Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144579.roa
File: AS144579.roa (raw, json)
Hash identifier: BIxD8vn4bHdifoGxgztuMeJrXN3sbpRjoQvMMWZNGsU=
Subject key identifier: 18:FF:B3:21:D2:3E:B9:47:21:BC:16:E3:C3:71:71:E8:8D:5D:7C:B5
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 608078B2E7BEFB45D4E472DB9CD3026F1DA951CB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144579.roa
Signing time: Fri 22 May 2026 01:50:26 +0000
ROA not before: Fri 22 May 2026 01:45:26 +0000
ROA not after: Fri 21 May 2027 01:50:26 +0000
asID: 144579
IP address blocks: 240a:a789::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:80:78:b2:e7:be:fb:45:d4:e4:72:db:9c:d3:02:6f:1d:a9:51:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:26 2026 GMT
Not After : May 21 01:50:26 2027 GMT
Subject: CN=18FFB321D23EB94721BC16E3C37171E88D5D7CB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c5:03:5e:09:a0:0b:00:34:df:08:97:d8:50:
5b:f4:43:8a:0a:44:4b:f8:9d:4b:53:73:f5:47:f8:
f1:b5:21:8d:11:f3:1e:bd:48:41:36:26:79:d4:a0:
42:6c:3c:73:2b:b0:14:45:fc:27:12:d7:78:74:8d:
02:1a:77:2c:b6:5d:dc:09:63:a1:2d:17:6d:63:71:
b7:33:0e:a1:8d:86:6e:d7:20:31:ae:23:91:97:ef:
e0:40:c2:ab:a9:d8:5a:58:5b:b4:7a:f6:63:67:c3:
2b:8e:1b:3d:f8:81:2b:59:3a:84:eb:7f:0f:b3:ec:
c0:b5:2f:e6:5b:e4:96:d4:00:bb:3e:24:8c:be:ef:
ba:72:c3:57:1f:fa:64:e9:7f:7e:e1:91:06:42:b1:
b4:13:21:16:20:b1:73:5a:8b:2d:40:b9:b0:77:3b:
08:c5:bf:2f:2d:04:90:01:d0:4a:9a:b4:45:0b:e7:
ff:3b:3b:dc:46:03:1e:ae:40:f7:3d:1f:fa:30:ee:
27:5a:7c:f5:7d:8e:8f:ea:b7:17:ce:fe:ef:af:16:
52:83:4d:45:e0:e1:db:5f:9b:6d:5c:bc:5c:2d:17:
c2:80:c9:57:69:60:45:1c:5c:40:6a:b3:de:cc:bc:
64:23:2c:be:a5:cd:e5:3a:53:c6:24:3c:90:29:1a:
e5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:FF:B3:21:D2:3E:B9:47:21:BC:16:E3:C3:71:71:E8:8D:5D:7C:B5
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144579.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a789::/32
Signature Algorithm: sha256WithRSAEncryption
55:bb:8a:e8:b9:8a:76:f8:b7:71:79:71:80:10:2b:9d:a7:40:
bd:06:e1:00:fe:ed:43:83:29:48:ec:15:e7:62:d5:4e:6a:d0:
fe:0a:b3:6e:fd:bd:14:91:f4:78:33:41:61:4c:80:87:20:91:
d5:f9:b3:75:c0:70:85:ac:ed:27:bb:60:44:dc:f5:43:22:45:
00:e1:bc:57:08:13:1f:aa:51:b5:eb:e3:2a:f4:08:72:dc:5a:
e4:b2:c1:b3:6e:55:8d:cb:d7:7a:4b:05:70:60:84:34:7f:b7:
7a:97:6e:f9:83:06:91:69:d5:6b:94:8a:0e:19:bf:44:1f:f8:
8a:33:ec:41:0e:e4:f8:fc:3a:b7:23:a3:1b:00:b4:d6:85:90:
b4:27:24:31:3c:f7:14:73:30:bf:38:85:0a:36:21:17:bc:59:
2b:58:fd:61:ad:bf:37:47:4d:10:d0:2f:8e:ba:b0:74:5c:98:
f9:d0:7b:39:ab:11:5f:fc:cf:39:95:f6:e7:9c:3b:9d:57:ba:
a0:28:3f:94:df:2a:86:c6:56:e6:c8:c3:45:f2:06:55:dd:57:
6a:13:b4:e1:ed:81:68:cc:00:1d:5b:6e:e2:63:13:3c:9a:15:
43:99:a0:55:11:3b:f3:80:e5:a7:ef:7b:bb:72:38:46:16:4a:
69:fd:2b:5d
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUYIB4sue++0XU5HLbnNMCbx2pUcswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwMTQ1MjZaFw0yNzA1MjEwMTUwMjZaMDMxMTAvBgNV
BAMTKDE4RkZCMzIxRDIzRUI5NDcyMUJDMTZFM0MzNzE3MUU4OEQ1RDdDQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlxQNeCaALADTfCJfYUFv0Q4oK
REv4nUtTc/VH+PG1IY0R8x69SEE2JnnUoEJsPHMrsBRF/CcS13h0jQIadyy2XdwJ
Y6EtF21jcbczDqGNhm7XIDGuI5GX7+BAwqup2FpYW7R69mNnwyuOGz34gStZOoTr
fw+z7MC1L+Zb5JbUALs+JIy+77pyw1cf+mTpf37hkQZCsbQTIRYgsXNaiy1AubB3
OwjFvy8tBJAB0EqatEUL5/87O9xGAx6uQPc9H/ow7idafPV9jo/qtxfO/u+vFlKD
TUXg4dtfm21cvFwtF8KAyVdpYEUcXEBqs97MvGQjLL6lzeU6U8YkPJApGuXrAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUGP+zIdI+uUchvBbjw3Fx6I1dfLUwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0NTc5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqniTANBgkqhkiG9w0BAQsFAAOCAQEAVbuK
6LmKdvi3cXlxgBArnadAvQbhAP7tQ4MpSOwV52LVTmrQ/gqzbv29FJH0eDNBYUyA
hyCR1fmzdcBwhaztJ7tgRNz1QyJFAOG8VwgTH6pRtevjKvQIctxa5LLBs25VjcvX
eksFcGCENH+3epdu+YMGkWnVa5SKDhm/RB/4ijPsQQ7k+Pw6tyOjGwC01oWQtCck
MTz3FHMwvziFCjYhF7xZK1j9Ya2/N0dNENAvjrqwdFyY+dB7OasRX/zPOZX255w7
nVe6oCg/lN8qhsZW5sjDRfIGVd1XahO04e2BaMwAHVtu4mMTPJoVQ5mgVRE784Dl
p+97u3I4RhZKaf0rXQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:11 2026 by rpki-client