Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144383.roa
File: AS144383.roa (raw, json)
Hash identifier: yS2MB07ECKcNcdF8C+cdfjIrSdMH6PHgi4+eobSnXnk=
Subject key identifier: 36:E1:1A:6E:5D:24:0A:BA:7F:77:5A:92:4F:8B:13:0C:E2:54:45:FF
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 796A51720B6DF3F73C3BFE69A814E72612305400
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144383.roa
Signing time: Fri 22 May 2026 06:46:14 +0000
ROA not before: Fri 22 May 2026 06:41:14 +0000
ROA not after: Fri 21 May 2027 06:46:14 +0000
asID: 144383
IP address blocks: 240a:a6c5::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:6a:51:72:0b:6d:f3:f7:3c:3b:fe:69:a8:14:e7:26:12:30:54:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:14 2026 GMT
Not After : May 21 06:46:14 2027 GMT
Subject: CN=36E11A6E5D240ABA7F775A924F8B130CE25445FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fa:e7:f6:b6:fe:38:c0:5f:16:42:58:3c:1c:
35:fa:00:c5:48:30:8a:f3:eb:5c:23:09:22:c9:ac:
3d:35:83:e7:51:9b:02:eb:e2:94:06:7a:0c:78:f0:
55:b2:7c:67:ef:ae:84:06:6b:6e:9b:b4:8b:95:c2:
20:66:2e:df:62:df:29:9c:e4:4b:52:c8:2b:7c:9c:
30:0f:32:99:ad:78:e4:10:c1:4b:0c:b8:a8:49:76:
08:08:c6:68:6d:51:64:fd:f4:96:03:c3:96:3b:04:
f7:5c:1f:33:cd:d0:18:23:9b:34:61:9f:30:47:3b:
27:9f:a9:c6:25:a3:bf:9c:7c:66:de:2f:ba:86:41:
70:97:0d:76:66:da:42:d0:e2:d8:33:3d:25:e7:36:
e6:6d:8b:ba:81:e0:28:f0:27:18:57:aa:84:b6:8e:
02:f7:9d:02:6a:21:50:07:3c:3c:2c:d9:f0:82:fd:
b1:e6:47:94:47:61:dd:4a:6f:bb:bc:e6:79:66:06:
93:89:56:51:0e:e0:6a:11:03:b1:ce:01:f7:b2:95:
11:da:a9:14:bb:fb:38:1f:bd:88:bb:b3:30:8d:d2:
71:5a:3e:d3:71:f0:0e:65:28:ac:7d:64:bd:4c:ae:
80:25:a5:c3:9f:62:5c:76:3d:8d:ae:91:4b:a2:ee:
db:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E1:1A:6E:5D:24:0A:BA:7F:77:5A:92:4F:8B:13:0C:E2:54:45:FF
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144383.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a6c5::/32
Signature Algorithm: sha256WithRSAEncryption
b9:43:c9:f6:47:90:d1:a2:ea:bf:b6:a3:05:f3:48:8f:4a:39:
60:41:80:14:9d:57:77:60:7a:00:29:85:e0:8a:40:f8:dc:1c:
95:29:c5:38:91:f0:48:72:fc:55:ac:c3:a1:35:8d:75:0c:fa:
c5:f1:94:97:20:37:91:33:2b:e2:b1:25:de:e1:40:83:17:f1:
9f:0e:25:3b:4e:68:a1:0a:a3:a6:97:c7:b9:4e:75:d4:8b:fa:
2b:24:5f:cf:ac:33:5e:15:1d:10:32:47:35:b3:30:5e:0c:15:
96:01:03:06:b0:9c:41:3e:ba:eb:f7:93:8e:e0:06:8a:c9:73:
80:df:92:1c:13:70:8f:e7:e5:3e:21:ec:3c:91:e3:13:99:60:
dd:38:68:df:5a:60:89:75:22:fd:da:98:02:88:a3:cc:a8:a2:
6a:67:ad:45:1a:eb:6c:6f:da:31:a9:3f:2b:a6:44:1e:49:a4:
47:49:e4:4e:20:a9:5c:b5:b5:be:42:1a:59:a7:1d:a2:44:ec:
67:85:1d:7e:77:92:1d:59:45:13:31:31:83:69:22:42:12:91:
86:43:22:87:3d:c9:65:2e:0a:06:95:de:ee:49:b7:a7:34:06:
02:8a:91:c5:c3:dc:0b:9c:f0:87:00:9b:73:25:b4:7d:4e:ec:
51:f2:b8:31
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUeWpRcgtt8/c8O/5pqBTnJhIwVAAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjQxMTRaFw0yNzA1MjEwNjQ2MTRaMDMxMTAvBgNV
BAMTKDM2RTExQTZFNUQyNDBBQkE3Rjc3NUE5MjRGOEIxMzBDRTI1NDQ1RkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5+uf2tv44wF8WQlg8HDX6AMVI
MIrz61wjCSLJrD01g+dRmwLr4pQGegx48FWyfGfvroQGa26btIuVwiBmLt9i3ymc
5EtSyCt8nDAPMpmteOQQwUsMuKhJdggIxmhtUWT99JYDw5Y7BPdcHzPN0BgjmzRh
nzBHOyefqcYlo7+cfGbeL7qGQXCXDXZm2kLQ4tgzPSXnNuZti7qB4CjwJxhXqoS2
jgL3nQJqIVAHPDws2fCC/bHmR5RHYd1Kb7u85nlmBpOJVlEO4GoRA7HOAfeylRHa
qRS7+zgfvYi7szCN0nFaPtNx8A5lKKx9ZL1MroAlpcOfYlx2PY2ukUui7ttFAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUNuEabl0kCrp/d1qST4sTDOJURf8wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0MzgzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqmxTANBgkqhkiG9w0BAQsFAAOCAQEAuUPJ
9keQ0aLqv7ajBfNIj0o5YEGAFJ1Xd2B6ACmF4IpA+NwclSnFOJHwSHL8VazDoTWN
dQz6xfGUlyA3kTMr4rEl3uFAgxfxnw4lO05ooQqjppfHuU511Iv6KyRfz6wzXhUd
EDJHNbMwXgwVlgEDBrCcQT666/eTjuAGislzgN+SHBNwj+flPiHsPJHjE5lg3Tho
31pgiXUi/dqYAoijzKiiametRRrrbG/aMak/K6ZEHkmkR0nkTiCpXLW1vkIaWacd
okTsZ4UdfneSHVlFEzExg2kiQhKRhkMihz3JZS4KBpXe7km3pzQGAoqRxcPcC5zw
hwCbcyW0fU7sUfK4MQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:40 2026 by rpki-client