Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144439.roa
File: AS144439.roa (raw, json)
Hash identifier: FzOnSok5+cWkjgECWbWKDbkAHYOE5CTP/hacOoWXd1A=
Subject key identifier: E3:84:CC:77:93:CD:D9:B2:7A:F9:D4:43:49:0C:BB:C5:EA:86:73:2C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6A3BFC17F73336D70194298BEF1873A5901D2C41
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144439.roa
Signing time: Fri 22 May 2026 06:27:35 +0000
ROA not before: Fri 22 May 2026 06:22:35 +0000
ROA not after: Fri 21 May 2027 06:27:35 +0000
asID: 144439
IP address blocks: 240a:a6fd::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:3b:fc:17:f7:33:36:d7:01:94:29:8b:ef:18:73:a5:90:1d:2c:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:22:35 2026 GMT
Not After : May 21 06:27:35 2027 GMT
Subject: CN=E384CC7793CDD9B27AF9D443490CBBC5EA86732C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:79:6c:2f:14:f1:25:6f:a4:0f:94:97:14:71:
32:a5:09:a5:8d:a4:6a:21:96:48:41:f9:3c:2a:fc:
6f:91:47:d6:7a:cb:66:29:ff:1c:42:75:02:4d:a0:
c8:7f:c3:b7:ec:64:96:30:27:e0:ab:96:f3:8c:af:
b6:55:4d:65:2e:9b:77:96:76:80:75:01:91:00:09:
7b:8b:3f:79:99:52:f1:70:06:d7:ad:1a:d5:62:69:
63:0b:f6:e3:0d:fd:2b:71:7e:92:6b:fc:62:4b:17:
d0:19:24:90:f8:12:46:18:64:cc:c1:19:5f:81:e5:
87:25:67:43:a1:f3:a1:cb:9a:72:29:05:74:83:7b:
dc:dc:ae:ab:e3:8d:0d:2a:a3:ee:c1:a0:7c:77:dd:
ba:9e:74:23:10:61:64:cd:26:26:ed:9f:4c:6a:5c:
90:8e:95:c1:0c:f5:1b:f2:7d:7a:72:16:91:3f:c8:
1d:ce:59:43:38:a6:d0:6f:63:ff:b1:b9:79:53:4f:
db:64:a9:cb:9c:99:80:79:1c:f1:98:fc:2c:59:99:
f6:21:7b:4c:47:0a:6c:c8:a0:b8:14:d1:5d:bc:46:
92:2b:f9:32:51:b5:dc:96:87:70:f9:4f:25:b4:c0:
a6:84:2e:ec:6f:87:5a:24:9b:70:08:fd:29:5a:4c:
93:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:84:CC:77:93:CD:D9:B2:7A:F9:D4:43:49:0C:BB:C5:EA:86:73:2C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a6fd::/32
Signature Algorithm: sha256WithRSAEncryption
31:5e:90:b0:f8:c4:20:1f:d0:eb:ea:f5:99:e2:6d:98:7c:53:
32:25:8a:d4:a5:3a:58:c2:52:4c:e2:91:50:38:0c:de:8f:18:
d0:1a:3e:e5:ae:1f:53:8a:cc:61:90:06:48:ae:23:90:30:f6:
61:33:b4:1a:7e:2e:14:08:fd:ed:dd:2e:07:ee:07:05:4b:92:
ae:fe:5f:3e:de:6b:6a:2e:06:89:89:43:56:b6:12:52:8e:a6:
67:31:65:6a:cd:75:30:92:69:bd:59:36:44:42:bd:b6:5f:eb:
35:6f:89:1a:b5:2c:4a:7c:c7:23:45:5f:79:36:80:2f:85:65:
8b:a4:1e:00:0e:b8:dc:2d:15:58:4b:da:e4:a9:13:f8:00:05:
65:1e:af:09:8d:e5:dd:e5:16:e5:04:64:0d:03:7b:fe:8f:0d:
4d:f3:de:55:ad:bd:30:0a:fb:a3:d6:79:34:46:9b:4d:4b:4f:
3e:bd:a2:f9:4a:b4:5f:2a:ae:5b:1d:dc:f4:d6:4d:1a:f9:c3:
3b:bb:6f:2c:a4:04:ed:36:1c:a3:4b:ab:d4:8a:f0:bb:62:6c:
bc:5e:33:fc:da:4d:03:63:f3:39:f9:f3:c2:d1:7c:43:3b:9e:
4c:d1:51:3f:22:43:70:c4:12:6f:02:33:4a:4f:9b:f8:f8:e5:
25:dc:85:44
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUajv8F/czNtcBlCmL7xhzpZAdLEEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjIyMzVaFw0yNzA1MjEwNjI3MzVaMDMxMTAvBgNV
BAMTKEUzODRDQzc3OTNDREQ5QjI3QUY5RDQ0MzQ5MENCQkM1RUE4NjczMkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeeWwvFPElb6QPlJcUcTKlCaWN
pGohlkhB+Twq/G+RR9Z6y2Yp/xxCdQJNoMh/w7fsZJYwJ+CrlvOMr7ZVTWUum3eW
doB1AZEACXuLP3mZUvFwBtetGtViaWML9uMN/StxfpJr/GJLF9AZJJD4EkYYZMzB
GV+B5YclZ0Oh86HLmnIpBXSDe9zcrqvjjQ0qo+7BoHx33bqedCMQYWTNJibtn0xq
XJCOlcEM9RvyfXpyFpE/yB3OWUM4ptBvY/+xuXlTT9tkqcucmYB5HPGY/CxZmfYh
e0xHCmzIoLgU0V28RpIr+TJRtdyWh3D5TyW0wKaELuxvh1okm3AI/SlaTJMHAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU44TMd5PN2bJ6+dRDSQy7xeqGcywwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0NDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqm/TANBgkqhkiG9w0BAQsFAAOCAQEAMV6Q
sPjEIB/Q6+r1meJtmHxTMiWK1KU6WMJSTOKRUDgM3o8Y0Bo+5a4fU4rMYZAGSK4j
kDD2YTO0Gn4uFAj97d0uB+4HBUuSrv5fPt5rai4GiYlDVrYSUo6mZzFlas11MJJp
vVk2REK9tl/rNW+JGrUsSnzHI0VfeTaAL4Vli6QeAA643C0VWEva5KkT+AAFZR6v
CY3l3eUW5QRkDQN7/o8NTfPeVa29MAr7o9Z5NEabTUtPPr2i+Uq0XyquWx3c9NZN
GvnDO7tvLKQE7TYco0ur1Irwu2JsvF4z/NpNA2PzOfnzwtF8QzueTNFRPyJDcMQS
bwIzSk+b+PjlJdyFRA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:30:15 2026 by rpki-client