Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144739.roa
File: AS144739.roa (raw, json)
Hash identifier: H0f/fTVEdo7IJCQbr/D8GHawU825eAs69A5Yn7WIOtM=
Subject key identifier: 21:E9:7F:C5:ED:2C:34:62:CE:F6:0E:15:95:72:C6:E4:8C:25:75:B7
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 52CCA2ADD06EE783E2DE4B7B8A21EDD39EA41FC0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144739.roa
Signing time: Mon 25 May 2026 03:19:37 +0000
ROA not before: Mon 25 May 2026 03:14:37 +0000
ROA not after: Mon 24 May 2027 03:19:37 +0000
asID: 144739
IP address blocks: 240a:a829::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:cc:a2:ad:d0:6e:e7:83:e2:de:4b:7b:8a:21:ed:d3:9e:a4:1f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:37 2026 GMT
Not After : May 24 03:19:37 2027 GMT
Subject: CN=21E97FC5ED2C3462CEF60E159572C6E48C2575B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:73:b1:db:d9:5a:59:4a:7e:f7:c2:0f:c6:4f:
36:a3:d4:e3:20:5c:65:10:3a:48:95:36:be:9c:02:
c4:d3:e7:0f:1f:0f:44:c4:2f:f9:55:ff:ea:c7:c4:
58:3d:1c:f5:1b:2c:21:04:90:b3:be:f1:41:04:59:
29:71:12:4a:88:22:eb:0e:50:69:5b:2e:b4:c7:60:
60:24:84:ca:70:3c:69:31:f9:a7:65:77:c0:4a:76:
f6:1e:19:ed:42:f7:f9:19:cb:4b:4b:c1:08:21:29:
a8:fe:7d:b0:a9:59:10:9c:0e:cc:d2:cc:c3:b4:1b:
c6:f6:39:d8:d7:9e:5e:b3:3b:cf:03:b4:a7:db:ff:
91:d2:40:00:18:88:f1:73:a1:08:d1:52:ac:7e:2c:
80:0d:69:f8:2f:1b:12:9c:54:4f:ad:07:b7:e4:ad:
85:17:bd:5a:8e:9c:bb:21:d0:97:75:f8:f2:d0:a8:
b6:03:09:1e:eb:35:99:8a:33:3d:56:37:ff:0f:30:
28:58:8e:5d:18:d4:0b:34:5c:e6:f3:b9:26:f9:a4:
a1:49:e6:d2:23:29:77:9e:8d:61:e2:75:95:be:a0:
30:5c:ab:d0:7e:d6:eb:f4:94:21:a6:98:2e:c3:46:
19:21:80:51:31:d2:33:1a:85:c1:25:25:25:fd:4e:
c7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E9:7F:C5:ED:2C:34:62:CE:F6:0E:15:95:72:C6:E4:8C:25:75:B7
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a829::/32
Signature Algorithm: sha256WithRSAEncryption
be:12:42:69:3d:48:a6:ea:8c:36:53:66:20:8f:d4:de:d1:b4:
0d:0c:46:b1:54:ac:ca:09:0c:6c:38:d7:a3:16:d8:aa:fe:00:
11:8d:40:05:b5:1e:d1:ac:c5:47:90:1f:c1:9a:e6:7c:ae:36:
a0:5c:13:89:b4:8f:f2:21:0c:6b:60:11:2c:8b:79:76:ef:ad:
9f:c5:79:c9:bb:c6:4b:e8:98:0a:02:39:9f:39:5c:d0:2f:9e:
b1:73:85:76:26:4d:91:63:58:d2:29:bb:47:9e:35:b8:02:84:
8c:56:5b:04:31:50:b0:01:8a:66:03:d3:ff:ad:fe:11:56:cb:
73:4c:cd:05:54:af:0d:aa:2b:5e:48:4d:13:4b:8a:b3:08:82:
35:4b:35:66:fe:54:8f:4f:80:1a:0f:b6:10:52:bf:b6:e8:f2:
d9:4c:08:e2:b6:b8:b8:8e:76:0b:21:73:90:3e:d3:52:f0:d2:
e4:9a:93:df:2c:a3:62:ae:95:9d:7c:16:e7:79:6b:47:2e:c3:
87:8c:ba:30:60:92:4e:73:49:28:9d:28:3b:a4:d5:78:f8:9f:
32:a6:03:de:cb:b7:c7:c8:c1:12:f3:7c:16:2d:11:2a:84:7e:
ed:e3:50:cd:bc:5d:c6:9e:84:96:5a:59:6a:60:bc:f7:f4:7a:
47:a3:48:67
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUUsyirdBu54Pi3kt7iiHt056kH8AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMzE0MzdaFw0yNzA1MjQwMzE5MzdaMDMxMTAvBgNV
BAMTKDIxRTk3RkM1RUQyQzM0NjJDRUY2MEUxNTk1NzJDNkU0OEMyNTc1QjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9c7Hb2VpZSn73wg/GTzaj1OMg
XGUQOkiVNr6cAsTT5w8fD0TEL/lV/+rHxFg9HPUbLCEEkLO+8UEEWSlxEkqIIusO
UGlbLrTHYGAkhMpwPGkx+adld8BKdvYeGe1C9/kZy0tLwQghKaj+fbCpWRCcDszS
zMO0G8b2OdjXnl6zO88DtKfb/5HSQAAYiPFzoQjRUqx+LIANafgvGxKcVE+tB7fk
rYUXvVqOnLsh0Jd1+PLQqLYDCR7rNZmKMz1WN/8PMChYjl0Y1As0XObzuSb5pKFJ
5tIjKXeejWHidZW+oDBcq9B+1uv0lCGmmC7DRhkhgFEx0jMahcElJSX9TsfFAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUIel/xe0sNGLO9g4VlXLG5IwldbcwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0NzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqoKTANBgkqhkiG9w0BAQsFAAOCAQEAvhJC
aT1IpuqMNlNmII/U3tG0DQxGsVSsygkMbDjXoxbYqv4AEY1ABbUe0azFR5AfwZrm
fK42oFwTibSP8iEMa2ARLIt5du+tn8V5ybvGS+iYCgI5nzlc0C+esXOFdiZNkWNY
0im7R541uAKEjFZbBDFQsAGKZgPT/63+EVbLc0zNBVSvDaorXkhNE0uKswiCNUs1
Zv5Uj0+AGg+2EFK/tujy2UwI4ra4uI52CyFzkD7TUvDS5JqT3yyjYq6VnXwW53lr
Ry7Dh4y6MGCSTnNJKJ0oO6TVePifMqYD3su3x8jBEvN8Fi0RKoR+7eNQzbxdxp6E
llpZamC89/R6R6NIZw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:39:02 2026 by rpki-client