Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144564.roa
File: AS144564.roa (raw, json)
Hash identifier: SgaCnl0fvo4/bt0psY5smhzY4qQmyKqxXRaW2nS/J8I=
Subject key identifier: 0E:AC:C6:E0:D9:1C:43:BC:2A:52:59:16:85:A2:CB:D9:97:6F:5F:38
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2F8ED01D183DBC14225676351209EF3862B2BB83
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144564.roa
Signing time: Tue 26 May 2026 06:30:40 +0000
ROA not before: Tue 26 May 2026 06:25:40 +0000
ROA not after: Tue 25 May 2027 06:30:40 +0000
asID: 144564
IP address blocks: 240a:a77a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:8e:d0:1d:18:3d:bc:14:22:56:76:35:12:09:ef:38:62:b2:bb:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:25:40 2026 GMT
Not After : May 25 06:30:40 2027 GMT
Subject: CN=0EACC6E0D91C43BC2A52591685A2CBD9976F5F38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:18:4c:4e:3b:18:6d:14:e5:ae:2d:88:91:33:
a2:02:11:36:47:90:a1:55:b9:8f:92:08:81:36:d3:
a2:65:35:69:01:95:98:6b:96:5c:54:3d:35:c2:6b:
27:0b:a0:a6:f0:5b:30:55:ab:b6:f9:d5:3c:0e:b6:
9d:c4:3a:04:6e:b0:f1:61:b3:89:38:77:1b:7b:e9:
a6:5e:8a:1d:5c:8e:61:06:6b:a3:5b:4c:df:c9:0e:
d4:8a:3e:8a:bd:b6:4f:ac:ca:37:1e:58:eb:00:21:
ef:21:ac:e4:4b:47:a7:bc:4a:ed:be:8f:24:8b:e9:
a5:e5:0f:7c:5b:83:49:a1:f9:59:34:91:75:fa:7a:
52:1c:be:b2:51:52:82:5f:71:71:4f:06:76:f6:d0:
ce:8e:50:7a:6f:3a:9d:7c:7a:5d:05:82:e4:3b:77:
53:79:c7:e8:ca:71:71:0a:70:db:12:ee:5d:2e:a9:
74:c4:e5:ab:1c:e1:84:bc:6a:f6:81:0e:29:ac:3a:
97:0b:86:1a:75:a3:70:fa:1b:c6:66:d4:6f:38:db:
59:93:9d:d5:86:2b:27:8d:19:a1:6b:98:bf:b4:f6:
84:97:4b:b5:bb:5e:8c:bc:23:d3:63:6c:96:0a:70:
63:90:49:5a:65:2e:92:3f:de:f9:98:d8:4a:d8:72:
eb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:AC:C6:E0:D9:1C:43:BC:2A:52:59:16:85:A2:CB:D9:97:6F:5F:38
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144564.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a77a::/32
Signature Algorithm: sha256WithRSAEncryption
84:76:b4:35:58:42:da:f2:a9:0d:83:63:ea:8f:c5:a5:e2:99:
2d:41:1a:5b:0d:f9:d2:b2:b9:f9:58:fa:03:64:a3:69:45:1e:
38:ea:e6:52:2d:4c:4d:5d:b2:8e:a3:b8:19:51:9d:06:32:f0:
07:b5:64:f0:61:7e:fd:4f:14:bc:f2:e7:ec:6d:22:13:3c:72:
c6:c6:a9:96:9e:b0:e0:91:5e:8b:16:d4:50:dd:81:22:cf:00:
d6:60:0d:46:7d:9e:5f:e1:b6:11:b8:91:61:32:a5:83:d3:98:
07:21:b2:43:74:8f:cc:c1:42:1b:96:04:1c:c8:ca:ec:f9:f3:
41:0a:d3:8f:b2:bb:86:ee:f7:ff:7a:d5:d1:c4:36:ea:d8:b6:
98:aa:4a:91:c8:81:fc:1b:0d:26:7b:45:32:6e:fa:a0:5f:34:
cb:8a:37:7f:b7:f3:94:32:ca:af:02:db:de:1d:bf:72:64:c2:
ed:18:50:5b:1c:d6:e4:ba:3d:71:6b:35:6a:18:f1:41:de:91:
74:b7:17:14:08:1c:f8:05:41:02:0a:c5:8f:e5:84:9e:45:6e:
ea:33:b3:8d:2b:0b:5b:0a:e6:7a:ff:be:24:e5:c5:ca:0b:57:
2d:d9:e2:c2:b2:f9:72:bd:28:31:f6:46:22:ab:04:4c:ab:c3:
b2:bf:53:b9
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUL47QHRg9vBQiVnY1EgnvOGKyu4MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwNjI1NDBaFw0yNzA1MjUwNjMwNDBaMDMxMTAvBgNV
BAMTKDBFQUNDNkUwRDkxQzQzQkMyQTUyNTkxNjg1QTJDQkQ5OTc2RjVGMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlGExOOxhtFOWuLYiRM6ICETZH
kKFVuY+SCIE206JlNWkBlZhrllxUPTXCaycLoKbwWzBVq7b51TwOtp3EOgRusPFh
s4k4dxt76aZeih1cjmEGa6NbTN/JDtSKPoq9tk+syjceWOsAIe8hrORLR6e8Su2+
jySL6aXlD3xbg0mh+Vk0kXX6elIcvrJRUoJfcXFPBnb20M6OUHpvOp18el0FguQ7
d1N5x+jKcXEKcNsS7l0uqXTE5asc4YS8avaBDimsOpcLhhp1o3D6G8Zm1G8421mT
ndWGKyeNGaFrmL+09oSXS7W7Xoy8I9NjbJYKcGOQSVplLpI/3vmY2ErYcut/AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUDqzG4NkcQ7wqUlkWhaLL2ZdvXzgwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0NTY0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqnejANBgkqhkiG9w0BAQsFAAOCAQEAhHa0
NVhC2vKpDYNj6o/FpeKZLUEaWw350rK5+Vj6A2SjaUUeOOrmUi1MTV2yjqO4GVGd
BjLwB7Vk8GF+/U8UvPLn7G0iEzxyxsaplp6w4JFeixbUUN2BIs8A1mANRn2eX+G2
EbiRYTKlg9OYByGyQ3SPzMFCG5YEHMjK7PnzQQrTj7K7hu73/3rV0cQ26ti2mKpK
kciB/BsNJntFMm76oF80y4o3f7fzlDLKrwLb3h2/cmTC7RhQWxzW5Lo9cWs1ahjx
Qd6RdLcXFAgc+AVBAgrFj+WEnkVu6jOzjSsLWwrmev++JOXFygtXLdniwrL5cr0o
MfZGIqsETKvDsr9TuQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:58 2026 by rpki-client