Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144332.roa
File: AS144332.roa (raw, json)
Hash identifier: QWL5XHsi6fx4kCfrnNIkr17jznCtjtZIttkaxK1BNk8=
Subject key identifier: 48:47:71:50:1B:57:A2:2E:68:5D:5E:46:14:9B:F8:14:B4:ED:A7:BB
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 057FC62E34155486E145DB46A0964FEC0A7EFE01
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144332.roa
Signing time: Mon 25 May 2026 02:22:23 +0000
ROA not before: Mon 25 May 2026 02:17:23 +0000
ROA not after: Mon 24 May 2027 02:22:23 +0000
asID: 144332
IP address blocks: 240a:a692::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:7f:c6:2e:34:15:54:86:e1:45:db:46:a0:96:4f:ec:0a:7e:fe:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:23 2026 GMT
Not After : May 24 02:22:23 2027 GMT
Subject: CN=484771501B57A22E685D5E46149BF814B4EDA7BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:70:5f:64:4c:3f:c3:9d:54:69:61:5e:f4:14:
d8:f5:ca:28:4b:53:89:ca:3b:f3:de:c7:60:45:54:
77:50:52:2f:91:f4:80:ca:c3:93:1c:be:48:f6:19:
75:21:99:1c:0b:5e:0d:47:b1:38:23:31:bf:9a:30:
1c:6c:f2:26:02:6b:63:fd:38:87:65:42:62:a8:9d:
9a:f4:df:cc:01:92:24:b0:f1:7d:43:bd:fe:2f:26:
38:0f:23:7d:0f:ce:8f:02:29:55:78:c9:d6:17:96:
c2:b9:b2:a8:30:39:9b:fd:03:5d:41:02:3c:55:00:
88:e8:f8:67:f0:a5:e0:4d:89:82:30:78:36:68:47:
0b:36:a7:d5:51:c2:67:b6:a0:47:a7:17:d6:a0:b7:
79:ba:49:1b:32:a0:db:be:11:3d:74:8d:89:c9:49:
a3:5b:ca:7a:84:17:e3:f8:87:b0:5f:11:95:3c:ca:
5f:00:66:71:72:12:c7:0c:e9:f1:aa:1e:d6:24:51:
1c:88:5f:2b:b9:8f:6b:5a:e6:2d:f0:ac:cb:31:12:
48:32:be:66:eb:0d:cf:c7:5d:4a:88:3c:ee:b8:79:
78:56:80:df:42:be:c7:0f:c0:90:07:9c:8f:7c:a2:
6f:6f:2e:d2:c9:04:17:86:b2:25:ed:9a:c0:29:e2:
9e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:47:71:50:1B:57:A2:2E:68:5D:5E:46:14:9B:F8:14:B4:ED:A7:BB
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a692::/32
Signature Algorithm: sha256WithRSAEncryption
7a:bf:28:86:08:e1:57:10:7b:6e:e7:b8:f4:36:56:8d:9f:82:
a3:3a:d3:c7:eb:00:16:3a:11:7c:63:06:53:0e:97:ea:6e:66:
99:da:15:e1:aa:2f:c4:ba:2e:b6:91:a9:09:8e:a3:eb:5e:96:
02:52:8c:cf:50:70:1e:53:fa:da:b8:df:3c:21:45:a0:fb:41:
17:39:cb:dd:11:3a:a2:68:7c:08:d6:d3:5b:ae:db:64:17:69:
3b:c6:12:23:b0:51:53:e5:f2:bd:34:49:96:f8:cd:b0:81:24:
13:02:f1:83:28:39:99:c7:bc:ca:11:e3:6a:b7:84:1e:94:e5:
ee:1c:93:89:80:cd:01:ec:02:d9:9d:88:e9:ec:64:ce:4f:e2:
69:14:08:51:ec:da:c6:d4:b7:9d:5e:4b:20:18:cb:68:83:a5:
75:41:3c:d5:e0:99:6c:54:03:71:23:6e:d4:4c:99:46:fb:73:
b8:07:0b:f4:3b:f7:f3:a0:6d:9b:5f:49:f1:b2:5e:a6:a2:e0:
08:d9:32:80:cb:df:34:63:97:17:c9:fc:5b:44:bd:03:70:1a:
5f:bd:3d:e8:ad:83:a6:51:49:be:90:57:af:e3:10:17:65:73:
16:92:98:b9:99:86:10:58:03:d9:80:0f:c7:cc:dc:42:60:b7:
13:ed:0c:cc
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUBX/GLjQVVIbhRdtGoJZP7Ap+/gEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMjE3MjNaFw0yNzA1MjQwMjIyMjNaMDMxMTAvBgNV
BAMTKDQ4NDc3MTUwMUI1N0EyMkU2ODVENUU0NjE0OUJGODE0QjRFREE3QkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYcF9kTD/DnVRpYV70FNj1yihL
U4nKO/Pex2BFVHdQUi+R9IDKw5Mcvkj2GXUhmRwLXg1HsTgjMb+aMBxs8iYCa2P9
OIdlQmKonZr038wBkiSw8X1Dvf4vJjgPI30Pzo8CKVV4ydYXlsK5sqgwOZv9A11B
AjxVAIjo+GfwpeBNiYIweDZoRws2p9VRwme2oEenF9agt3m6SRsyoNu+ET10jYnJ
SaNbynqEF+P4h7BfEZU8yl8AZnFyEscM6fGqHtYkURyIXyu5j2ta5i3wrMsxEkgy
vmbrDc/HXUqIPO64eXhWgN9CvscPwJAHnI98om9vLtLJBBeGsiXtmsAp4p7FAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUSEdxUBtXoi5oXV5GFJv4FLTtp7swHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0MzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqmkjANBgkqhkiG9w0BAQsFAAOCAQEAer8o
hgjhVxB7bue49DZWjZ+CozrTx+sAFjoRfGMGUw6X6m5mmdoV4aovxLoutpGpCY6j
616WAlKMz1BwHlP62rjfPCFFoPtBFznL3RE6omh8CNbTW67bZBdpO8YSI7BRU+Xy
vTRJlvjNsIEkEwLxgyg5mce8yhHjareEHpTl7hyTiYDNAewC2Z2I6exkzk/iaRQI
UezaxtS3nV5LIBjLaIOldUE81eCZbFQDcSNu1EyZRvtzuAcL9Dv386Btm19J8bJe
pqLgCNkygMvfNGOXF8n8W0S9A3AaX7096K2DplFJvpBXr+MQF2VzFpKYuZmGEFgD
2YAPx8zcQmC3E+0MzA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:32 2026 by rpki-client