Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144719.roa
File: AS144719.roa (raw, json)
Hash identifier: uzGeU3kihdqL8drVO+J1fre6WzSjNlpoXp2GmOs6sF4=
Subject key identifier: 3F:86:2C:BC:B1:8F:71:9E:EF:84:A9:B6:89:AB:73:01:91:9E:5E:84
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 78E088DEB622A487E6D78C08838196BF6ED6DBDB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144719.roa
Signing time: Fri 22 May 2026 01:50:06 +0000
ROA not before: Fri 22 May 2026 01:45:06 +0000
ROA not after: Fri 21 May 2027 01:50:06 +0000
asID: 144719
IP address blocks: 240a:a815::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:e0:88:de:b6:22:a4:87:e6:d7:8c:08:83:81:96:bf:6e:d6:db:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:06 2026 GMT
Not After : May 21 01:50:06 2027 GMT
Subject: CN=3F862CBCB18F719EEF84A9B689AB7301919E5E84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d0:41:27:de:b8:6d:ce:75:84:76:1d:e7:d9:
8e:46:d3:4d:00:de:b1:cc:b0:36:e2:f3:68:4d:3a:
de:e8:25:5e:71:12:67:f3:21:18:77:04:96:c7:34:
42:75:ea:48:75:a3:35:ea:d5:1d:ea:36:2f:aa:bd:
0d:76:81:c7:bd:0b:9e:82:ca:30:92:6b:f4:42:4e:
f1:66:f7:23:cf:47:16:eb:ce:8d:9d:80:18:31:7a:
1e:38:38:35:b3:60:2e:5a:5a:f0:ba:fe:38:52:7c:
67:f5:6e:1e:87:91:6f:c9:2f:0b:87:78:2f:f3:4e:
da:25:db:5a:8a:e3:1d:06:d9:12:d4:9d:e3:9a:ea:
fc:17:2d:e2:d5:4e:06:21:52:ce:69:50:f3:74:73:
24:39:c6:80:b9:5f:ba:70:08:39:c2:a1:ce:c1:f1:
26:5b:27:66:5e:dc:41:ed:53:d9:51:04:b3:df:17:
cc:08:51:c6:dc:06:d1:35:73:4f:da:21:6a:5c:30:
8f:ca:49:77:87:c8:66:fe:92:c3:fc:d4:11:45:a6:
15:b8:e7:0e:a0:79:40:df:30:bc:8f:18:5d:41:fc:
8c:db:ae:e2:25:c5:80:49:73:32:72:3c:cc:8f:9b:
20:38:89:63:01:39:3c:cc:fa:7c:36:d8:df:24:93:
d4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:86:2C:BC:B1:8F:71:9E:EF:84:A9:B6:89:AB:73:01:91:9E:5E:84
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144719.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a815::/32
Signature Algorithm: sha256WithRSAEncryption
a0:5a:90:f7:bd:ae:5f:bd:1b:70:8e:48:41:a6:96:9e:59:f2:
90:5f:ff:02:57:62:e3:35:21:33:aa:a6:78:75:90:6e:56:59:
34:14:4f:24:60:61:25:8a:b6:a2:10:30:22:13:e6:26:55:69:
c9:cd:57:f3:9e:b4:0f:02:1e:89:1f:c8:29:cd:3a:33:d1:41:
59:97:7f:e4:78:59:90:91:c5:3f:fa:7b:6f:53:57:3b:05:a9:
d3:41:39:12:d3:a7:83:e1:42:fe:46:27:1a:44:3c:69:f6:63:
75:a4:f0:30:ef:8b:33:6e:2a:b8:1f:1a:10:ab:a7:be:15:1b:
55:58:65:f1:1e:53:00:04:48:a6:9f:3c:f1:c2:28:2b:2c:8a:
27:2f:b2:fa:3a:f2:84:6d:19:f2:4c:e3:dd:85:94:f8:35:be:
0e:3d:f6:4b:eb:4e:ce:c6:ca:49:21:2b:18:60:17:e1:3d:39:
21:ba:e7:25:2f:2f:24:cc:68:2c:74:0a:cc:f5:c0:0f:04:56:
65:1f:62:6f:d9:09:24:51:b7:15:c1:34:d3:7e:fb:38:79:7e:
ba:d6:82:3b:96:09:0a:31:ce:82:b7:da:5d:70:0f:58:b9:2f:
5a:5b:46:ed:3d:9f:3e:7b:08:7d:ff:8c:b2:1c:3b:15:a6:e8:
7b:f5:a9:21
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUeOCI3rYipIfm14wIg4GWv27W29swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwMTQ1MDZaFw0yNzA1MjEwMTUwMDZaMDMxMTAvBgNV
BAMTKDNGODYyQ0JDQjE4RjcxOUVFRjg0QTlCNjg5QUI3MzAxOTE5RTVFODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr0EEn3rhtznWEdh3n2Y5G000A
3rHMsDbi82hNOt7oJV5xEmfzIRh3BJbHNEJ16kh1ozXq1R3qNi+qvQ12gce9C56C
yjCSa/RCTvFm9yPPRxbrzo2dgBgxeh44ODWzYC5aWvC6/jhSfGf1bh6HkW/JLwuH
eC/zTtol21qK4x0G2RLUneOa6vwXLeLVTgYhUs5pUPN0cyQ5xoC5X7pwCDnCoc7B
8SZbJ2Ze3EHtU9lRBLPfF8wIUcbcBtE1c0/aIWpcMI/KSXeHyGb+ksP81BFFphW4
5w6geUDfMLyPGF1B/IzbruIlxYBJczJyPMyPmyA4iWMBOTzM+nw22N8kk9SvAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUP4YsvLGPcZ7vhKm2iatzAZGeXoQwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0NzE5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqoFTANBgkqhkiG9w0BAQsFAAOCAQEAoFqQ
972uX70bcI5IQaaWnlnykF//Aldi4zUhM6qmeHWQblZZNBRPJGBhJYq2ohAwIhPm
JlVpyc1X8560DwIeiR/IKc06M9FBWZd/5HhZkJHFP/p7b1NXOwWp00E5EtOng+FC
/kYnGkQ8afZjdaTwMO+LM24quB8aEKunvhUbVVhl8R5TAARIpp888cIoKyyKJy+y
+jryhG0Z8kzj3YWU+DW+Dj32S+tOzsbKSSErGGAX4T05IbrnJS8vJMxoLHQKzPXA
DwRWZR9ib9kJJFG3FcE00377OHl+utaCO5YJCjHOgrfaXXAPWLkvWltG7T2fPnsI
ff+Mshw7Faboe/WpIQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:09 2026 by rpki-client