Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144643.roa
File: AS144643.roa (raw, json)
Hash identifier: dceAOfZqtgraNwLx4/q3fLSKlYzU3zRdQoqF/KK/rfk=
Subject key identifier: DA:87:F3:BC:EC:A5:95:78:58:EE:78:47:68:C4:A7:A3:C5:86:26:8B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3A9B54CD898013B72001762D2B748B26E15DCA3A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144643.roa
Signing time: Fri 22 May 2026 06:45:56 +0000
ROA not before: Fri 22 May 2026 06:40:56 +0000
ROA not after: Fri 21 May 2027 06:45:56 +0000
asID: 144643
IP address blocks: 240a:a7c9::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:9b:54:cd:89:80:13:b7:20:01:76:2d:2b:74:8b:26:e1:5d:ca:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:40:56 2026 GMT
Not After : May 21 06:45:56 2027 GMT
Subject: CN=DA87F3BCECA5957858EE784768C4A7A3C586268B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8b:d6:da:04:bf:46:f5:b6:13:e9:2f:c6:78:
26:25:dc:35:ff:fd:05:ef:2c:a9:60:1b:6d:2d:8c:
6d:fa:f9:48:11:2e:03:f5:80:ee:b0:a3:b8:55:e0:
5a:3c:a6:d7:fb:ac:27:64:20:17:05:57:20:8f:97:
fb:bf:d2:17:5c:17:a9:0d:ad:5d:9c:2e:90:0a:19:
12:60:04:49:8d:2a:cf:32:41:59:c4:70:dd:12:0a:
20:00:c0:66:0a:c4:c2:2b:10:2a:e8:e9:df:45:a7:
ec:50:00:a3:00:a8:77:ca:33:7d:a9:9c:8f:c3:ec:
90:c0:a8:98:0d:19:f0:33:e3:12:bd:2d:de:fb:af:
80:c5:b2:11:d3:b2:f6:de:b8:de:b0:1a:79:ba:a6:
e3:79:39:de:be:41:f6:ed:2e:0c:a7:f3:54:e6:a1:
19:68:df:5c:0d:35:08:95:78:e8:24:35:7e:95:eb:
de:85:20:30:94:8e:1d:46:2f:db:fb:06:93:36:8f:
7f:9a:6b:65:5c:71:4d:a5:06:c4:66:9d:e5:5d:b1:
eb:d3:4e:04:ff:2f:6a:59:ff:69:48:3d:a1:11:d2:
50:51:61:a2:91:3f:ae:2a:ed:33:00:c4:ec:e6:99:
05:7d:a0:37:e9:bb:49:d1:bb:55:04:7a:f4:d0:02:
fa:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:87:F3:BC:EC:A5:95:78:58:EE:78:47:68:C4:A7:A3:C5:86:26:8B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144643.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a7c9::/32
Signature Algorithm: sha256WithRSAEncryption
46:cc:69:33:05:94:62:60:c4:1d:7e:24:37:41:a4:64:3f:d2:
1d:58:c2:a5:61:fa:c3:80:5d:8d:f7:54:1a:ab:34:d0:ae:30:
3b:a0:ac:a6:ff:2a:f5:59:5e:c5:6c:62:c7:e5:66:78:b8:bd:
a9:26:7d:5e:3f:33:c4:9d:f9:d7:3c:2f:93:6f:e5:72:e6:c0:
8d:4f:57:75:40:98:79:cf:01:b2:ab:8d:34:0b:4d:82:3d:7b:
d6:09:a8:c1:f1:0c:b0:15:00:c0:65:93:6b:d5:82:9d:06:50:
de:d2:39:d4:66:67:0e:03:6e:ef:e5:82:51:d3:a4:3a:34:e7:
47:a8:fc:ac:fb:21:5c:d1:ab:48:f5:db:0f:ab:d3:f0:1b:ae:
76:45:fc:b8:c1:44:37:8e:02:0c:72:6b:0b:b2:97:9d:1e:f4:
5c:c7:2b:d9:c2:46:9e:4e:db:48:0c:58:3a:a9:58:8e:a8:22:
fa:0b:b5:86:1f:9f:88:9a:df:00:e1:63:fe:89:fb:a2:6f:84:
60:28:a0:a2:12:f3:69:96:48:95:a0:21:ea:ab:0a:ea:e0:12:
95:89:5c:38:11:20:2e:39:04:7d:a1:51:ed:65:4f:0c:1b:80:
c3:20:40:54:f5:16:0a:ba:60:71:85:26:ce:d0:ed:30:1e:7c:
6e:e0:86:82
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUOptUzYmAE7cgAXYtK3SLJuFdyjowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjQwNTZaFw0yNzA1MjEwNjQ1NTZaMDMxMTAvBgNV
BAMTKERBODdGM0JDRUNBNTk1Nzg1OEVFNzg0NzY4QzRBN0EzQzU4NjI2OEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3i9baBL9G9bYT6S/GeCYl3DX/
/QXvLKlgG20tjG36+UgRLgP1gO6wo7hV4Fo8ptf7rCdkIBcFVyCPl/u/0hdcF6kN
rV2cLpAKGRJgBEmNKs8yQVnEcN0SCiAAwGYKxMIrECro6d9Fp+xQAKMAqHfKM32p
nI/D7JDAqJgNGfAz4xK9Ld77r4DFshHTsvbeuN6wGnm6puN5Od6+QfbtLgyn81Tm
oRlo31wNNQiVeOgkNX6V696FIDCUjh1GL9v7BpM2j3+aa2VccU2lBsRmneVdsevT
TgT/L2pZ/2lIPaER0lBRYaKRP64q7TMAxOzmmQV9oDfpu0nRu1UEevTQAvoXAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU2ofzvOyllXhY7nhHaMSno8WGJoswHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0NjQzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqnyTANBgkqhkiG9w0BAQsFAAOCAQEARsxp
MwWUYmDEHX4kN0GkZD/SHVjCpWH6w4BdjfdUGqs00K4wO6Cspv8q9VlexWxix+Vm
eLi9qSZ9Xj8zxJ351zwvk2/lcubAjU9XdUCYec8BsquNNAtNgj171gmowfEMsBUA
wGWTa9WCnQZQ3tI51GZnDgNu7+WCUdOkOjTnR6j8rPshXNGrSPXbD6vT8BuudkX8
uMFEN44CDHJrC7KXnR70XMcr2cJGnk7bSAxYOqlYjqgi+gu1hh+fiJrfAOFj/on7
om+EYCigohLzaZZIlaAh6qsK6uASlYlcOBEgLjkEfaFR7WVPDBuAwyBAVPUWCrpg
cYUmztDtMB58buCGgg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:51 2026 by rpki-client