Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144733.roa
File: AS144733.roa (raw, json)
Hash identifier: 3XQoo9IMumsV8/Sm+bqqg7uVyoYGoi8o1L2Uiy6uRg8=
Subject key identifier: 25:2F:24:7F:3F:C9:F7:B4:26:4F:83:9C:5E:90:CA:E6:6B:85:33:85
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 054B3ADD6191C7E06DF6811660DAD90B805E8A52
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144733.roa
Signing time: Fri 22 May 2026 04:27:09 +0000
ROA not before: Fri 22 May 2026 04:22:09 +0000
ROA not after: Fri 21 May 2027 04:27:09 +0000
asID: 144733
IP address blocks: 240a:a823::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:4b:3a:dd:61:91:c7:e0:6d:f6:81:16:60:da:d9:0b:80:5e:8a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:22:09 2026 GMT
Not After : May 21 04:27:09 2027 GMT
Subject: CN=252F247F3FC9F7B4264F839C5E90CAE66B853385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f3:c3:82:a7:83:15:ec:fc:84:5e:81:61:72:
0b:1d:b7:95:e1:20:ba:12:70:5a:75:6a:b1:31:6e:
ed:33:a0:c2:7a:44:0a:24:b3:76:f4:6d:50:a8:e6:
78:9f:8c:d8:7f:75:f2:9e:3d:30:01:0c:66:ae:36:
06:9c:0e:fa:69:af:42:26:40:a4:f8:29:16:8b:c3:
72:1c:22:31:e5:8d:e1:e8:91:b1:61:a6:2b:e1:f1:
6e:bd:50:42:aa:6b:92:fd:cf:a3:d5:12:c8:e0:02:
05:2a:32:9f:53:6d:66:39:9d:07:13:b8:42:e6:91:
aa:e1:6e:43:c6:fc:3b:9a:4c:d9:39:ef:b8:33:e4:
d8:dc:4a:6a:da:ba:ef:28:ad:30:a9:8d:9c:1c:7a:
42:f7:9b:39:1f:c8:64:8d:b4:a8:40:5c:1a:cd:25:
90:5b:87:0b:b5:6d:be:fa:ad:cd:79:88:10:47:7e:
d5:78:e2:d7:71:07:a9:97:51:b4:61:db:bd:fa:d4:
16:8f:0a:be:31:2a:25:3d:61:bf:03:a6:da:a1:b0:
ba:a8:92:35:54:a8:90:dc:0e:8a:98:5f:ae:26:43:
b5:78:0d:a5:64:a7:d8:fd:42:84:bb:a7:99:24:b7:
a8:0e:63:d7:6b:71:70:98:7f:86:89:82:3e:a5:e8:
dc:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:2F:24:7F:3F:C9:F7:B4:26:4F:83:9C:5E:90:CA:E6:6B:85:33:85
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a823::/32
Signature Algorithm: sha256WithRSAEncryption
6b:44:3e:f7:5b:2a:24:60:00:a7:0e:f9:28:ab:9e:95:b8:d7:
e3:9d:26:91:c5:88:2c:b4:cd:4c:b9:c9:89:e0:68:1c:c6:d0:
6f:aa:f3:ba:de:32:13:9c:97:02:f3:b5:db:23:db:ff:c9:bf:
fe:c8:b5:9a:45:5b:7b:bb:18:83:04:21:98:bd:70:c7:90:46:
cd:c9:71:98:9c:73:23:3f:f7:2a:dc:c3:6c:1f:68:5b:14:53:
a0:55:e1:c1:cd:22:fb:5f:f1:b8:e9:0e:4d:5a:95:17:fc:97:
b2:20:06:c2:cf:e7:85:63:4d:f4:41:2b:22:9c:9b:00:c1:b1:
c5:ca:2d:80:52:d2:75:3f:42:94:05:e2:2a:aa:fb:23:f8:72:
45:3c:00:fe:82:0b:17:d3:cc:5a:d2:21:97:33:a0:21:8f:e0:
7d:4f:ac:cc:1e:7d:51:36:a4:2b:3b:a5:02:2e:08:53:26:fb:
b0:fe:04:f3:36:f9:db:15:89:e5:6e:55:85:9c:77:2d:c2:7e:
f4:1b:d7:75:1b:00:9f:eb:30:4e:0d:64:60:39:2a:e0:c3:14:
fc:21:55:91:c5:4d:c7:50:e0:4a:a7:51:20:fe:a8:49:d0:db:
84:43:0d:88:ff:6c:ee:77:5d:17:c3:7c:1f:1d:e3:78:4d:e3:
a6:03:44:9b
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUBUs63WGRx+Bt9oEWYNrZC4BeilIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNDIyMDlaFw0yNzA1MjEwNDI3MDlaMDMxMTAvBgNV
BAMTKDI1MkYyNDdGM0ZDOUY3QjQyNjRGODM5QzVFOTBDQUU2NkI4NTMzODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF88OCp4MV7PyEXoFhcgsdt5Xh
ILoScFp1arExbu0zoMJ6RAoks3b0bVCo5nifjNh/dfKePTABDGauNgacDvppr0Im
QKT4KRaLw3IcIjHljeHokbFhpivh8W69UEKqa5L9z6PVEsjgAgUqMp9TbWY5nQcT
uELmkarhbkPG/DuaTNk577gz5NjcSmrauu8orTCpjZwcekL3mzkfyGSNtKhAXBrN
JZBbhwu1bb76rc15iBBHftV44tdxB6mXUbRh27361BaPCr4xKiU9Yb8DptqhsLqo
kjVUqJDcDoqYX64mQ7V4DaVkp9j9QoS7p5kkt6gOY9drcXCYf4aJgj6l6NzNAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUJS8kfz/J97QmT4OcXpDK5muFM4UwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0NzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqoIzANBgkqhkiG9w0BAQsFAAOCAQEAa0Q+
91sqJGAApw75KKuelbjX450mkcWILLTNTLnJieBoHMbQb6rzut4yE5yXAvO12yPb
/8m//si1mkVbe7sYgwQhmL1wx5BGzclxmJxzIz/3KtzDbB9oWxRToFXhwc0i+1/x
uOkOTVqVF/yXsiAGws/nhWNN9EErIpybAMGxxcotgFLSdT9ClAXiKqr7I/hyRTwA
/oILF9PMWtIhlzOgIY/gfU+szB59UTakKzulAi4IUyb7sP4E8zb52xWJ5W5VhZx3
LcJ+9BvXdRsAn+swTg1kYDkq4MMU/CFVkcVNx1DgSqdRIP6oSdDbhEMNiP9s7ndd
F8N8Hx3jeE3jpgNEmw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:56 2026 by rpki-client