Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144648.roa
File: AS144648.roa (raw, json)
Hash identifier: vSm5IC28/aJVnshdoVN3ba2KxFoQ5y2ZUzJmLD2xo7E=
Subject key identifier: 34:7E:8C:E2:BE:5A:78:3D:C6:E7:5E:19:51:55:EF:4E:E7:52:74:D3
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2F71E99DD7598883468F46EA3E912F05C3907B4F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144648.roa
Signing time: Tue 26 May 2026 06:31:02 +0000
ROA not before: Tue 26 May 2026 06:26:02 +0000
ROA not after: Tue 25 May 2027 06:31:02 +0000
asID: 144648
IP address blocks: 240a:a7ce::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:71:e9:9d:d7:59:88:83:46:8f:46:ea:3e:91:2f:05:c3:90:7b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:26:02 2026 GMT
Not After : May 25 06:31:02 2027 GMT
Subject: CN=347E8CE2BE5A783DC6E75E195155EF4EE75274D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:78:b3:95:5d:bd:ba:75:e5:b9:58:8c:30:98:
e3:ff:ca:b4:8f:b1:4a:91:30:2d:b2:a3:a1:1b:ff:
1f:6d:8f:a2:68:ed:27:36:2a:b2:48:68:04:e8:87:
7d:08:a4:34:95:77:e1:21:9d:fa:bf:8f:9a:10:97:
07:f6:0a:d5:56:8d:7b:0a:76:63:1e:be:dd:14:60:
fa:db:f6:b2:da:b9:ba:ce:12:d6:1e:e7:37:44:7b:
1f:ce:df:e7:0c:dd:09:79:38:9b:65:fc:35:ca:04:
b5:d8:45:46:fa:b2:98:26:9e:62:28:44:bf:e1:7c:
3c:78:66:b9:14:f3:dd:34:88:dc:24:17:b3:57:46:
34:30:9c:ea:04:d9:8b:4b:98:b6:9a:46:fc:8a:a0:
00:26:ff:9c:47:8a:3f:20:21:e7:56:69:3a:c6:ec:
85:56:43:1f:d6:69:7f:7d:b0:b5:54:2d:db:c1:05:
e1:b6:4c:c3:ef:4c:c8:03:cb:ff:b9:fb:10:af:57:
6e:0d:ff:86:17:3e:19:fa:74:be:39:13:3e:d6:39:
32:a2:77:00:d6:5d:64:cf:60:d1:98:59:e5:ec:2f:
c1:3b:77:6e:9c:23:98:53:c5:bf:a9:1b:82:b6:6c:
a8:20:98:42:37:a9:91:05:f5:87:d1:a4:88:12:a3:
54:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:7E:8C:E2:BE:5A:78:3D:C6:E7:5E:19:51:55:EF:4E:E7:52:74:D3
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144648.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a7ce::/32
Signature Algorithm: sha256WithRSAEncryption
a0:3a:ef:5a:2b:01:ce:e0:df:4d:ce:a8:04:bf:cb:54:09:5a:
81:b7:49:62:a4:9c:d1:85:22:93:60:c9:b5:fb:c5:80:93:e9:
b0:77:9d:a8:21:37:8c:0a:71:0d:ab:aa:13:7a:a4:ff:b6:6e:
52:36:b0:c2:01:48:77:ac:f8:c3:1b:93:68:ec:0e:fd:bb:e7:
7e:ed:d2:49:d5:c4:f5:bc:fc:19:b4:a0:bc:c7:21:bb:37:fa:
bf:aa:51:4e:44:f6:fc:86:0f:0a:67:9a:b3:f7:f2:2a:ba:ef:
bd:69:d7:80:70:10:8e:0b:1f:7a:48:7f:71:04:88:dc:3d:e4:
04:54:c8:f1:c4:40:65:f2:44:94:71:5c:83:63:e7:ec:7b:48:
b7:df:c6:ca:21:75:d8:90:4c:2d:b9:63:f3:70:db:4e:66:96:
ee:86:72:58:7a:25:4b:d8:2f:7e:92:66:81:92:5b:0f:f1:3b:
51:2f:df:41:09:2f:ff:ea:93:25:91:44:b2:8a:0a:dd:13:cd:
ca:d6:f9:40:bb:62:92:bd:6c:57:ec:10:fe:6c:a7:3e:38:fd:
94:9f:a9:a2:4a:97:fa:5b:d9:f0:01:57:b6:35:a6:2a:10:76:
82:ca:e0:40:de:d2:00:37:84:21:15:f2:b7:03:dc:4e:bb:e3:
63:db:9a:84
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUL3HpnddZiINGj0bqPpEvBcOQe08wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwNjI2MDJaFw0yNzA1MjUwNjMxMDJaMDMxMTAvBgNV
BAMTKDM0N0U4Q0UyQkU1QTc4M0RDNkU3NUUxOTUxNTVFRjRFRTc1Mjc0RDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDheLOVXb26deW5WIwwmOP/yrSP
sUqRMC2yo6Eb/x9tj6Jo7Sc2KrJIaAToh30IpDSVd+Ehnfq/j5oQlwf2CtVWjXsK
dmMevt0UYPrb9rLaubrOEtYe5zdEex/O3+cM3Ql5OJtl/DXKBLXYRUb6spgmnmIo
RL/hfDx4ZrkU8900iNwkF7NXRjQwnOoE2YtLmLaaRvyKoAAm/5xHij8gIedWaTrG
7IVWQx/WaX99sLVULdvBBeG2TMPvTMgDy/+5+xCvV24N/4YXPhn6dL45Ez7WOTKi
dwDWXWTPYNGYWeXsL8E7d26cI5hTxb+pG4K2bKggmEI3qZEF9YfRpIgSo1RzAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUNH6M4r5aeD3G514ZUVXvTudSdNMwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0NjQ4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqnzjANBgkqhkiG9w0BAQsFAAOCAQEAoDrv
WisBzuDfTc6oBL/LVAlagbdJYqSc0YUik2DJtfvFgJPpsHedqCE3jApxDauqE3qk
/7ZuUjawwgFId6z4wxuTaOwO/bvnfu3SSdXE9bz8GbSgvMchuzf6v6pRTkT2/IYP
Cmeas/fyKrrvvWnXgHAQjgsfekh/cQSI3D3kBFTI8cRAZfJElHFcg2Pn7HtIt9/G
yiF12JBMLblj83DbTmaW7oZyWHolS9gvfpJmgZJbD/E7US/fQQkv/+qTJZFEsooK
3RPNytb5QLtikr1sV+wQ/mynPjj9lJ+pokqX+lvZ8AFXtjWmKhB2gsrgQN7SADeE
IRXytwPcTrvjY9uahA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:17 2026 by rpki-client