Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144723.roa
File: AS144723.roa (raw, json)
Hash identifier: JBP9rwWHIep/4XfQG3+39+MF6Wr5pdb9dRhrpc7bOTo=
Subject key identifier: 23:EC:99:70:1A:FF:3A:3F:47:A2:2C:2B:38:F8:37:35:07:2A:8A:B5
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7C949AF1681C1A21AC412B9460A0E2F80CA07065
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144723.roa
Signing time: Fri 22 May 2026 07:32:06 +0000
ROA not before: Fri 22 May 2026 07:27:06 +0000
ROA not after: Fri 21 May 2027 07:32:06 +0000
asID: 144723
IP address blocks: 240a:a819::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:94:9a:f1:68:1c:1a:21:ac:41:2b:94:60:a0:e2:f8:0c:a0:70:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:06 2026 GMT
Not After : May 21 07:32:06 2027 GMT
Subject: CN=23EC99701AFF3A3F47A22C2B38F83735072A8AB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5c:8b:81:b0:22:40:4d:c4:a1:14:40:14:19:
21:2d:c2:66:e6:18:b3:0e:b6:03:29:1e:ac:e6:b4:
73:8c:3e:9d:d4:fe:02:4f:19:8a:cb:aa:ea:90:27:
69:e8:8c:42:b5:77:ed:10:7b:50:6f:d4:3d:cd:f3:
92:f1:7c:c4:11:b5:80:86:64:2b:91:ad:b3:ef:30:
5f:61:5f:72:e7:f5:b1:51:d8:3c:a3:6c:c7:a3:d5:
f2:fe:be:14:a4:eb:50:09:f0:70:5b:c0:a9:c3:88:
a1:a1:c0:28:2f:d5:37:e2:10:fe:aa:7d:1d:eb:d9:
3e:50:90:ec:b7:ff:18:47:cc:df:d0:9e:bd:78:7e:
c7:ee:3d:c5:6d:cb:61:2b:77:98:ee:5d:c7:d1:41:
50:cc:96:85:ce:4f:6a:b9:e0:f1:96:c0:fe:51:6a:
c4:b6:89:d0:d0:7d:d2:8c:d3:23:dd:82:64:37:8d:
ca:4f:68:b6:a2:db:17:7a:07:28:2f:aa:e5:e0:4b:
89:cc:de:31:60:b6:a5:6a:31:9f:31:c4:fd:f3:88:
bb:4b:92:ac:d8:cd:a9:70:d4:a7:a2:dc:08:cd:5c:
71:6a:20:77:7d:97:b5:59:38:58:74:da:da:82:be:
c9:53:5a:69:7b:69:cd:69:17:55:33:a7:9c:af:d5:
67:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:EC:99:70:1A:FF:3A:3F:47:A2:2C:2B:38:F8:37:35:07:2A:8A:B5
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144723.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a819::/32
Signature Algorithm: sha256WithRSAEncryption
ac:88:18:a6:04:08:dc:23:7d:ff:98:80:a8:38:ac:d2:36:78:
9d:f2:b2:05:04:f2:cc:c4:c9:60:40:5d:74:b2:3e:c2:6c:6a:
29:f7:a5:11:67:10:e5:e2:c0:db:0d:01:50:d2:77:02:8f:88:
bd:26:ba:42:5a:82:1a:9a:7a:a5:9a:cb:f1:91:a1:6b:75:68:
74:bc:7a:f2:40:24:33:18:85:31:cc:ed:c1:3b:cb:7c:47:3d:
56:87:f5:af:20:8b:e3:a3:19:2f:5e:e3:9e:df:bb:eb:24:f3:
26:ee:8b:55:80:1b:7d:03:fd:15:e0:c6:06:44:68:0b:ac:98:
08:1a:bf:b6:74:d9:b9:cd:cb:47:a4:57:9c:09:42:12:e2:05:
b2:e9:32:6d:64:f1:91:e6:ef:96:5a:e4:33:88:e9:95:3c:88:
c3:c9:a0:35:92:bf:31:de:06:a7:0f:43:7c:f6:69:92:7c:2d:
4a:b7:96:b1:12:de:ed:7f:95:be:67:69:7a:44:83:ba:75:5c:
8c:58:b3:85:64:2d:36:71:0f:e1:91:00:07:c8:00:77:0c:7d:
ac:95:13:ec:bd:67:13:0f:47:84:64:b6:02:7f:b7:35:bd:79:
6a:c2:77:91:1a:d6:c2:26:ad:91:10:44:bb:5e:0d:a6:e8:f9:
f5:fd:97:61
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUfJSa8WgcGiGsQSuUYKDi+AygcGUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzI3MDZaFw0yNzA1MjEwNzMyMDZaMDMxMTAvBgNV
BAMTKDIzRUM5OTcwMUFGRjNBM0Y0N0EyMkMyQjM4RjgzNzM1MDcyQThBQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdXIuBsCJATcShFEAUGSEtwmbm
GLMOtgMpHqzmtHOMPp3U/gJPGYrLquqQJ2nojEK1d+0Qe1Bv1D3N85LxfMQRtYCG
ZCuRrbPvMF9hX3Ln9bFR2DyjbMej1fL+vhSk61AJ8HBbwKnDiKGhwCgv1TfiEP6q
fR3r2T5QkOy3/xhHzN/Qnr14fsfuPcVty2Erd5juXcfRQVDMloXOT2q54PGWwP5R
asS2idDQfdKM0yPdgmQ3jcpPaLai2xd6BygvquXgS4nM3jFgtqVqMZ8xxP3ziLtL
kqzYzalw1Kei3AjNXHFqIHd9l7VZOFh02tqCvslTWml7ac1pF1Uzp5yv1WdZAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUI+yZcBr/Oj9HoiwrOPg3NQcqirUwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0NzIzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqoGTANBgkqhkiG9w0BAQsFAAOCAQEArIgY
pgQI3CN9/5iAqDis0jZ4nfKyBQTyzMTJYEBddLI+wmxqKfelEWcQ5eLA2w0BUNJ3
Ao+IvSa6QlqCGpp6pZrL8ZGha3VodLx68kAkMxiFMcztwTvLfEc9Vof1ryCL46MZ
L17jnt+76yTzJu6LVYAbfQP9FeDGBkRoC6yYCBq/tnTZuc3LR6RXnAlCEuIFsuky
bWTxkebvllrkM4jplTyIw8mgNZK/Md4Gpw9DfPZpknwtSreWsRLe7X+VvmdpekSD
unVcjFizhWQtNnEP4ZEAB8gAdwx9rJUT7L1nEw9HhGS2An+3Nb15asJ3kRrWwiat
kRBEu14Npuj59f2XYQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:12 2026 by rpki-client