Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144673.roa
File: AS144673.roa (raw, json)
Hash identifier: mpvHCWqfGnehTKIl8Clm/SG3gGkVjMUZL3AQu+E3e8E=
Subject key identifier: 42:15:CF:42:3E:2D:2E:21:9F:22:CB:51:CD:FD:CF:78:E1:09:17:AD
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4906C82888C9C008B1505099EB7674975BB23ABE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144673.roa
Signing time: Fri 22 May 2026 07:32:35 +0000
ROA not before: Fri 22 May 2026 07:27:35 +0000
ROA not after: Fri 21 May 2027 07:32:35 +0000
asID: 144673
IP address blocks: 240a:a7e7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:06:c8:28:88:c9:c0:08:b1:50:50:99:eb:76:74:97:5b:b2:3a:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:35 2026 GMT
Not After : May 21 07:32:35 2027 GMT
Subject: CN=4215CF423E2D2E219F22CB51CDFDCF78E10917AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e8:4d:a8:de:1c:9d:93:e5:5a:dc:de:46:61:
5d:ed:8e:48:7f:fd:61:37:c4:fc:f2:b5:06:88:97:
4f:a9:a8:d5:d0:bd:be:5c:c4:3b:08:b8:bd:84:f8:
fe:17:46:fb:bb:43:f6:de:f7:84:6d:08:08:04:e4:
56:da:eb:08:74:e8:a1:c6:83:fa:14:79:34:fa:d9:
11:12:5c:d0:4d:23:16:bd:51:90:83:f0:3e:34:21:
c3:df:1c:0b:6e:12:61:a3:7b:d5:87:b6:8c:0a:54:
53:d1:32:c1:0e:e6:ce:9f:f2:f3:43:e0:19:5d:78:
87:4e:30:50:90:f4:c7:02:60:16:6b:72:11:03:df:
82:5e:cf:0a:78:04:a4:2b:f5:fc:93:e6:e2:a4:5b:
cc:15:9e:86:3c:35:53:b6:c4:e9:b5:05:0c:fb:b1:
27:bc:38:10:4c:03:9b:61:47:fa:6f:84:43:94:e6:
44:f0:dd:41:15:fb:1f:e3:a6:3d:b3:ec:fc:e7:f0:
1b:57:e0:80:e6:5a:df:6a:5b:f0:d8:7c:8e:9a:02:
17:f8:98:c0:5a:b5:c8:66:e3:f8:68:77:dc:a6:fd:
d3:07:64:40:29:fb:6d:84:fd:b4:df:14:70:64:55:
c9:62:29:bb:ae:e7:fe:7e:f0:62:86:3b:61:d1:36:
e7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:15:CF:42:3E:2D:2E:21:9F:22:CB:51:CD:FD:CF:78:E1:09:17:AD
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144673.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a7e7::/32
Signature Algorithm: sha256WithRSAEncryption
88:92:ab:6f:2b:8d:1e:65:c2:2b:95:3d:57:e9:f6:53:d9:6c:
9e:8e:de:7e:ca:ac:d1:a4:f5:40:b4:db:90:5a:d9:9b:cc:f2:
1a:d0:e7:d1:dd:d7:28:ef:95:d0:5a:25:31:fd:3e:a2:f8:35:
84:92:b6:15:14:04:19:13:f5:51:46:0c:10:33:d2:8a:ca:10:
52:05:9e:03:e4:ba:1a:39:ec:09:c3:75:bd:3c:0b:cb:18:f2:
aa:05:d9:12:c1:f4:67:53:74:15:1e:5e:83:ce:42:04:2a:a0:
65:ba:0f:63:5f:76:3e:89:b1:4b:3a:e7:26:78:2e:35:48:be:
19:fd:74:b4:82:a0:c3:c9:2c:53:73:df:49:68:8c:9c:25:15:
d1:7b:6a:94:4c:86:db:b2:8a:be:d5:cc:31:ae:c9:b3:a8:78:
43:6c:dc:a3:4c:c4:c8:ac:5c:d5:dd:cb:00:9b:85:1c:e5:77:
ad:5c:f7:81:73:8b:38:2f:4c:a9:a9:0d:94:6f:08:e4:24:4b:
4f:d2:c2:92:d1:ab:22:6f:c3:aa:1f:c4:74:3d:18:9c:58:52:
4b:72:94:ca:df:f3:b0:da:da:fd:69:55:d7:42:71:bb:0e:bc:
73:39:ec:d4:5f:20:d3:31:32:8a:4f:6d:f8:5e:99:a8:7a:eb:
28:40:65:43
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUSQbIKIjJwAixUFCZ63Z0l1uyOr4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzI3MzVaFw0yNzA1MjEwNzMyMzVaMDMxMTAvBgNV
BAMTKDQyMTVDRjQyM0UyRDJFMjE5RjIyQ0I1MUNERkRDRjc4RTEwOTE3QUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx6E2o3hydk+Va3N5GYV3tjkh/
/WE3xPzytQaIl0+pqNXQvb5cxDsIuL2E+P4XRvu7Q/be94RtCAgE5Fba6wh06KHG
g/oUeTT62RESXNBNIxa9UZCD8D40IcPfHAtuEmGje9WHtowKVFPRMsEO5s6f8vND
4BldeIdOMFCQ9McCYBZrchED34Jezwp4BKQr9fyT5uKkW8wVnoY8NVO2xOm1BQz7
sSe8OBBMA5thR/pvhEOU5kTw3UEV+x/jpj2z7Pzn8BtX4IDmWt9qW/DYfI6aAhf4
mMBatchm4/hod9ym/dMHZEAp+22E/bTfFHBkVcliKbuu5/5+8GKGO2HRNueBAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUQhXPQj4tLiGfIstRzf3PeOEJF60wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0NjczLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqn5zANBgkqhkiG9w0BAQsFAAOCAQEAiJKr
byuNHmXCK5U9V+n2U9lsno7efsqs0aT1QLTbkFrZm8zyGtDn0d3XKO+V0FolMf0+
ovg1hJK2FRQEGRP1UUYMEDPSisoQUgWeA+S6GjnsCcN1vTwLyxjyqgXZEsH0Z1N0
FR5eg85CBCqgZboPY192PomxSzrnJnguNUi+Gf10tIKgw8ksU3PfSWiMnCUV0Xtq
lEyG27KKvtXMMa7Js6h4Q2zco0zEyKxc1d3LAJuFHOV3rVz3gXOLOC9MqakNlG8I
5CRLT9LCktGrIm/Dqh/EdD0YnFhSS3KUyt/zsNra/WlV10Jxuw68czns1F8g0zEy
ik9t+F6ZqHrrKEBlQw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:52 2026 by rpki-client