Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144696.roa
File: AS144696.roa (raw, json)
Hash identifier: OmgvKJVN49I13rWii3Mvp8pJyjnYPhxQpNdu1XAOJAo=
Subject key identifier: 82:D4:12:37:96:CB:30:D4:6D:3D:7C:F9:A7:5A:7D:6F:D1:EE:F0:C1
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7FD5C8EFB8D29EC470F3CDCC6D533AC118FD63BA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144696.roa
Signing time: Mon 25 May 2026 02:22:15 +0000
ROA not before: Mon 25 May 2026 02:17:15 +0000
ROA not after: Mon 24 May 2027 02:22:15 +0000
asID: 144696
IP address blocks: 240a:a7fe::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:d5:c8:ef:b8:d2:9e:c4:70:f3:cd:cc:6d:53:3a:c1:18:fd:63:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:15 2026 GMT
Not After : May 24 02:22:15 2027 GMT
Subject: CN=82D4123796CB30D46D3D7CF9A75A7D6FD1EEF0C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:81:08:cf:16:1b:a6:83:25:b1:7d:19:66:a2:
f8:6e:5c:d0:2c:65:42:c3:51:41:18:1b:71:0f:66:
2e:fc:41:02:1a:de:45:56:c8:27:e7:89:6a:49:38:
9f:f6:f1:a6:32:75:2e:71:d5:28:c1:b4:ff:85:64:
21:e8:d0:4f:39:2e:4e:b9:6e:df:0f:67:61:2e:e9:
c4:89:b9:ee:d4:24:96:57:cd:6d:64:54:31:29:3a:
c1:f6:6a:26:a8:30:cf:66:69:39:8c:31:c8:a4:c8:
95:68:62:62:cc:30:1b:18:0d:55:94:88:c9:83:07:
bb:eb:ce:fe:84:b7:dd:a6:32:82:0f:56:c6:20:ac:
de:fb:94:e0:e1:2c:c5:63:ac:bd:f8:18:92:25:69:
db:aa:b5:4d:eb:cc:92:3b:ac:1c:c2:70:e8:f8:1d:
4d:63:40:b8:1d:3d:9a:3d:2b:12:a2:cb:4d:70:1f:
6a:06:da:bc:48:68:06:7f:ce:3a:37:6d:fe:ae:b7:
63:df:b4:e7:97:01:61:23:9b:0a:a3:e2:49:a9:f9:
5e:cc:05:29:ff:e7:5c:fc:e8:e8:5d:8a:da:42:46:
99:6d:67:ee:25:9c:11:32:c2:59:7f:7e:d8:3c:2a:
df:f2:b5:37:2b:c1:0f:33:1e:f8:15:73:b7:42:84:
9d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D4:12:37:96:CB:30:D4:6D:3D:7C:F9:A7:5A:7D:6F:D1:EE:F0:C1
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144696.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a7fe::/32
Signature Algorithm: sha256WithRSAEncryption
b3:7b:cd:6f:df:c7:bc:3a:59:71:2c:c7:9c:1a:a0:90:bb:14:
c8:62:bf:6d:49:34:c8:ad:dc:d3:49:0b:94:f9:79:1c:16:66:
f7:55:96:6a:1d:15:26:bf:80:2e:01:a9:28:b1:6b:f2:b6:58:
be:3e:e1:7c:e4:dd:56:a0:96:53:7b:a3:2c:ef:5e:34:dc:e9:
5a:69:27:66:45:3b:6d:ff:30:15:68:d1:f5:f4:e0:cd:b7:a3:
61:a0:53:82:ba:1a:f9:49:7b:35:0c:1c:e1:77:04:ec:11:25:
8e:b5:3a:20:f7:8c:c2:ab:b7:50:8b:23:3c:af:ac:c8:a5:81:
b9:87:45:92:0c:68:f1:a9:f5:3b:05:56:3a:85:49:c6:29:b5:
a1:27:bc:b5:3d:1a:f0:77:1f:89:64:58:92:8f:c0:59:42:fa:
5a:03:43:5f:cb:b5:c0:2e:50:50:0a:e5:6a:5c:4a:f3:66:a5:
4c:c1:e7:bc:9f:4a:9c:13:95:bf:67:6e:e9:ae:f9:a5:74:aa:
a5:50:0a:63:e2:af:c8:51:6c:17:41:26:61:13:d0:16:77:37:
f6:b5:fc:98:69:db:fe:51:07:06:d7:2e:fb:7b:1d:38:58:6a:
93:34:99:8e:6c:88:a1:45:d2:e3:a2:34:53:bb:14:bb:18:e8:
a2:26:d7:28
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUf9XI77jSnsRw883MbVM6wRj9Y7owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMjE3MTVaFw0yNzA1MjQwMjIyMTVaMDMxMTAvBgNV
BAMTKDgyRDQxMjM3OTZDQjMwRDQ2RDNEN0NGOUE3NUE3RDZGRDFFRUYwQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtgQjPFhumgyWxfRlmovhuXNAs
ZULDUUEYG3EPZi78QQIa3kVWyCfniWpJOJ/28aYydS5x1SjBtP+FZCHo0E85Lk65
bt8PZ2Eu6cSJue7UJJZXzW1kVDEpOsH2aiaoMM9maTmMMcikyJVoYmLMMBsYDVWU
iMmDB7vrzv6Et92mMoIPVsYgrN77lODhLMVjrL34GJIladuqtU3rzJI7rBzCcOj4
HU1jQLgdPZo9KxKiy01wH2oG2rxIaAZ/zjo3bf6ut2PftOeXAWEjmwqj4kmp+V7M
BSn/51z86OhditpCRpltZ+4lnBEywll/ftg8Kt/ytTcrwQ8zHvgVc7dChJ1jAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUgtQSN5bLMNRtPXz5p1p9b9Hu8MEwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0Njk2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqn/jANBgkqhkiG9w0BAQsFAAOCAQEAs3vN
b9/HvDpZcSzHnBqgkLsUyGK/bUk0yK3c00kLlPl5HBZm91WWah0VJr+ALgGpKLFr
8rZYvj7hfOTdVqCWU3ujLO9eNNzpWmknZkU7bf8wFWjR9fTgzbejYaBTgroa+Ul7
NQwc4XcE7BEljrU6IPeMwqu3UIsjPK+syKWBuYdFkgxo8an1OwVWOoVJxim1oSe8
tT0a8HcfiWRYko/AWUL6WgNDX8u1wC5QUArlalxK82alTMHnvJ9KnBOVv2du6a75
pXSqpVAKY+KvyFFsF0EmYRPQFnc39rX8mGnb/lEHBtcu+3sdOFhqkzSZjmyIoUXS
46I0U7sUuxjooibXKA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:00 2026 by rpki-client