Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144349.roa
File: AS144349.roa (raw, json)
Hash identifier: MR40mhjYr/1FjlPfMVgc1rzDtkSAowTRTDvUG+b9QNc=
Subject key identifier: AA:93:6F:D1:43:BE:35:42:AD:EC:D2:4A:80:83:E7:B2:5A:E1:44:88
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3245862BC2B1DD2C27B834E0592DE2EA03ACF3D0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144349.roa
Signing time: Fri 22 May 2026 07:08:37 +0000
ROA not before: Fri 22 May 2026 07:03:37 +0000
ROA not after: Fri 21 May 2027 07:08:37 +0000
asID: 144349
IP address blocks: 240a:a6a3::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:45:86:2b:c2:b1:dd:2c:27:b8:34:e0:59:2d:e2:ea:03:ac:f3:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:03:37 2026 GMT
Not After : May 21 07:08:37 2027 GMT
Subject: CN=AA936FD143BE3542ADECD24A8083E7B25AE14488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:5a:a9:49:ec:61:c7:e1:42:bf:a6:1c:ab:c5:
a7:fb:b4:4e:98:8c:16:78:a1:93:36:e4:d3:0a:dd:
e3:64:18:e1:3d:77:c1:36:78:cf:16:7a:57:33:08:
7c:4f:4e:e7:f9:5b:1a:ef:6a:3e:24:b8:ef:7f:39:
9a:5a:ad:26:a7:ef:6a:a3:90:3c:ae:e1:de:21:7b:
2b:c7:95:59:95:86:71:a6:2e:07:64:66:5a:16:ce:
f9:28:e5:0b:24:91:0a:87:f7:ad:a9:1b:df:a0:e4:
18:9c:6f:c6:95:1d:23:bb:f6:ee:a0:9c:29:1b:da:
24:f7:f7:00:cc:d4:4c:e6:ca:0d:0e:b4:96:f7:75:
0f:f2:a7:b7:4a:09:2d:83:fb:5f:5c:01:2a:30:af:
50:24:c4:58:47:e6:94:67:9e:d3:4e:03:c9:1a:40:
0c:69:e3:73:f4:35:fd:f1:32:df:62:50:b3:68:65:
f6:85:f1:25:af:65:be:31:bd:ad:4a:52:7e:2a:12:
c1:05:b1:ce:5f:ae:f5:6a:90:2a:e3:7f:05:3a:68:
20:ad:b4:cb:ef:d4:8f:87:cd:76:66:74:80:ea:83:
9f:fb:34:bc:15:e1:fd:49:05:77:48:c0:96:d1:03:
41:d6:79:28:ec:0f:ca:2b:8b:a0:bf:e9:89:13:b5:
f2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:93:6F:D1:43:BE:35:42:AD:EC:D2:4A:80:83:E7:B2:5A:E1:44:88
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144349.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a6a3::/32
Signature Algorithm: sha256WithRSAEncryption
41:fe:76:fa:8b:48:50:1b:b7:b1:88:33:19:d0:43:27:b0:64:
a8:03:b1:ec:a5:66:37:e0:1d:23:4e:2c:00:86:3b:d2:e6:15:
d7:41:fb:bd:34:4f:11:00:93:87:02:13:5b:7d:26:a0:c8:1b:
57:a1:c7:7c:c1:d9:ad:21:1b:90:c4:8f:3e:35:bd:bc:c9:e0:
4e:de:2f:d1:0a:a5:2c:42:0a:89:64:ed:07:3b:88:af:e2:41:
eb:95:f3:9c:17:05:bf:0c:50:99:ec:7b:86:d0:95:29:07:91:
41:4f:9a:18:86:d2:2a:21:24:c8:00:f7:c9:d2:98:52:5d:b0:
4c:6d:76:f8:bc:e3:2e:a9:60:1a:5f:74:9b:3c:39:31:31:92:
52:2a:e9:0f:d3:37:6b:ab:8e:67:e3:a1:34:bd:37:bb:62:7b:
7f:82:37:de:30:b9:67:0b:4c:70:7c:0d:8d:bb:8b:d1:76:5f:
35:dd:d7:99:58:b0:9a:22:d2:d0:33:fc:d7:8b:65:90:cf:6f:
fc:7c:f5:bd:db:74:1c:38:6b:f4:fc:6c:6e:2b:91:63:fc:cb:
38:43:56:dc:2f:d2:08:ce:98:92:ed:f6:e8:a7:0b:d4:14:1b:
a0:39:2c:d7:1c:e0:96:b0:53:f6:e9:00:51:25:3c:69:75:94:
d2:8e:a5:ba
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUMkWGK8Kx3SwnuDTgWS3i6gOs89AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzAzMzdaFw0yNzA1MjEwNzA4MzdaMDMxMTAvBgNV
BAMTKEFBOTM2RkQxNDNCRTM1NDJBREVDRDI0QTgwODNFN0IyNUFFMTQ0ODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4WqlJ7GHH4UK/phyrxaf7tE6Y
jBZ4oZM25NMK3eNkGOE9d8E2eM8WelczCHxPTuf5Wxrvaj4kuO9/OZparSan72qj
kDyu4d4heyvHlVmVhnGmLgdkZloWzvko5QskkQqH962pG9+g5Bicb8aVHSO79u6g
nCkb2iT39wDM1Ezmyg0OtJb3dQ/yp7dKCS2D+19cASowr1AkxFhH5pRnntNOA8ka
QAxp43P0Nf3xMt9iULNoZfaF8SWvZb4xva1KUn4qEsEFsc5frvVqkCrjfwU6aCCt
tMvv1I+HzXZmdIDqg5/7NLwV4f1JBXdIwJbRA0HWeSjsD8ori6C/6YkTtfLDAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUqpNv0UO+NUKt7NJKgIPnslrhRIgwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0MzQ5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqmozANBgkqhkiG9w0BAQsFAAOCAQEAQf52
+otIUBu3sYgzGdBDJ7BkqAOx7KVmN+AdI04sAIY70uYV10H7vTRPEQCThwITW30m
oMgbV6HHfMHZrSEbkMSPPjW9vMngTt4v0QqlLEIKiWTtBzuIr+JB65XznBcFvwxQ
mex7htCVKQeRQU+aGIbSKiEkyAD3ydKYUl2wTG12+LzjLqlgGl90mzw5MTGSUirp
D9M3a6uOZ+OhNL03u2J7f4I33jC5ZwtMcHwNjbuL0XZfNd3XmViwmiLS0DP814tl
kM9v/Hz1vdt0HDhr9PxsbiuRY/zLOENW3C/SCM6Yku326KcL1BQboDks1xzglrBT
9ukAUSU8aXWU0o6lug==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:39:02 2026 by rpki-client