcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjAwNDVaFw0yNzA1MjEwNjA1NDVaMDMxMTAvBgNV
BAMTKDlERDc3QkFDOUM2NjQxMDgyRjlBRjRCMEZDQTRENkI2OTg4MjFFRUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6j1J9Do1OYSbXZ8GcW2dehdb3
OFIdI+T12S8zCv/2e0xrnNNNLPC4gAh9mQy5wed7TiBsVwGYsNsvAJLjY1rAC0rg
g8/5FKP7zOtg2dZ5Thw55ruZrj4y+LzD+K86mrfOWID205g4hfAntn3i3u0RLzPX
4U1l6lUbvwzYDyebbZWUmA5CFILeEvZ5yXYC0axnAWJpgMlfz7oU0GsB393NKxDH
2BtAYi5N5iOifAMfKKFW6ek+V6kMdYaDX7jNUooyYjEFHqxo6XU/eBb0wCfdsvFB
kDWsdpL6gQ+4C4nrkdOR78wVTCU8bSTpwaXnUCh8ysZNfQbtfvvaxDjWbQhzAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUndd7rJxmQQgvmvSw/KTWtpiCHuwwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0MzI1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqmizANBgkqhkiG9w0BAQsFAAOCAQEAsBU+
7lp0GetQw9kzccVWKScYONWEIIS7XjkVsM/Qy44+gGxVBwXU7aGup7D/Zh78xFku
ihHJ1u1CyJBdbp+8DnKCEhZVvrtkjyKHVzBvAFOOvH14lJXPBVLKjrRBZhXkZUp6
74iVL6iRzJCG6xo3IZuqWit9OX6JpCObS26ORYrr+iKEdUiVMwevpbgm3ys3CYFv
hBWy910GQXySbRIocTgXxX/5luRxMaxxFd5aelmXu7y4ZCXMsq61beFQvrVJLkSE
PFutlo6ixyVFfMVUdCZrcLwNffpTE+khS4Ujat2FWmMaUQIhUCILdpFWZN6HOjtb
EYgxSBZxF3IXVa9otw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:19 2026 by rpki-client