Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144698.roa
File: AS144698.roa (raw, json)
Hash identifier: ZOGUqupSIbDsuXjmaJebPkkqNUtrF9HshDRM1RCmOoY=
Subject key identifier: 9F:50:34:91:08:37:0B:95:AD:3A:86:ED:EE:A0:A3:1C:87:24:2B:63
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 42B822762BC0E67962E30671590F6F535DE383D0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144698.roa
Signing time: Mon 25 May 2026 03:19:18 +0000
ROA not before: Mon 25 May 2026 03:14:18 +0000
ROA not after: Mon 24 May 2027 03:19:18 +0000
asID: 144698
IP address blocks: 240a:a800::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:b8:22:76:2b:c0:e6:79:62:e3:06:71:59:0f:6f:53:5d:e3:83:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:18 2026 GMT
Not After : May 24 03:19:18 2027 GMT
Subject: CN=9F50349108370B95AD3A86EDEEA0A31C87242B63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:43:a1:9c:f9:cd:88:8b:2f:4d:83:6f:c8:3b:
e4:1c:d9:5c:a2:47:3a:a9:a6:1b:40:b5:a0:c4:ab:
85:3d:d7:18:61:26:42:9a:10:d4:ed:b4:ac:f3:64:
b8:4e:5c:5c:1d:9d:f3:ec:6b:0d:2f:a8:99:61:a4:
15:20:7e:3e:2d:b9:72:d1:b1:3f:60:c7:08:d9:6b:
39:a3:9a:22:19:2a:4e:6f:fe:17:39:04:a1:2f:0f:
1e:ff:fa:ed:ca:13:85:eb:05:35:05:75:be:78:b3:
40:6b:46:f6:c8:78:5d:74:c4:95:b1:02:78:e7:32:
4c:80:2e:8d:10:86:9e:7b:ce:df:fa:59:a4:40:45:
a1:66:79:ce:e8:61:2e:cd:1a:58:4c:b3:a6:36:aa:
39:a5:5c:d7:7b:cf:0a:4e:69:54:b4:b0:46:8d:fb:
46:6b:f7:d6:16:b2:c0:e2:f3:d5:c9:d7:94:35:4e:
2f:7f:82:af:28:10:aa:e8:dd:85:fd:cf:01:47:c7:
1f:f7:96:68:cf:ce:cf:57:32:4d:53:23:81:7d:d1:
7b:eb:7c:e4:91:41:e8:07:98:b6:b4:26:bc:ca:bb:
05:ad:dc:60:a3:87:f8:a8:fa:97:b3:7e:86:9c:91:
37:28:4f:5e:0b:57:1d:02:a8:ce:c9:af:0a:75:2d:
c2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:50:34:91:08:37:0B:95:AD:3A:86:ED:EE:A0:A3:1C:87:24:2B:63
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144698.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a800::/32
Signature Algorithm: sha256WithRSAEncryption
a9:fe:57:49:2b:15:db:b2:a8:92:1b:75:71:8d:e1:b1:aa:13:
e8:bf:67:bb:d6:1c:62:b5:c3:1d:97:a5:a2:76:af:2b:75:b3:
30:0f:b5:87:d9:7a:db:a2:6e:b6:a3:9d:87:b1:82:84:00:af:
c1:a7:86:49:41:a4:e0:51:bc:d1:6f:19:67:28:7b:41:e4:d2:
03:22:d0:a5:23:14:0e:23:33:f8:41:0f:de:88:8c:57:aa:2d:
b5:29:40:ec:82:e5:01:dc:66:d7:6f:da:b7:54:f3:1f:28:a6:
20:d6:33:13:d3:aa:5d:3c:78:49:89:ef:b5:db:87:93:a7:84:
ff:de:0c:6a:a3:cd:d6:fc:bb:e5:31:86:db:f7:b3:13:fa:1d:
49:93:4b:73:5f:8c:3c:d1:bc:39:23:96:46:54:4f:d3:20:cb:
a5:19:06:7d:65:09:9a:35:c7:79:c8:b9:37:fd:49:36:b6:30:
2f:89:27:d5:b2:02:e5:34:09:92:43:52:8a:a7:c6:fd:d0:e6:
e6:4a:74:46:f0:6e:99:9f:45:e4:d6:03:3d:da:5f:54:22:ab:
76:f7:77:8e:c3:df:c3:61:a1:d1:01:03:83:e2:40:74:e0:08:
b0:42:cd:85:dc:80:45:76:93:52:f3:8f:ec:db:20:c2:71:fe:
65:6c:b4:13
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUQrgidivA5nli4wZxWQ9vU13jg9AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMzE0MThaFw0yNzA1MjQwMzE5MThaMDMxMTAvBgNV
BAMTKDlGNTAzNDkxMDgzNzBCOTVBRDNBODZFREVFQTBBMzFDODcyNDJCNjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmQ6Gc+c2Iiy9Ng2/IO+Qc2Vyi
RzqpphtAtaDEq4U91xhhJkKaENTttKzzZLhOXFwdnfPsaw0vqJlhpBUgfj4tuXLR
sT9gxwjZazmjmiIZKk5v/hc5BKEvDx7/+u3KE4XrBTUFdb54s0BrRvbIeF10xJWx
AnjnMkyALo0Qhp57zt/6WaRARaFmec7oYS7NGlhMs6Y2qjmlXNd7zwpOaVS0sEaN
+0Zr99YWssDi89XJ15Q1Ti9/gq8oEKro3YX9zwFHxx/3lmjPzs9XMk1TI4F90Xvr
fOSRQegHmLa0JrzKuwWt3GCjh/io+pezfoackTcoT14LVx0CqM7Jrwp1LcJlAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUn1A0kQg3C5WtOobt7qCjHIckK2MwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0Njk4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqoADANBgkqhkiG9w0BAQsFAAOCAQEAqf5X
SSsV27Kokht1cY3hsaoT6L9nu9YcYrXDHZelonavK3WzMA+1h9l626JutqOdh7GC
hACvwaeGSUGk4FG80W8ZZyh7QeTSAyLQpSMUDiMz+EEP3oiMV6ottSlA7ILlAdxm
12/at1TzHyimINYzE9OqXTx4SYnvtduHk6eE/94MaqPN1vy75TGG2/ezE/odSZNL
c1+MPNG8OSOWRlRP0yDLpRkGfWUJmjXHeci5N/1JNrYwL4kn1bIC5TQJkkNSiqfG
/dDm5kp0RvBumZ9F5NYDPdpfVCKrdvd3jsPfw2Gh0QEDg+JAdOAIsELNhdyARXaT
UvOP7NsgwnH+ZWy0Ew==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:21 2026 by rpki-client