Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144457.roa
File: AS144457.roa (raw, json)
Hash identifier: xdSiR4H63VnBxwY1fC2E9uK1qDE5MLat3LyfDCxgToc=
Subject key identifier: ED:6B:0D:2B:B7:55:FA:0D:FA:91:D5:B1:5C:A8:5C:BC:8B:88:04:6D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3AA398E87D60DC216071F236C94F4648E3D925B6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144457.roa
Signing time: Fri 22 May 2026 06:28:04 +0000
ROA not before: Fri 22 May 2026 06:23:04 +0000
ROA not after: Fri 21 May 2027 06:28:04 +0000
asID: 144457
IP address blocks: 240a:a70f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:a3:98:e8:7d:60:dc:21:60:71:f2:36:c9:4f:46:48:e3:d9:25:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:23:04 2026 GMT
Not After : May 21 06:28:04 2027 GMT
Subject: CN=ED6B0D2BB755FA0DFA91D5B15CA85CBC8B88046D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:17:62:27:df:a0:3e:83:f9:e8:6b:54:38:51:
a6:a4:d9:71:e8:db:01:91:8d:bb:2b:20:10:7b:4b:
2d:10:97:a9:c4:a4:c7:fe:4a:83:e6:48:74:74:bf:
33:93:d4:ca:91:b5:24:e1:16:e3:ba:c2:7a:dc:68:
af:34:36:96:a6:92:fd:f5:9f:c1:c4:6e:57:2c:6d:
39:fb:d9:b6:93:ff:e8:f3:cf:2b:8d:fc:09:17:38:
cc:05:19:6a:73:71:90:89:be:ee:eb:78:64:1b:63:
37:eb:b9:c7:c2:f4:63:64:13:5a:43:44:e2:8c:0d:
25:26:62:01:2e:ef:56:02:e1:3d:6a:52:c4:63:01:
83:7a:4d:48:1a:7e:16:82:c8:21:3a:66:74:73:7a:
32:0f:aa:a8:ba:5c:61:e9:1f:71:95:85:0a:cf:2f:
3c:49:11:b5:a1:19:ff:bc:ce:79:fa:ed:86:4c:73:
73:d6:4e:1c:a0:f2:38:7b:38:27:93:31:f6:26:44:
e8:fd:a3:8e:5b:66:df:d7:70:d2:83:ef:e0:e3:2b:
f9:1e:05:8c:07:45:94:fa:b3:20:bf:ed:72:1e:85:
3f:eb:69:b5:ab:33:59:9a:65:98:90:c3:d9:2e:a8:
c5:7f:0a:38:57:34:c0:ab:5c:3f:a7:08:8e:22:da:
30:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:6B:0D:2B:B7:55:FA:0D:FA:91:D5:B1:5C:A8:5C:BC:8B:88:04:6D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144457.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a70f::/32
Signature Algorithm: sha256WithRSAEncryption
1f:a1:54:d1:34:9d:c8:59:4a:a2:00:37:40:bb:53:48:9a:b4:
a1:e0:5a:c4:a4:8a:61:c6:19:6c:cf:86:15:e2:d0:aa:57:30:
05:32:47:13:e5:06:1a:55:56:75:92:70:0d:79:ed:61:a7:04:
7a:f5:5f:30:43:34:9a:21:3e:46:3b:ca:9a:b7:5d:c2:a3:28:
d3:dd:8f:6d:07:b9:9b:fb:7a:39:b0:66:12:a6:fd:df:08:a2:
f2:a5:ea:e2:84:ab:e2:f8:50:5f:99:60:3c:6d:46:d4:a6:6b:
ef:25:0d:2e:39:54:f4:62:87:49:aa:cb:b4:b0:94:36:74:76:
23:7b:a7:fb:2f:7b:97:b1:e1:15:cc:13:13:80:39:42:70:3c:
23:26:7a:4b:69:b6:79:36:a0:2a:47:c5:03:a3:fb:3c:73:e1:
a4:7f:9c:5b:ed:d6:ad:34:69:8c:e3:e1:c2:54:e9:7c:61:f1:
0a:ac:99:2b:76:ce:d6:a6:97:6f:70:2b:ce:bc:43:9e:30:19:
e4:36:56:a3:d1:2e:d3:6c:4b:d6:55:a2:89:3a:b1:30:67:03:
5b:ed:90:c8:10:67:8b:a0:67:ba:a7:bb:74:d1:ef:0e:2f:30:
1a:25:f3:26:0e:e0:14:e2:66:11:f0:1e:c2:08:2e:9f:0d:c2:
c8:40:b3:ec
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUOqOY6H1g3CFgcfI2yU9GSOPZJbYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjIzMDRaFw0yNzA1MjEwNjI4MDRaMDMxMTAvBgNV
BAMTKEVENkIwRDJCQjc1NUZBMERGQTkxRDVCMTVDQTg1Q0JDOEI4ODA0NkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjF2In36A+g/noa1Q4Uaak2XHo
2wGRjbsrIBB7Sy0Ql6nEpMf+SoPmSHR0vzOT1MqRtSThFuO6wnrcaK80Npamkv31
n8HEblcsbTn72baT/+jzzyuN/AkXOMwFGWpzcZCJvu7reGQbYzfrucfC9GNkE1pD
ROKMDSUmYgEu71YC4T1qUsRjAYN6TUgafhaCyCE6ZnRzejIPqqi6XGHpH3GVhQrP
LzxJEbWhGf+8znn67YZMc3PWThyg8jh7OCeTMfYmROj9o45bZt/XcNKD7+DjK/ke
BYwHRZT6syC/7XIehT/rabWrM1maZZiQw9kuqMV/CjhXNMCrXD+nCI4i2jBNAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU7WsNK7dV+g36kdWxXKhcvIuIBG0wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0NDU3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqnDzANBgkqhkiG9w0BAQsFAAOCAQEAH6FU
0TSdyFlKogA3QLtTSJq0oeBaxKSKYcYZbM+GFeLQqlcwBTJHE+UGGlVWdZJwDXnt
YacEevVfMEM0miE+RjvKmrddwqMo092PbQe5m/t6ObBmEqb93wii8qXq4oSr4vhQ
X5lgPG1G1KZr7yUNLjlU9GKHSarLtLCUNnR2I3un+y97l7HhFcwTE4A5QnA8IyZ6
S2m2eTagKkfFA6P7PHPhpH+cW+3WrTRpjOPhwlTpfGHxCqyZK3bO1qaXb3ArzrxD
njAZ5DZWo9Eu02xL1lWiiTqxMGcDW+2QyBBni6Bnuqe7dNHvDi8wGiXzJg7gFOJm
EfAewggunw3CyECz7A==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:03 2026 by rpki-client