Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144749.roa
File: AS144749.roa (raw, json)
Hash identifier: O/oGz3mnik9yVgAYvmVK0EKQ18YRsn2mqIoOGMkUhf4=
Subject key identifier: BC:9C:D8:62:47:59:E5:6F:83:9E:71:FA:D6:30:8F:B3:B9:73:94:05
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 456EC6650BAE94B92B19F1882FCD21FCA7AF34A8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144749.roa
Signing time: Fri 22 May 2026 04:08:12 +0000
ROA not before: Fri 22 May 2026 04:03:12 +0000
ROA not after: Fri 21 May 2027 04:08:12 +0000
asID: 144749
IP address blocks: 240a:a833::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:6e:c6:65:0b:ae:94:b9:2b:19:f1:88:2f:cd:21:fc:a7:af:34:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:12 2026 GMT
Not After : May 21 04:08:12 2027 GMT
Subject: CN=BC9CD8624759E56F839E71FAD6308FB3B9739405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8e:e9:5e:33:ed:e9:40:1d:99:b8:7f:b9:13:
44:fe:51:ce:bb:c1:a5:2a:ec:34:ca:21:20:60:ab:
a9:f3:3f:31:24:1c:55:bb:38:77:8b:59:81:a8:a0:
c4:4d:c7:74:86:97:8c:36:60:f6:12:df:45:7a:ae:
c9:f7:d0:9c:90:5a:ae:0e:57:aa:1a:03:a6:55:f7:
a3:8d:b4:6a:50:86:f9:c3:0a:ea:12:82:d8:86:52:
58:dc:80:a7:f7:ad:be:36:c8:24:03:7c:46:49:fb:
46:8a:01:3f:a7:5b:9d:da:f5:a0:7b:a0:94:31:6b:
c6:00:eb:47:67:89:4d:b8:01:ff:1d:79:19:42:71:
09:48:7f:b0:04:72:89:41:10:8c:a5:02:de:12:45:
d4:a7:2c:6c:46:50:3b:1a:37:93:78:34:55:07:9b:
9c:bf:1d:f1:de:69:15:90:ec:5c:2b:10:fc:d1:f3:
55:48:5d:39:ef:cc:3c:d3:a1:85:2c:15:27:7e:57:
da:aa:1f:94:5b:3c:f9:0e:2c:7e:31:ac:85:d5:a9:
95:4d:1f:f4:cf:5a:80:04:02:c1:39:e4:0b:ed:f7:
12:cc:92:23:2b:c4:0a:52:f4:9f:14:e0:63:48:d2:
13:5c:4c:24:7e:89:95:64:40:e5:73:c7:34:fc:09:
51:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:9C:D8:62:47:59:E5:6F:83:9E:71:FA:D6:30:8F:B3:B9:73:94:05
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144749.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a833::/32
Signature Algorithm: sha256WithRSAEncryption
16:cb:0e:65:dd:94:73:00:f4:0a:3b:6e:d8:8e:d6:f2:f7:bf:
5e:5d:7e:2a:94:83:b5:00:dd:24:0b:25:b8:87:5c:ad:b8:ea:
23:8e:d4:b8:27:ce:4d:70:80:4f:2a:04:82:f5:02:83:5b:fb:
55:7f:ea:b9:f3:0e:a3:a1:12:55:31:de:8f:f0:da:d1:e9:89:
1f:13:6e:e5:e2:b7:1f:97:35:7c:6c:ec:ad:74:c7:ff:1f:4e:
f7:f1:68:ee:00:e8:3c:15:e5:66:a9:b3:49:4e:65:c9:29:ca:
cb:de:cb:02:df:f9:9e:34:6f:03:4a:82:8c:f7:30:56:38:12:
0d:38:37:71:31:1a:cd:88:75:46:82:86:90:1e:e6:1f:9a:02:
b5:42:0a:28:e0:f9:f0:48:f4:4b:d5:86:d9:1a:cf:c1:2a:03:
75:68:19:ed:74:10:e7:d7:21:bb:65:26:f9:c1:1f:c5:35:f3:
8e:3c:db:a6:d0:b3:ea:49:bd:b4:c8:ef:ae:80:76:68:cd:f2:
b0:21:2f:f2:8e:1d:a3:7f:30:48:68:48:23:d0:57:c5:c1:7c:
dc:1c:49:92:9b:c4:98:f7:b3:6e:05:af:00:5d:96:8c:a8:8c:
71:39:61:fb:a2:18:77:53:6e:e1:ec:1c:9f:e3:1f:38:aa:e9:
9d:95:ed:98
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIURW7GZQuulLkrGfGIL80h/KevNKgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNDAzMTJaFw0yNzA1MjEwNDA4MTJaMDMxMTAvBgNV
BAMTKEJDOUNEODYyNDc1OUU1NkY4MzlFNzFGQUQ2MzA4RkIzQjk3Mzk0MDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnjuleM+3pQB2ZuH+5E0T+Uc67
waUq7DTKISBgq6nzPzEkHFW7OHeLWYGooMRNx3SGl4w2YPYS30V6rsn30JyQWq4O
V6oaA6ZV96ONtGpQhvnDCuoSgtiGUljcgKf3rb42yCQDfEZJ+0aKAT+nW53a9aB7
oJQxa8YA60dniU24Af8deRlCcQlIf7AEcolBEIylAt4SRdSnLGxGUDsaN5N4NFUH
m5y/HfHeaRWQ7FwrEPzR81VIXTnvzDzToYUsFSd+V9qqH5RbPPkOLH4xrIXVqZVN
H/TPWoAEAsE55Avt9xLMkiMrxApS9J8U4GNI0hNcTCR+iZVkQOVzxzT8CVGTAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUvJzYYkdZ5W+DnnH61jCPs7lzlAUwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0NzQ5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqoMzANBgkqhkiG9w0BAQsFAAOCAQEAFssO
Zd2UcwD0Cjtu2I7W8ve/Xl1+KpSDtQDdJAsluIdcrbjqI47UuCfOTXCATyoEgvUC
g1v7VX/qufMOo6ESVTHej/Da0emJHxNu5eK3H5c1fGzsrXTH/x9O9/Fo7gDoPBXl
ZqmzSU5lySnKy97LAt/5njRvA0qCjPcwVjgSDTg3cTEazYh1RoKGkB7mH5oCtUIK
KOD58Ej0S9WG2RrPwSoDdWgZ7XQQ59chu2Um+cEfxTXzjjzbptCz6km9tMjvroB2
aM3ysCEv8o4do38wSGhII9BXxcF83BxJkpvEmPezbgWvAF2WjKiMcTlh+6IYd1Nu
4ewcn+MfOKrpnZXtmA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:33 2026 by rpki-client