Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144401.roa
File: AS144401.roa (raw, json)
Hash identifier: iCDPo/8DSNzttOou0P/n2Jg2RySvgIVb2Vr+Eqjlvqo=
Subject key identifier: 92:8D:9B:AB:B6:0B:E9:AF:66:09:60:31:44:A2:7D:F4:77:DE:A5:D4
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6BD85EE1E45075C074073CCCCB029E43A1080759
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144401.roa
Signing time: Mon 25 May 2026 02:22:49 +0000
ROA not before: Mon 25 May 2026 02:17:49 +0000
ROA not after: Mon 24 May 2027 02:22:49 +0000
asID: 144401
IP address blocks: 240a:a6d7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:d8:5e:e1:e4:50:75:c0:74:07:3c:cc:cb:02:9e:43:a1:08:07:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:49 2026 GMT
Not After : May 24 02:22:49 2027 GMT
Subject: CN=928D9BABB60BE9AF6609603144A27DF477DEA5D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e6:6b:97:62:6c:72:07:08:5a:e9:c5:aa:09:
62:bd:8a:a5:65:86:f0:6e:f8:e1:69:8f:6c:fb:b9:
57:b9:5a:65:c6:55:e3:5e:46:88:1f:2b:dd:a8:50:
2a:33:0e:9b:a0:6a:71:b2:8d:ec:ab:2e:6f:4e:20:
96:4d:c4:ae:73:d2:4a:09:c8:2c:b3:e0:90:24:ef:
34:d9:2e:9d:0b:66:1e:e5:6c:47:02:fb:93:72:ee:
d7:58:ee:d6:52:83:36:41:95:09:9a:2b:aa:4e:03:
e3:0f:56:1b:95:3f:af:61:05:0d:c9:3b:7c:21:10:
75:b5:31:00:82:45:9f:7b:3d:ae:7c:a5:02:e1:be:
48:2a:8a:a6:73:ca:12:10:d5:c9:7b:dc:e2:aa:ba:
4b:8c:d6:3c:de:e2:69:9c:70:fb:90:38:ef:f0:54:
7b:e7:3c:d1:e1:b5:71:8b:98:07:23:f4:4d:c1:89:
70:98:e4:17:fa:6d:bd:4b:83:31:ae:6c:f2:c4:09:
6f:5f:d9:db:05:b4:93:79:fe:be:d3:a9:41:e3:dd:
e3:0d:4f:ff:76:f0:40:b5:d8:48:cb:2b:c2:2e:53:
56:ef:8f:69:4d:c6:2f:6f:65:a3:55:12:72:0e:83:
de:f3:8a:6c:4e:6e:f3:d3:86:12:95:5c:ef:57:6d:
f1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:8D:9B:AB:B6:0B:E9:AF:66:09:60:31:44:A2:7D:F4:77:DE:A5:D4
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144401.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a6d7::/32
Signature Algorithm: sha256WithRSAEncryption
bb:dc:10:b7:27:5d:dc:96:3f:48:de:9c:8a:8d:a9:17:78:f9:
c9:f0:07:12:26:bb:1b:0d:d3:9a:64:7e:b6:cb:1b:09:4b:fe:
dd:38:82:9d:ce:43:ff:eb:24:82:62:91:99:09:cf:26:90:58:
be:1b:f0:d4:09:ff:28:bc:9b:64:c0:d0:41:e4:e2:5b:e7:4f:
df:d4:21:41:50:5e:62:82:6d:f1:cf:6c:fe:0f:e1:d0:01:3c:
ad:cd:ad:f2:05:b7:91:fc:28:7a:e6:8a:e5:6d:0f:81:fd:95:
41:c5:7f:ed:e1:7d:18:02:03:f9:d1:2d:65:f9:be:23:cd:79:
e9:b6:b5:dc:21:e0:68:f7:95:7f:c6:b0:27:4b:9c:72:28:f6:
93:79:b4:27:3e:e8:ea:5d:15:f0:f1:97:bf:cc:64:37:0f:2b:
67:df:eb:77:7b:19:f6:65:60:41:73:17:84:79:3d:6d:e3:b2:
76:c9:9c:ec:f4:7d:4b:c3:50:65:72:61:f7:27:97:91:28:60:
71:39:7e:c6:a4:6f:4e:1f:2b:5a:69:da:09:3a:ec:de:a7:3b:
ad:26:d3:48:83:2c:ef:5c:46:f7:47:08:73:a4:ed:06:66:53:
04:40:97:a0:dd:7e:3c:25:5a:25:e1:b7:98:84:80:96:44:0b:
dc:05:ad:60
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUa9he4eRQdcB0BzzMywKeQ6EIB1kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMjE3NDlaFw0yNzA1MjQwMjIyNDlaMDMxMTAvBgNV
BAMTKDkyOEQ5QkFCQjYwQkU5QUY2NjA5NjAzMTQ0QTI3REY0NzdERUE1RDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl5muXYmxyBwha6cWqCWK9iqVl
hvBu+OFpj2z7uVe5WmXGVeNeRogfK92oUCozDpuganGyjeyrLm9OIJZNxK5z0koJ
yCyz4JAk7zTZLp0LZh7lbEcC+5Ny7tdY7tZSgzZBlQmaK6pOA+MPVhuVP69hBQ3J
O3whEHW1MQCCRZ97Pa58pQLhvkgqiqZzyhIQ1cl73OKqukuM1jze4mmccPuQOO/w
VHvnPNHhtXGLmAcj9E3BiXCY5Bf6bb1LgzGubPLECW9f2dsFtJN5/r7TqUHj3eMN
T/928EC12EjLK8IuU1bvj2lNxi9vZaNVEnIOg97zimxObvPThhKVXO9XbfExAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUko2bq7YL6a9mCWAxRKJ99HfepdQwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0NDAxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqm1zANBgkqhkiG9w0BAQsFAAOCAQEAu9wQ
tydd3JY/SN6cio2pF3j5yfAHEia7Gw3TmmR+tssbCUv+3TiCnc5D/+skgmKRmQnP
JpBYvhvw1An/KLybZMDQQeTiW+dP39QhQVBeYoJt8c9s/g/h0AE8rc2t8gW3kfwo
euaK5W0Pgf2VQcV/7eF9GAID+dEtZfm+I8156ba13CHgaPeVf8awJ0uccij2k3m0
Jz7o6l0V8PGXv8xkNw8rZ9/rd3sZ9mVgQXMXhHk9beOydsmc7PR9S8NQZXJh9yeX
kShgcTl+xqRvTh8rWmnaCTrs3qc7rSbTSIMs71xG90cIc6TtBmZTBECXoN1+PCVa
JeG3mISAlkQL3AWtYA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:44 2026 by rpki-client