Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144734.roa
File: AS144734.roa (raw, json)
Hash identifier: 4Zw1Qyrdp+fIPKmlY8M687pSnopM0MjGwSGNBN0yAvc=
Subject key identifier: 40:07:8E:C4:E5:7E:A9:72:8B:86:61:7D:F8:29:85:B3:D8:FB:A0:C6
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5438E4BF86026702670BF64AE3FC2A42672C7049
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144734.roa
Signing time: Fri 22 May 2026 07:24:34 +0000
ROA not before: Fri 22 May 2026 07:19:34 +0000
ROA not after: Fri 21 May 2027 07:24:34 +0000
asID: 144734
IP address blocks: 240a:a824::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:38:e4:bf:86:02:67:02:67:0b:f6:4a:e3:fc:2a:42:67:2c:70:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:34 2026 GMT
Not After : May 21 07:24:34 2027 GMT
Subject: CN=40078EC4E57EA9728B86617DF82985B3D8FBA0C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:57:28:6a:ce:c8:b0:58:bc:d8:d6:42:8f:9c:
7d:4c:d7:f6:28:49:15:6b:33:18:5d:ea:5c:53:4a:
73:e0:16:dd:f0:15:48:ea:8b:4f:c2:6c:64:3f:24:
b5:55:e4:41:a2:d2:e5:ed:d5:e7:8f:c4:af:ae:cf:
66:cd:d9:30:28:a8:cf:de:ba:ae:19:4f:02:6b:35:
12:00:0f:3d:33:64:26:46:7b:0c:e1:07:f0:0b:c6:
02:65:54:82:c2:36:24:13:fb:2f:e6:20:0e:e2:96:
75:05:2f:a2:d9:09:53:15:eb:1b:f9:51:c3:0e:4a:
37:dd:74:fc:d5:48:b8:22:f4:dc:19:8c:12:d7:5e:
54:f4:7c:4c:6d:23:9e:ae:94:7c:49:0a:ac:15:23:
ec:5b:cc:23:cd:b1:7c:af:dd:ac:4e:95:88:96:d8:
a5:a4:bd:f2:09:4b:8b:76:66:43:81:8a:f4:84:e0:
70:22:f9:a7:f4:19:08:0b:77:ff:27:ab:60:23:eb:
81:44:a5:01:44:d8:2f:c8:38:87:93:bc:77:2c:62:
65:e9:7c:b1:10:f2:6f:50:35:10:4e:3a:ba:fe:a3:
e7:de:0f:9f:19:f2:e2:0e:4f:3b:b0:b6:e5:2f:43:
e5:57:c9:c3:bf:ea:eb:48:fe:3e:8d:dc:99:79:e9:
9c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:07:8E:C4:E5:7E:A9:72:8B:86:61:7D:F8:29:85:B3:D8:FB:A0:C6
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a824::/32
Signature Algorithm: sha256WithRSAEncryption
b4:34:33:9e:4f:97:57:f0:17:42:da:80:5d:18:01:d4:b1:2e:
d7:33:26:b4:60:df:74:a3:c0:03:11:22:8c:38:10:b3:e0:72:
d0:4b:7f:b4:79:ab:c0:fe:87:1d:f2:bd:e1:f8:e5:ca:ee:fe:
85:d0:68:6a:14:2c:5b:e3:dc:a3:ca:ef:b8:f9:ce:5c:f2:1e:
5b:28:df:3a:7d:f8:89:10:60:d4:31:e5:9b:6e:8d:64:6f:fe:
a1:24:68:e3:5f:fd:79:6a:db:e7:54:87:09:7d:0b:8a:5f:bc:
a2:42:89:53:2b:fa:a1:11:35:a8:5d:8a:4c:42:a0:af:ac:40:
c3:c8:1e:29:58:48:ef:bd:5f:97:bc:17:53:34:86:08:cf:98:
f2:46:c5:f3:a2:73:f7:95:81:6a:1b:d5:f3:04:68:70:ca:d1:
d8:61:8e:1d:dc:e9:7d:bb:33:3f:5e:43:fc:f8:58:da:f4:8f:
6a:dc:e9:a3:fd:75:a3:63:86:d9:d8:92:81:65:7e:40:1d:69:
fb:df:52:61:bd:e7:e3:e4:0d:44:2d:38:f5:ed:14:ee:c2:0a:
79:50:78:b6:57:25:65:b3:f4:df:0a:d0:96:08:29:3b:1c:0b:
7d:bd:e3:0a:b9:f6:d4:07:c6:96:71:23:0e:a5:78:46:31:61:
de:a5:db:7b
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUVDjkv4YCZwJnC/ZK4/wqQmcscEkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzE5MzRaFw0yNzA1MjEwNzI0MzRaMDMxMTAvBgNV
BAMTKDQwMDc4RUM0RTU3RUE5NzI4Qjg2NjE3REY4Mjk4NUIzRDhGQkEwQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDVyhqzsiwWLzY1kKPnH1M1/Yo
SRVrMxhd6lxTSnPgFt3wFUjqi0/CbGQ/JLVV5EGi0uXt1eePxK+uz2bN2TAoqM/e
uq4ZTwJrNRIADz0zZCZGewzhB/ALxgJlVILCNiQT+y/mIA7ilnUFL6LZCVMV6xv5
UcMOSjfddPzVSLgi9NwZjBLXXlT0fExtI56ulHxJCqwVI+xbzCPNsXyv3axOlYiW
2KWkvfIJS4t2ZkOBivSE4HAi+af0GQgLd/8nq2Aj64FEpQFE2C/IOIeTvHcsYmXp
fLEQ8m9QNRBOOrr+o+feD58Z8uIOTzuwtuUvQ+VXycO/6utI/j6N3Jl56ZzVAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUQAeOxOV+qXKLhmF9+CmFs9j7oMYwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0NzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqoJDANBgkqhkiG9w0BAQsFAAOCAQEAtDQz
nk+XV/AXQtqAXRgB1LEu1zMmtGDfdKPAAxEijDgQs+By0Et/tHmrwP6HHfK94fjl
yu7+hdBoahQsW+Pco8rvuPnOXPIeWyjfOn34iRBg1DHlm26NZG/+oSRo41/9eWrb
51SHCX0Lil+8okKJUyv6oRE1qF2KTEKgr6xAw8geKVhI771fl7wXUzSGCM+Y8kbF
86Jz95WBahvV8wRocMrR2GGOHdzpfbszP15D/PhY2vSPatzpo/11o2OG2diSgWV+
QB1p+99SYb3n4+QNRC049e0U7sIKeVB4tlclZbP03wrQlggpOxwLfb3jCrn21AfG
lnEjDqV4RjFh3qXbew==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:53 2026 by rpki-client