Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144590.roa
File: AS144590.roa (raw, json)
Hash identifier: ppzw+SB2dYVT+gvu9fhsRr1riFJxKRoBdwJ3OOsetpo=
Subject key identifier: 5D:07:76:A3:BA:95:D6:EF:28:83:D6:4A:4A:24:0A:7B:83:AC:0E:B5
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0661E782A85CF704311D3634CA7D8933E7841BF6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144590.roa
Signing time: Mon 25 May 2026 03:19:14 +0000
ROA not before: Mon 25 May 2026 03:14:14 +0000
ROA not after: Mon 24 May 2027 03:19:14 +0000
asID: 144590
IP address blocks: 240a:a794::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:61:e7:82:a8:5c:f7:04:31:1d:36:34:ca:7d:89:33:e7:84:1b:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:14 2026 GMT
Not After : May 24 03:19:14 2027 GMT
Subject: CN=5D0776A3BA95D6EF2883D64A4A240A7B83AC0EB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:74:b1:d4:76:da:95:c4:4f:0c:bc:23:d8:63:
b0:b4:4c:de:b8:cc:79:c7:a5:83:57:14:ff:0e:07:
af:30:b9:a3:26:05:d5:84:c8:dd:dd:10:c1:af:a3:
05:97:d1:22:ca:c5:f8:ce:c2:ac:a5:79:e2:46:a1:
36:e7:df:5a:cd:5e:48:7f:bb:54:23:8a:87:6a:80:
c2:eb:0d:29:2f:8c:7c:5d:cd:18:c7:dc:5b:7c:85:
42:48:f8:04:5b:dc:07:34:62:af:dd:42:f2:b7:ac:
b3:11:06:04:6c:40:fb:40:0d:99:6f:50:ae:c0:19:
70:da:20:10:4d:94:e8:34:35:3d:c7:11:5f:d1:29:
4b:8a:47:63:b6:38:71:bb:0a:d1:c2:fa:d5:2b:26:
fd:7b:58:22:a1:99:d2:d7:1c:07:78:e7:38:84:96:
3b:98:13:87:6d:56:c3:51:e2:1e:0e:4d:96:81:cf:
db:65:80:b6:0f:0e:20:e6:de:f7:ae:fb:89:1d:2b:
57:de:da:7d:7e:f1:ef:d9:4a:78:7c:fd:67:bc:b6:
52:ce:9a:20:25:97:09:a6:1c:df:d2:e4:6a:cb:32:
99:f8:63:a8:bd:b7:4f:06:2c:86:9d:b8:a2:32:1b:
e2:15:da:2a:c2:58:a1:d4:31:60:c6:21:89:96:e9:
6b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:07:76:A3:BA:95:D6:EF:28:83:D6:4A:4A:24:0A:7B:83:AC:0E:B5
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144590.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a794::/32
Signature Algorithm: sha256WithRSAEncryption
ba:c0:4e:e8:d6:e0:07:7b:79:f3:fa:98:83:27:19:00:6f:ab:
3e:8a:7c:8a:fe:72:81:02:7c:dd:15:6a:96:51:a0:96:10:09:
b4:f6:fb:8f:51:e4:74:4b:e6:f9:21:3b:ab:06:68:5e:f1:2d:
87:62:4c:14:79:4c:3d:07:b3:72:c4:6f:f1:27:07:db:a5:ef:
8d:4a:3e:f1:34:e2:5c:ea:82:bb:0d:cd:65:70:f7:d4:ac:7a:
84:15:0e:e3:55:ca:6c:e3:06:d4:f6:70:ba:76:ce:02:85:bd:
44:b1:77:84:11:24:a2:ed:13:35:56:3d:1d:1d:fc:fe:9d:97:
11:fb:d2:f7:e5:e6:43:75:f2:85:43:b4:bf:4e:6b:f5:98:8e:
cc:66:b5:b3:15:0e:62:f8:cd:8b:86:56:29:14:d9:64:84:92:
e0:96:6f:0d:d7:a1:c4:45:e8:97:68:b9:cf:fd:f7:ef:3e:30:
ca:bf:ca:58:c7:ea:1e:c3:56:62:71:e9:c7:83:12:d3:4f:4d:
27:09:df:dc:1e:7c:08:d5:41:55:65:d0:ee:36:25:85:76:29:
c6:93:37:a1:7a:fd:4d:bf:dc:73:6b:bd:8d:94:a0:7d:5e:b4:
bd:4c:6e:cd:36:4b:3c:df:4a:48:1b:8d:f7:27:c1:85:ab:a5:
05:38:26:a8
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUBmHngqhc9wQxHTY0yn2JM+eEG/YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMzE0MTRaFw0yNzA1MjQwMzE5MTRaMDMxMTAvBgNV
BAMTKDVEMDc3NkEzQkE5NUQ2RUYyODgzRDY0QTRBMjQwQTdCODNBQzBFQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzdLHUdtqVxE8MvCPYY7C0TN64
zHnHpYNXFP8OB68wuaMmBdWEyN3dEMGvowWX0SLKxfjOwqyleeJGoTbn31rNXkh/
u1QjiodqgMLrDSkvjHxdzRjH3Ft8hUJI+ARb3Ac0Yq/dQvK3rLMRBgRsQPtADZlv
UK7AGXDaIBBNlOg0NT3HEV/RKUuKR2O2OHG7CtHC+tUrJv17WCKhmdLXHAd45ziE
ljuYE4dtVsNR4h4OTZaBz9tlgLYPDiDm3veu+4kdK1fe2n1+8e/ZSnh8/We8tlLO
miAllwmmHN/S5GrLMpn4Y6i9t08GLIaduKIyG+IV2irCWKHUMWDGIYmW6WtrAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUXQd2o7qV1u8og9ZKSiQKe4OsDrUwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0NTkwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqnlDANBgkqhkiG9w0BAQsFAAOCAQEAusBO
6NbgB3t58/qYgycZAG+rPop8iv5ygQJ83RVqllGglhAJtPb7j1HkdEvm+SE7qwZo
XvEth2JMFHlMPQezcsRv8ScH26XvjUo+8TTiXOqCuw3NZXD31Kx6hBUO41XKbOMG
1PZwunbOAoW9RLF3hBEkou0TNVY9HR38/p2XEfvS9+XmQ3XyhUO0v05r9ZiOzGa1
sxUOYvjNi4ZWKRTZZISS4JZvDdehxEXol2i5z/337z4wyr/KWMfqHsNWYnHpx4MS
009NJwnf3B58CNVBVWXQ7jYlhXYpxpM3oXr9Tb/cc2u9jZSgfV60vUxuzTZLPN9K
SBuN9yfBhaulBTgmqA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:07 2026 by rpki-client