Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144441.roa
File: AS144441.roa (raw, json)
Hash identifier: LaAj7oGNjbsKhEXatemUZaf1wjGT3PpYLSjXy5akvlE=
Subject key identifier: A1:6F:BD:14:84:FE:D7:C4:D5:AC:42:11:BF:5B:91:2E:06:D0:37:74
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2A1009F8C1FCE0CF55BAD36FDC549F0DB5E2A410
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144441.roa
Signing time: Fri 22 May 2026 04:08:01 +0000
ROA not before: Fri 22 May 2026 04:03:01 +0000
ROA not after: Fri 21 May 2027 04:08:01 +0000
asID: 144441
IP address blocks: 240a:a6ff::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:10:09:f8:c1:fc:e0:cf:55:ba:d3:6f:dc:54:9f:0d:b5:e2:a4:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:01 2026 GMT
Not After : May 21 04:08:01 2027 GMT
Subject: CN=A16FBD1484FED7C4D5AC4211BF5B912E06D03774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:8e:d5:44:73:3a:e6:0e:9c:a5:49:73:2e:a9:
ca:e5:4a:ff:98:9d:86:d5:4a:45:e7:70:98:bc:3e:
43:36:71:f0:63:44:fc:9d:83:25:a3:d3:19:21:e2:
28:ab:61:29:9c:99:97:d2:44:75:33:4a:0e:b0:48:
61:64:f8:a3:c7:f8:3b:b2:a3:93:55:a1:18:6c:4e:
ae:94:4c:ee:ca:99:50:89:19:8e:aa:dc:bd:94:a5:
f1:41:de:f5:93:f8:05:1d:e2:b7:3d:e4:c5:b3:19:
1f:a0:6a:06:4d:49:a2:78:36:9b:1f:ee:36:89:e3:
6f:4f:e8:4b:c9:b4:33:4d:78:d1:ab:23:ad:a8:f4:
84:16:0a:73:d9:73:6b:7d:38:72:c1:98:dc:10:7d:
36:51:cd:ca:a1:41:af:de:e9:b3:21:21:55:66:37:
9c:2f:b2:52:38:b5:36:99:84:77:1f:b7:47:37:a0:
6c:09:05:f3:69:35:e6:68:70:34:3d:7e:50:f4:17:
11:29:9b:20:a1:6e:51:84:08:38:3c:8b:1d:c6:87:
e3:83:d9:07:fe:16:1f:1f:6a:86:3d:bd:9d:d6:66:
42:01:fe:9e:2d:30:b5:77:76:a1:1f:e7:a8:1c:c2:
4d:67:e3:96:14:43:fb:76:e6:e6:e6:5d:f5:4b:bd:
1e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:6F:BD:14:84:FE:D7:C4:D5:AC:42:11:BF:5B:91:2E:06:D0:37:74
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144441.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a6ff::/32
Signature Algorithm: sha256WithRSAEncryption
48:d1:b3:3e:a7:d7:ba:40:07:ca:ab:a6:61:38:6f:0a:e6:e9:
7f:35:cf:9d:43:f5:da:d2:52:91:56:ec:13:a3:e4:58:a1:a5:
0c:a5:29:3a:5f:11:5d:bb:b1:2a:32:0a:f4:14:61:42:14:c4:
20:d5:60:0f:4c:71:c8:af:cb:4c:9e:20:c4:cc:7f:6b:e3:b0:
5f:3e:b6:92:10:e3:2a:a8:61:05:da:a7:54:d3:52:67:e5:74:
28:80:2a:5f:8f:bb:f3:ef:1e:46:cf:a2:31:e7:87:08:71:62:
f5:70:a8:47:0b:a7:2a:1b:01:0a:13:34:44:41:75:dd:d2:b7:
bb:25:1c:73:e8:ac:95:6a:f1:1e:7f:7b:d2:34:75:9d:be:cb:
58:37:f1:35:db:88:a1:cd:da:e0:9e:46:5e:9e:17:49:00:34:
ef:80:90:14:96:5d:2c:ee:05:57:ba:c2:4c:15:ee:42:65:92:
c3:43:9b:52:5b:f5:6b:ec:f9:93:5a:5b:af:86:02:73:ab:2f:
5c:09:d0:56:a1:28:ef:33:bc:c0:0e:13:a2:80:1e:fe:fe:bd:
08:e4:b7:95:3d:49:2a:76:94:d1:57:b3:a1:c1:5f:f3:df:08:
d8:a6:74:a4:57:6f:17:d3:2b:c5:a4:65:b8:8f:fc:89:3b:57:
16:fc:34:0a
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUKhAJ+MH84M9VutNv3FSfDbXipBAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNDAzMDFaFw0yNzA1MjEwNDA4MDFaMDMxMTAvBgNV
BAMTKEExNkZCRDE0ODRGRUQ3QzRENUFDNDIxMUJGNUI5MTJFMDZEMDM3NzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLjtVEczrmDpylSXMuqcrlSv+Y
nYbVSkXncJi8PkM2cfBjRPydgyWj0xkh4iirYSmcmZfSRHUzSg6wSGFk+KPH+Duy
o5NVoRhsTq6UTO7KmVCJGY6q3L2UpfFB3vWT+AUd4rc95MWzGR+gagZNSaJ4Npsf
7jaJ429P6EvJtDNNeNGrI62o9IQWCnPZc2t9OHLBmNwQfTZRzcqhQa/e6bMhIVVm
N5wvslI4tTaZhHcft0c3oGwJBfNpNeZocDQ9flD0FxEpmyChblGECDg8ix3Gh+OD
2Qf+Fh8faoY9vZ3WZkIB/p4tMLV3dqEf56gcwk1n45YUQ/t25ubmXfVLvR6FAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUoW+9FIT+18TVrEIRv1uRLgbQN3QwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0NDQxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqm/zANBgkqhkiG9w0BAQsFAAOCAQEASNGz
PqfXukAHyqumYThvCubpfzXPnUP12tJSkVbsE6PkWKGlDKUpOl8RXbuxKjIK9BRh
QhTEINVgD0xxyK/LTJ4gxMx/a+OwXz62khDjKqhhBdqnVNNSZ+V0KIAqX4+78+8e
Rs+iMeeHCHFi9XCoRwunKhsBChM0REF13dK3uyUcc+islWrxHn970jR1nb7LWDfx
NduIoc3a4J5GXp4XSQA074CQFJZdLO4FV7rCTBXuQmWSw0ObUlv1a+z5k1pbr4YC
c6svXAnQVqEo7zO8wA4TooAe/v69COS3lT1JKnaU0VezocFf898I2KZ0pFdvF9Mr
xaRluI/8iTtXFvw0Cg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:38 2026 by rpki-client