Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144407.roa
File: AS144407.roa (raw, json)
Hash identifier: 76BPmvx0ocej31Gl7JMVy0RsZewlTrPEYsKZeTEc/6I=
Subject key identifier: 04:1E:3A:4B:21:D8:C7:DB:0E:A4:03:C4:06:FC:AE:B8:71:42:81:C6
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1F6777FF9CF2EDD14CE9EA9364A66BD44AEC71C9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144407.roa
Signing time: Mon 25 May 2026 01:38:31 +0000
ROA not before: Mon 25 May 2026 01:33:31 +0000
ROA not after: Mon 24 May 2027 01:38:31 +0000
asID: 144407
IP address blocks: 240a:a6dd::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:67:77:ff:9c:f2:ed:d1:4c:e9:ea:93:64:a6:6b:d4:4a:ec:71:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:31 2026 GMT
Not After : May 24 01:38:31 2027 GMT
Subject: CN=041E3A4B21D8C7DB0EA403C406FCAEB8714281C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7e:cd:b1:cf:98:3f:fc:58:47:69:19:99:e2:
37:32:68:43:70:93:cf:d5:96:f7:97:c7:bb:09:ee:
be:87:ca:1b:0e:f6:5e:ee:59:16:8a:a5:a6:c0:ae:
41:25:35:27:d3:58:2c:d7:9f:b1:2a:58:15:8b:49:
b0:73:0d:55:67:ee:df:50:34:5a:af:e4:c7:a3:b9:
81:da:4e:2e:bf:13:43:03:b9:45:dc:2c:15:ac:b6:
e6:d8:a4:f2:a4:81:a7:c8:c6:67:11:4e:65:e6:fd:
53:24:59:1f:c2:6d:ec:87:b3:7a:4b:61:29:f5:e6:
24:1e:a6:26:f0:bd:75:e5:af:1b:27:0c:de:e5:84:
c7:ba:14:85:c6:cf:63:b5:3d:1b:4a:99:31:cb:e8:
83:7d:89:69:de:cc:8f:86:1e:40:f3:52:d7:5c:b4:
e8:5e:6e:a9:28:dd:a8:b8:1e:81:47:6b:8a:3a:17:
ee:89:c0:af:a1:8f:e6:ee:23:35:fe:b0:30:ba:98:
b5:89:45:2b:a7:4a:de:5c:6f:3f:91:38:f5:af:24:
f8:e1:59:8f:d2:04:64:27:b7:65:a3:28:38:04:b6:
51:bf:58:19:70:65:48:35:57:40:6b:d5:5c:91:75:
cf:08:5b:07:2c:88:c3:5b:ea:27:25:5b:04:eb:0d:
ab:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:1E:3A:4B:21:D8:C7:DB:0E:A4:03:C4:06:FC:AE:B8:71:42:81:C6
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144407.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a6dd::/32
Signature Algorithm: sha256WithRSAEncryption
0a:a0:c2:33:f6:46:34:0d:1b:8f:44:4a:08:ff:46:34:cf:05:
57:8d:0b:15:45:ee:ee:01:fd:73:58:4d:41:c1:cc:c3:4d:aa:
59:2c:84:f7:79:95:1e:49:33:33:3c:56:1e:d7:2a:b4:1f:93:
ca:88:05:a9:13:9d:d0:92:5b:19:dc:18:51:29:bd:f7:f6:89:
4f:bb:19:27:6c:26:77:6b:8a:32:8b:11:e1:ef:d5:36:6a:f1:
cd:f2:da:ff:57:82:f4:68:40:ce:2e:ea:4c:ec:d9:8d:89:72:
d5:2f:ce:d5:72:b2:4c:69:bc:f0:91:45:0f:bd:0f:92:4a:0b:
bd:8e:21:83:2b:ec:fd:40:7d:ab:2e:b3:0e:40:cc:06:8c:7a:
02:f4:7e:21:92:27:c9:da:a4:b1:e8:69:fd:17:ab:13:85:f7:
62:a3:a0:49:8e:99:6d:cf:58:31:80:a8:07:db:46:32:a0:b4:
69:fa:58:53:fe:11:f8:99:0e:25:4a:2f:a9:75:9d:d0:3f:2a:
92:31:4d:ba:f1:f7:11:2a:de:81:1d:4c:7f:f1:a4:ee:70:6a:
d6:cb:24:d2:33:92:a3:47:0c:17:75:61:3c:62:64:df:60:4b:
b2:a2:a3:2c:13:eb:d8:31:e4:fe:0e:ec:62:21:c5:99:f8:15:
cd:95:6a:8e
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUH2d3/5zy7dFM6eqTZKZr1ErscckwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTMzMzFaFw0yNzA1MjQwMTM4MzFaMDMxMTAvBgNV
BAMTKDA0MUUzQTRCMjFEOEM3REIwRUE0MDNDNDA2RkNBRUI4NzE0MjgxQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJfs2xz5g//FhHaRmZ4jcyaENw
k8/VlveXx7sJ7r6HyhsO9l7uWRaKpabArkElNSfTWCzXn7EqWBWLSbBzDVVn7t9Q
NFqv5MejuYHaTi6/E0MDuUXcLBWstubYpPKkgafIxmcRTmXm/VMkWR/CbeyHs3pL
YSn15iQepibwvXXlrxsnDN7lhMe6FIXGz2O1PRtKmTHL6IN9iWnezI+GHkDzUtdc
tOhebqko3ai4HoFHa4o6F+6JwK+hj+buIzX+sDC6mLWJRSunSt5cbz+ROPWvJPjh
WY/SBGQnt2WjKDgEtlG/WBlwZUg1V0Br1VyRdc8IWwcsiMNb6iclWwTrDaujAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUBB46SyHYx9sOpAPEBvyuuHFCgcYwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0NDA3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqm3TANBgkqhkiG9w0BAQsFAAOCAQEACqDC
M/ZGNA0bj0RKCP9GNM8FV40LFUXu7gH9c1hNQcHMw02qWSyE93mVHkkzMzxWHtcq
tB+TyogFqROd0JJbGdwYUSm99/aJT7sZJ2wmd2uKMosR4e/VNmrxzfLa/1eC9GhA
zi7qTOzZjYly1S/O1XKyTGm88JFFD70PkkoLvY4hgyvs/UB9qy6zDkDMBox6AvR+
IZInydqksehp/RerE4X3YqOgSY6Zbc9YMYCoB9tGMqC0afpYU/4R+JkOJUovqXWd
0D8qkjFNuvH3ESregR1Mf/Gk7nBq1ssk0jOSo0cMF3VhPGJk32BLsqKjLBPr2DHk
/g7sYiHFmfgVzZVqjg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:21 2026 by rpki-client