Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144448.roa
File: AS144448.roa (raw, json)
Hash identifier: TJ0W0FGPVTcv0ok3tCqPS3pNUnL0CRrC9+Z2cViOh+Y=
Subject key identifier: A5:26:16:6A:F7:F8:49:A9:19:36:6B:B5:5D:23:B2:AD:A2:63:E1:34
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6A7FF672EEB5EF4B1FC1FF65F73B7E07E60BC9B0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144448.roa
Signing time: Tue 26 May 2026 06:30:31 +0000
ROA not before: Tue 26 May 2026 06:25:31 +0000
ROA not after: Tue 25 May 2027 06:30:31 +0000
asID: 144448
IP address blocks: 240a:a706::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:7f:f6:72:ee:b5:ef:4b:1f:c1:ff:65:f7:3b:7e:07:e6:0b:c9:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:25:31 2026 GMT
Not After : May 25 06:30:31 2027 GMT
Subject: CN=A526166AF7F849A919366BB55D23B2ADA263E134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:69:5d:a7:ba:04:f3:f3:1f:21:4e:0e:8a:87:
01:51:69:93:dc:b3:ce:9c:46:ef:44:47:3f:5d:cd:
ed:2f:dd:5d:4e:64:9f:d7:9c:d6:3f:88:e3:33:d6:
44:c0:25:c2:0d:7b:92:47:46:47:23:88:df:34:37:
c5:fc:79:0c:fc:10:06:97:4d:1d:52:77:58:72:02:
37:2f:6c:f2:17:47:39:9f:e4:21:6d:98:8a:74:49:
f2:54:ed:e5:ce:87:48:bd:82:a7:db:89:fb:b5:3c:
f5:e6:92:8a:8f:6a:aa:30:51:27:49:62:99:1e:9e:
5f:89:97:13:87:f9:99:49:23:00:3e:85:6c:3b:14:
1d:58:90:87:5c:df:da:00:d3:56:61:be:72:51:46:
66:43:55:e9:12:c2:42:d0:6a:6a:ff:7b:6e:d8:3a:
49:34:08:04:a0:54:97:20:1e:8d:28:ca:42:bc:b7:
bf:2c:3c:51:fe:2d:db:84:87:5c:0e:dd:da:63:2a:
1d:90:bf:cc:9e:ab:7d:e3:7c:11:2b:83:9f:1d:2a:
6a:8d:b7:7c:f8:37:d2:36:56:42:78:d8:1a:1e:30:
e5:70:47:f3:bc:a2:5e:72:69:4c:d1:10:cf:fe:55:
ad:27:2f:b7:cf:8e:e8:11:cd:d9:86:ae:26:1f:41:
c0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:26:16:6A:F7:F8:49:A9:19:36:6B:B5:5D:23:B2:AD:A2:63:E1:34
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144448.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a706::/32
Signature Algorithm: sha256WithRSAEncryption
56:a8:e5:18:2d:49:9a:68:7d:6e:07:13:3d:3b:7b:bb:df:5e:
63:c7:9b:c8:50:ce:b4:f7:ff:77:15:c3:8f:e7:89:f5:e2:d8:
e6:b2:d1:d1:8e:65:2f:cc:09:40:68:d9:d5:db:70:71:e0:cd:
d5:4b:5a:85:29:6e:9a:96:cf:8e:6a:3d:b7:1c:ff:b1:fe:1b:
90:e0:7d:67:f4:96:1c:04:d6:90:59:90:fb:31:86:9d:0f:d7:
2a:79:78:03:81:6d:28:5c:74:77:c5:c0:46:e8:d0:cd:e6:f3:
75:16:f1:d2:ca:50:fd:9e:cd:de:3a:4c:cb:f9:7e:02:0b:76:
75:8a:6d:51:f1:21:a9:8f:b0:5c:0d:30:2c:c8:19:56:fa:9a:
5b:e6:67:20:33:8d:5c:c8:ab:88:ce:15:ca:35:72:7f:0e:9b:
ad:f3:c4:56:6b:00:f3:d4:fc:63:ac:a2:19:dd:8f:6c:37:d9:
7a:d8:52:05:31:54:1d:ba:37:c4:a4:97:33:75:9d:ae:80:6c:
b4:ab:b0:bc:e9:db:11:c4:16:95:31:9c:50:6a:44:69:20:4e:
ff:d6:33:ad:aa:f7:d1:87:34:64:7a:49:4a:e7:4b:47:c5:06:
37:f6:32:61:b0:49:58:74:b6:36:b0:48:24:4b:be:dc:b2:a8:
4f:0b:34:9d
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUan/2cu6170sfwf9l9zt+B+YLybAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwNjI1MzFaFw0yNzA1MjUwNjMwMzFaMDMxMTAvBgNV
BAMTKEE1MjYxNjZBRjdGODQ5QTkxOTM2NkJCNTVEMjNCMkFEQTI2M0UxMzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6aV2nugTz8x8hTg6KhwFRaZPc
s86cRu9ERz9dze0v3V1OZJ/XnNY/iOMz1kTAJcINe5JHRkcjiN80N8X8eQz8EAaX
TR1Sd1hyAjcvbPIXRzmf5CFtmIp0SfJU7eXOh0i9gqfbifu1PPXmkoqPaqowUSdJ
Ypkenl+JlxOH+ZlJIwA+hWw7FB1YkIdc39oA01ZhvnJRRmZDVekSwkLQamr/e27Y
Okk0CASgVJcgHo0oykK8t78sPFH+LduEh1wO3dpjKh2Qv8yeq33jfBErg58dKmqN
t3z4N9I2VkJ42BoeMOVwR/O8ol5yaUzREM/+Va0nL7fPjugRzdmGriYfQcBlAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUpSYWavf4SakZNmu1XSOyraJj4TQwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0NDQ4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqnBjANBgkqhkiG9w0BAQsFAAOCAQEAVqjl
GC1Jmmh9bgcTPTt7u99eY8ebyFDOtPf/dxXDj+eJ9eLY5rLR0Y5lL8wJQGjZ1dtw
ceDN1UtahSlumpbPjmo9txz/sf4bkOB9Z/SWHATWkFmQ+zGGnQ/XKnl4A4FtKFx0
d8XARujQzebzdRbx0spQ/Z7N3jpMy/l+Agt2dYptUfEhqY+wXA0wLMgZVvqaW+Zn
IDONXMiriM4VyjVyfw6brfPEVmsA89T8Y6yiGd2PbDfZethSBTFUHbo3xKSXM3Wd
roBstKuwvOnbEcQWlTGcUGpEaSBO/9Yzrar30Yc0ZHpJSudLR8UGN/YyYbBJWHS2
NrBIJEu+3LKoTws0nQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:26 2026 by rpki-client