Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144519.roa
File: AS144519.roa (raw, json)
Hash identifier: BrNQULINE595GMZSXR/afLuNFhjuER1Bl0MX+O2DCOs=
Subject key identifier: 02:9F:F1:16:EB:FD:1B:EA:75:79:C5:41:90:D3:2B:C4:DC:27:22:88
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7DA9EA6B8242594685C8316DCF59D9D5DACF947E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144519.roa
Signing time: Fri 22 May 2026 07:08:51 +0000
ROA not before: Fri 22 May 2026 07:03:51 +0000
ROA not after: Fri 21 May 2027 07:08:51 +0000
asID: 144519
IP address blocks: 240a:a74d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:a9:ea:6b:82:42:59:46:85:c8:31:6d:cf:59:d9:d5:da:cf:94:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:03:51 2026 GMT
Not After : May 21 07:08:51 2027 GMT
Subject: CN=029FF116EBFD1BEA7579C54190D32BC4DC272288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ca:93:05:79:cd:e8:5a:da:87:3d:5f:df:13:
e3:bd:75:5a:85:70:65:3d:7e:29:6c:8b:3b:4b:e8:
fe:85:2e:15:d0:e0:66:52:7d:93:5a:2a:57:62:73:
a1:fc:1a:e3:ea:47:ae:68:ee:7d:e8:9a:0d:75:79:
93:6c:1d:5e:43:10:96:68:07:d0:dc:8b:e5:d6:d2:
16:63:b4:cd:ec:fd:e5:2f:73:6b:42:38:59:7a:66:
57:a1:af:7d:8e:28:c8:d6:a9:ca:ab:8c:6e:8c:63:
75:d3:38:40:08:68:ba:68:62:ca:d4:4f:8c:46:7a:
b8:21:b7:36:80:34:e7:1c:52:cf:60:c1:b0:9b:2a:
17:20:6d:4f:eb:0f:3c:6f:10:b1:8d:b7:c6:c9:41:
b3:2a:dc:e3:bf:f8:57:83:02:a4:0e:ae:45:fe:d9:
79:0e:f1:cc:a1:24:25:9d:5c:49:d6:35:bf:5b:4d:
72:34:cb:c9:a9:2a:0d:a6:88:6b:98:17:a4:d7:1f:
4c:42:d2:a2:b1:79:52:cc:bd:8e:cc:5e:8f:32:d7:
0e:2d:90:57:af:c6:7f:4e:bb:68:2d:2d:c2:c4:17:
bd:27:81:5c:c5:43:26:3a:d6:5c:38:8d:c0:c8:ed:
54:99:3a:b2:40:c0:93:0a:6a:59:67:32:d3:56:fd:
99:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:9F:F1:16:EB:FD:1B:EA:75:79:C5:41:90:D3:2B:C4:DC:27:22:88
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144519.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a74d::/32
Signature Algorithm: sha256WithRSAEncryption
aa:51:5d:77:ee:36:91:c3:ae:01:b7:08:e9:01:00:96:4c:85:
86:47:dd:5a:1b:17:71:6b:c4:45:2c:12:83:ec:c8:5e:c4:51:
aa:42:94:2d:d4:5c:21:04:26:e1:02:a2:17:d8:62:30:fe:58:
fb:e1:9d:7d:cf:21:f4:a4:e9:9f:45:b6:6c:80:5f:07:03:68:
31:38:08:d6:9a:11:89:fa:15:11:40:c5:91:de:3e:52:e8:1c:
d1:e4:94:5c:f0:81:1c:d7:55:5d:dc:0c:ed:8d:3d:dd:c0:ad:
c0:29:fc:28:a1:0d:ce:37:be:61:e3:43:a0:12:25:79:99:75:
cd:c8:56:ee:89:93:02:e7:02:db:ff:97:3c:ba:2e:c3:86:07:
2a:90:ed:03:43:7d:b2:bf:d5:2f:43:70:c7:85:e7:b5:39:e6:
6b:ee:29:b8:71:6f:cb:3e:79:c2:b5:14:6b:12:92:ed:12:2d:
45:57:08:00:36:5e:ab:42:d3:75:91:37:87:1c:90:6e:cc:7f:
57:36:9d:6f:be:8d:3b:86:4f:53:6a:83:cf:3c:ff:74:c8:57:
76:ab:a5:60:20:d3:1d:7c:52:32:d2:88:68:19:14:66:47:02:
6c:59:e4:fd:38:ad:e3:c9:54:9f:23:ad:c4:9d:4b:ed:c7:4d:
2c:1c:54:ff
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUfanqa4JCWUaFyDFtz1nZ1drPlH4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzAzNTFaFw0yNzA1MjEwNzA4NTFaMDMxMTAvBgNV
BAMTKDAyOUZGMTE2RUJGRDFCRUE3NTc5QzU0MTkwRDMyQkM0REMyNzIyODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpypMFec3oWtqHPV/fE+O9dVqF
cGU9filsiztL6P6FLhXQ4GZSfZNaKldic6H8GuPqR65o7n3omg11eZNsHV5DEJZo
B9Dci+XW0hZjtM3s/eUvc2tCOFl6Zlehr32OKMjWqcqrjG6MY3XTOEAIaLpoYsrU
T4xGerghtzaANOccUs9gwbCbKhcgbU/rDzxvELGNt8bJQbMq3OO/+FeDAqQOrkX+
2XkO8cyhJCWdXEnWNb9bTXI0y8mpKg2miGuYF6TXH0xC0qKxeVLMvY7MXo8y1w4t
kFevxn9Ou2gtLcLEF70ngVzFQyY61lw4jcDI7VSZOrJAwJMKallnMtNW/Zk9AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUAp/xFuv9G+p1ecVBkNMrxNwnIogwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0NTE5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqnTTANBgkqhkiG9w0BAQsFAAOCAQEAqlFd
d+42kcOuAbcI6QEAlkyFhkfdWhsXcWvERSwSg+zIXsRRqkKULdRcIQQm4QKiF9hi
MP5Y++Gdfc8h9KTpn0W2bIBfBwNoMTgI1poRifoVEUDFkd4+Uugc0eSUXPCBHNdV
XdwM7Y093cCtwCn8KKENzje+YeNDoBIleZl1zchW7omTAucC2/+XPLouw4YHKpDt
A0N9sr/VL0Nwx4XntTnma+4puHFvyz55wrUUaxKS7RItRVcIADZeq0LTdZE3hxyQ
bsx/Vzadb76NO4ZPU2qDzzz/dMhXdqulYCDTHXxSMtKIaBkUZkcCbFnk/Tit48lU
nyOtxJ1L7cdNLBxU/w==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:50:01 2026 by rpki-client