Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144524.roa
File: AS144524.roa (raw, json)
Hash identifier: J7L60hoxTss5SEw3UumRiQwQtnlzVPQLBzPuWHyV7Nw=
Subject key identifier: EB:B6:B1:48:71:45:27:9D:1C:FB:63:D4:02:58:A1:84:07:9E:10:0C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3FB4D152D30C41F29E345D756875BFD21399276C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144524.roa
Signing time: Tue 26 May 2026 03:16:33 +0000
ROA not before: Tue 26 May 2026 03:11:33 +0000
ROA not after: Tue 25 May 2027 03:16:33 +0000
asID: 144524
IP address blocks: 240a:a752::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:b4:d1:52:d3:0c:41:f2:9e:34:5d:75:68:75:bf:d2:13:99:27:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:11:33 2026 GMT
Not After : May 25 03:16:33 2027 GMT
Subject: CN=EBB6B1487145279D1CFB63D40258A184079E100C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d7:2d:cd:08:77:2d:86:36:b5:1c:1b:f9:60:
24:4a:7d:3b:80:8c:fc:bd:c9:24:bb:4d:4e:cf:1f:
dd:d3:03:07:2e:ac:0a:87:25:f5:24:1f:e6:d1:9a:
8e:5d:93:13:5f:11:f8:07:55:d5:02:9b:54:c5:8a:
52:64:ef:83:4c:a8:b5:78:8f:de:f1:ba:24:39:6a:
0f:cf:e0:c7:45:f7:d3:8c:dc:11:ec:50:a1:9e:68:
39:9c:fe:ad:d6:41:07:48:d7:a2:6e:30:04:c1:92:
a3:75:eb:aa:3a:20:99:97:55:fa:3d:bc:35:20:0e:
12:fb:cf:18:cc:ed:82:c7:90:5e:60:22:34:c5:8a:
c1:5f:3f:4a:ee:ad:0a:83:21:46:9c:68:06:aa:4d:
62:db:4c:07:5b:7d:d3:f8:d8:35:08:06:e0:98:65:
f2:ad:23:28:af:1c:50:30:6b:13:61:6d:3f:21:92:
c3:98:61:3e:5d:32:a3:4c:e6:bc:34:46:f2:4d:90:
b5:bf:23:1b:fc:bb:82:af:a3:37:df:db:78:fb:b4:
11:8c:9b:52:80:23:04:9c:38:13:c3:58:82:8c:08:
56:f7:27:a9:28:21:fd:16:87:85:61:a1:be:9e:50:
3b:6c:79:31:dd:03:33:a9:c1:cb:dc:34:c9:6d:56:
2e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B6:B1:48:71:45:27:9D:1C:FB:63:D4:02:58:A1:84:07:9E:10:0C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144524.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a752::/32
Signature Algorithm: sha256WithRSAEncryption
ba:26:e7:35:c7:36:1e:a6:19:3e:6a:f7:eb:70:1e:e4:d5:60:
d5:26:40:8a:6b:ff:e7:71:b6:97:f6:25:a6:24:47:c2:3f:8c:
03:61:29:8e:1a:08:4a:76:21:f1:f6:96:9d:6b:eb:2e:cf:9f:
32:28:1d:18:af:b4:e8:6c:4c:44:23:e6:27:b8:c6:e8:ee:5c:
f8:a8:97:83:31:af:01:7f:3a:cc:26:e7:0d:30:9e:98:0b:47:
16:93:41:9f:93:08:4f:e6:b9:ed:4d:56:2b:4e:d1:7e:3b:7e:
fc:e4:c1:9d:b5:17:c7:6c:30:c3:6c:70:b2:14:ca:be:04:6c:
d8:9c:03:4e:1c:64:7a:f9:bc:3b:33:2d:21:35:9a:28:e1:8b:
84:fc:cd:fe:aa:f5:81:5f:78:4b:80:41:c3:6a:8a:f7:65:15:
53:19:42:8d:f2:fb:8e:62:d5:27:dc:22:31:12:49:44:d3:e2:
3e:26:af:48:90:62:81:6a:48:ee:29:40:9b:22:9e:3b:f6:d3:
f8:bb:ba:6b:9a:4a:3d:cc:a5:72:fe:6e:e9:43:93:f5:63:35:
99:e6:a5:f2:f8:a5:ff:0e:66:6f:78:9d:26:2b:c4:8c:d6:ff:
ac:82:57:53:fc:97:b8:a7:e0:e4:0c:d9:c6:96:93:a2:b9:37:
b7:b3:a2:ad
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUP7TRUtMMQfKeNF11aHW/0hOZJ2wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMzExMzNaFw0yNzA1MjUwMzE2MzNaMDMxMTAvBgNV
BAMTKEVCQjZCMTQ4NzE0NTI3OUQxQ0ZCNjNENDAyNThBMTg0MDc5RTEwMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj1y3NCHcthja1HBv5YCRKfTuA
jPy9ySS7TU7PH93TAwcurAqHJfUkH+bRmo5dkxNfEfgHVdUCm1TFilJk74NMqLV4
j97xuiQ5ag/P4MdF99OM3BHsUKGeaDmc/q3WQQdI16JuMATBkqN166o6IJmXVfo9
vDUgDhL7zxjM7YLHkF5gIjTFisFfP0rurQqDIUacaAaqTWLbTAdbfdP42DUIBuCY
ZfKtIyivHFAwaxNhbT8hksOYYT5dMqNM5rw0RvJNkLW/Ixv8u4Kvozff23j7tBGM
m1KAIwScOBPDWIKMCFb3J6koIf0Wh4Vhob6eUDtseTHdAzOpwcvcNMltVi6TAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU67axSHFFJ50c+2PUAlihhAeeEAwwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0NTI0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqnUjANBgkqhkiG9w0BAQsFAAOCAQEAuibn
Ncc2HqYZPmr363Ae5NVg1SZAimv/53G2l/YlpiRHwj+MA2EpjhoISnYh8faWnWvr
Ls+fMigdGK+06GxMRCPmJ7jG6O5c+KiXgzGvAX86zCbnDTCemAtHFpNBn5MIT+a5
7U1WK07Rfjt+/OTBnbUXx2www2xwshTKvgRs2JwDThxkevm8OzMtITWaKOGLhPzN
/qr1gV94S4BBw2qK92UVUxlCjfL7jmLVJ9wiMRJJRNPiPiavSJBigWpI7ilAmyKe
O/bT+Lu6a5pKPcylcv5u6UOT9WM1meal8vil/w5mb3idJivEjNb/rIJXU/yXuKfg
5AzZxpaTork3t7OirQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:11 2026 by rpki-client