Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144705.roa
File: AS144705.roa (raw, json)
Hash identifier: njhZh2uUPVXdBgL1tnqPyGeJ3xtzNXQD5e8wEMiFtt0=
Subject key identifier: 33:23:96:9F:ED:AC:C7:0A:8A:E3:88:D0:FA:4F:A5:1E:9C:2B:BC:A0
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0390DCFE3B72FA145CA467C8F3A1D9D729102067
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144705.roa
Signing time: Fri 22 May 2026 04:07:56 +0000
ROA not before: Fri 22 May 2026 04:02:56 +0000
ROA not after: Fri 21 May 2027 04:07:56 +0000
asID: 144705
IP address blocks: 240a:a807::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:90:dc:fe:3b:72:fa:14:5c:a4:67:c8:f3:a1:d9:d7:29:10:20:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:02:56 2026 GMT
Not After : May 21 04:07:56 2027 GMT
Subject: CN=3323969FEDACC70A8AE388D0FA4FA51E9C2BBCA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:68:44:06:50:72:db:41:19:3b:43:2c:fc:91:
a9:6a:33:7e:7a:13:4e:18:8b:52:2c:e8:83:dd:82:
08:cb:31:d1:49:22:1d:27:9b:3b:3a:18:24:e4:97:
54:d5:54:06:9d:35:ed:13:48:68:57:09:bb:f0:eb:
47:a4:5b:80:59:1c:f2:20:a1:5a:32:6b:8e:d7:93:
e3:fd:e8:cf:a3:e1:e9:d6:75:ca:76:91:a3:b3:35:
72:13:d9:a3:e5:ab:98:69:62:da:5c:f2:65:de:47:
4a:06:a7:1c:25:de:fe:c9:e5:49:68:5c:b4:00:b1:
c2:4b:bb:3e:a2:c9:a8:8f:6c:8f:c5:94:1a:bb:6d:
7c:34:8c:86:66:a6:30:94:f6:f4:c9:48:41:51:29:
08:1a:9e:1e:1d:93:82:d4:ad:17:c6:35:d0:9e:fe:
7c:98:e8:0e:fb:91:1a:49:b3:d5:e4:4a:16:00:39:
04:25:2d:c4:6e:6a:4a:c6:2a:54:1f:02:e4:26:8a:
b2:0b:f2:bd:43:e5:01:8d:96:a9:b4:ce:ea:d7:68:
36:76:a6:1d:d3:aa:d3:db:68:0b:34:c6:4a:5a:f4:
dd:7d:1f:11:5e:ce:2a:c4:93:5b:1c:d2:51:7a:02:
39:3b:7b:c0:00:28:bf:bb:e2:5e:14:de:16:04:3d:
04:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:23:96:9F:ED:AC:C7:0A:8A:E3:88:D0:FA:4F:A5:1E:9C:2B:BC:A0
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144705.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a807::/32
Signature Algorithm: sha256WithRSAEncryption
8f:2e:de:46:8a:25:58:0c:49:8a:f7:45:a3:1d:98:70:09:c6:
38:5f:fb:f1:ee:c5:f7:e5:bf:b5:d6:e6:61:75:a8:80:e1:44:
27:20:26:f8:04:4c:3d:e0:a5:9c:fe:a2:1c:4a:d2:ce:ce:df:
5b:f4:79:f6:80:66:02:46:68:f3:8c:42:8b:c9:3b:e7:2f:c4:
a0:44:9a:c9:d2:55:2d:ba:fd:c3:e1:53:13:9d:2b:f4:5a:fe:
6b:74:ab:42:54:fc:7d:60:b6:bd:db:0b:83:eb:6e:2a:b6:26:
69:73:48:24:b9:ba:a9:80:1e:48:13:b6:d8:4d:a5:4e:a0:4a:
6f:ab:7c:15:af:b6:41:91:ae:5d:c7:2d:66:b8:8e:dc:cc:9c:
ef:62:a4:56:2a:44:c2:b3:09:09:8f:32:43:94:0f:de:59:02:
bd:38:58:59:17:67:ff:26:7b:ed:35:a9:b3:eb:9c:d0:1c:5d:
0d:41:8e:ca:44:b8:6d:da:c7:1b:8d:f8:b8:73:ec:77:18:b1:
ef:fb:78:d4:78:11:14:d7:70:9a:05:54:5c:cf:6c:60:f3:36:
88:10:18:7a:58:56:18:be:f6:d7:7f:ec:17:fd:96:d7:85:be:
20:d8:d1:c2:93:85:71:27:fa:e1:a9:30:6b:d6:a6:87:43:84:
04:fe:0c:0f
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUA5Dc/jty+hRcpGfI86HZ1ykQIGcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNDAyNTZaFw0yNzA1MjEwNDA3NTZaMDMxMTAvBgNV
BAMTKDMzMjM5NjlGRURBQ0M3MEE4QUUzODhEMEZBNEZBNTFFOUMyQkJDQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7aEQGUHLbQRk7Qyz8kalqM356
E04Yi1Is6IPdggjLMdFJIh0nmzs6GCTkl1TVVAadNe0TSGhXCbvw60ekW4BZHPIg
oVoya47Xk+P96M+j4enWdcp2kaOzNXIT2aPlq5hpYtpc8mXeR0oGpxwl3v7J5Ulo
XLQAscJLuz6iyaiPbI/FlBq7bXw0jIZmpjCU9vTJSEFRKQganh4dk4LUrRfGNdCe
/nyY6A77kRpJs9XkShYAOQQlLcRuakrGKlQfAuQmirIL8r1D5QGNlqm0zurXaDZ2
ph3TqtPbaAs0xkpa9N19HxFezirEk1sc0lF6Ajk7e8AAKL+74l4U3hYEPQS5AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUMyOWn+2sxwqK44jQ+k+lHpwrvKAwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0NzA1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqoBzANBgkqhkiG9w0BAQsFAAOCAQEAjy7e
RoolWAxJivdFox2YcAnGOF/78e7F9+W/tdbmYXWogOFEJyAm+ARMPeClnP6iHErS
zs7fW/R59oBmAkZo84xCi8k75y/EoESaydJVLbr9w+FTE50r9Fr+a3SrQlT8fWC2
vdsLg+tuKrYmaXNIJLm6qYAeSBO22E2lTqBKb6t8Fa+2QZGuXcctZriO3Myc72Kk
VipEwrMJCY8yQ5QP3lkCvThYWRdn/yZ77TWps+uc0BxdDUGOykS4bdrHG434uHPs
dxix7/t41HgRFNdwmgVUXM9sYPM2iBAYelhWGL7213/sF/2W14W+INjRwpOFcSf6
4akwa9amh0OEBP4MDw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:37 2026 by rpki-client