Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144768.roa
File: AS144768.roa (raw, json)
Hash identifier: pAArPZiyGw4GSddru8MvJXjTpuTfc1m/jIt0LwtGHtw=
Subject key identifier: E6:38:1D:EA:B1:0D:63:8A:D6:93:89:4F:51:C2:10:8C:EC:01:15:0E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 63F83B9951884462C097125E4BA3D07663B85C5E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144768.roa
Signing time: Tue 26 May 2026 03:17:18 +0000
ROA not before: Tue 26 May 2026 03:12:18 +0000
ROA not after: Tue 25 May 2027 03:17:18 +0000
asID: 144768
IP address blocks: 240a:a846::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:f8:3b:99:51:88:44:62:c0:97:12:5e:4b:a3:d0:76:63:b8:5c:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:12:18 2026 GMT
Not After : May 25 03:17:18 2027 GMT
Subject: CN=E6381DEAB10D638AD693894F51C2108CEC01150E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:92:50:0a:04:06:0d:3d:3d:b2:d5:be:ac:63:
77:b9:cf:d3:ca:3d:78:23:5c:a7:f1:8c:80:be:94:
55:83:65:35:37:70:d9:92:96:d3:fb:9a:e1:83:28:
ad:03:7a:7a:89:72:9f:69:c0:b7:0f:1b:0c:bd:62:
da:2b:3f:03:6c:f3:52:db:df:b5:cf:4e:20:7f:4e:
e0:64:cb:0c:db:21:05:5b:61:14:19:ec:56:49:f4:
28:6b:f4:85:3b:0e:ab:de:f9:69:17:9b:2a:7d:a6:
92:35:40:67:bc:df:51:e4:09:76:6b:50:49:74:a5:
f0:e7:d3:9d:4e:9f:7e:7f:b7:8d:9d:27:2d:0b:79:
55:d0:da:9c:09:cb:ff:e4:b8:03:e7:37:bf:d1:11:
47:b3:ae:1e:0f:12:98:ce:1b:3f:4a:8a:54:66:14:
71:e4:73:88:80:b9:a0:d2:a8:b9:43:d9:ed:b7:8d:
d9:12:ce:06:87:5f:d2:ac:37:b5:63:21:d8:f7:e8:
56:20:5f:74:6a:09:ec:8a:26:6f:60:39:04:14:67:
21:3c:f8:3d:8f:cb:59:63:5e:b0:12:b5:65:f7:0b:
31:e2:41:b5:9c:cb:7f:23:d1:3a:de:a2:04:0b:02:
b3:4a:51:c5:65:c0:3b:05:a6:d6:57:74:79:3d:3c:
df:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:38:1D:EA:B1:0D:63:8A:D6:93:89:4F:51:C2:10:8C:EC:01:15:0E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144768.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a846::/32
Signature Algorithm: sha256WithRSAEncryption
6a:3b:35:b2:cc:46:d7:d1:d7:f4:55:5f:5c:1a:4a:1b:cc:25:
3e:16:b7:da:d4:ee:f2:9d:e8:94:34:e6:c0:f3:ba:b9:af:0c:
6d:45:33:0b:64:e3:69:62:67:e0:32:61:87:86:7d:21:80:ca:
f4:aa:dd:b5:22:d8:ea:d7:d3:db:9d:ad:4d:55:dd:56:c5:78:
b2:55:22:1f:1e:53:4a:31:75:cf:89:a5:3b:18:c3:7a:b3:e3:
8c:7d:27:78:9b:36:49:63:18:26:b7:54:1b:00:b4:1a:ac:a3:
c1:03:0f:14:6b:f9:58:a5:fc:e2:fd:4c:13:47:2f:05:11:d1:
43:dd:d7:fd:a0:a2:46:3a:db:13:19:de:dd:07:53:fa:22:68:
6d:87:ae:34:4d:69:6a:40:96:ef:4c:ba:2c:b7:c9:bd:e2:9f:
05:91:7b:4b:af:ee:61:99:7a:00:6d:08:73:b2:cd:fe:35:f5:
1d:b0:6d:c9:16:d0:04:d4:d9:6f:35:23:74:3c:af:92:b7:27:
b7:ac:a9:af:e1:5f:c9:55:19:ba:b1:85:74:50:1d:a7:d9:74:
a4:c0:3d:fd:64:76:f6:f3:a6:4d:bf:eb:cd:dd:36:0f:1a:46:
dd:be:64:91:33:fb:7e:c2:4c:0f:cb:6a:13:b3:e4:9b:0a:fd:
96:d8:41:cc
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUY/g7mVGIRGLAlxJeS6PQdmO4XF4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMzEyMThaFw0yNzA1MjUwMzE3MThaMDMxMTAvBgNV
BAMTKEU2MzgxREVBQjEwRDYzOEFENjkzODk0RjUxQzIxMDhDRUMwMTE1MEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmklAKBAYNPT2y1b6sY3e5z9PK
PXgjXKfxjIC+lFWDZTU3cNmSltP7muGDKK0DenqJcp9pwLcPGwy9YtorPwNs81Lb
37XPTiB/TuBkywzbIQVbYRQZ7FZJ9Chr9IU7Dqve+WkXmyp9ppI1QGe831HkCXZr
UEl0pfDn051On35/t42dJy0LeVXQ2pwJy//kuAPnN7/REUezrh4PEpjOGz9KilRm
FHHkc4iAuaDSqLlD2e23jdkSzgaHX9KsN7VjIdj36FYgX3RqCeyKJm9gOQQUZyE8
+D2Py1ljXrAStWX3CzHiQbWcy38j0TreogQLArNKUcVlwDsFptZXdHk9PN8TAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU5jgd6rENY4rWk4lPUcIQjOwBFQ4wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0NzY4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqoRjANBgkqhkiG9w0BAQsFAAOCAQEAajs1
ssxG19HX9FVfXBpKG8wlPha32tTu8p3olDTmwPO6ua8MbUUzC2TjaWJn4DJhh4Z9
IYDK9KrdtSLY6tfT252tTVXdVsV4slUiHx5TSjF1z4mlOxjDerPjjH0neJs2SWMY
JrdUGwC0GqyjwQMPFGv5WKX84v1ME0cvBRHRQ93X/aCiRjrbExne3QdT+iJobYeu
NE1pakCW70y6LLfJveKfBZF7S6/uYZl6AG0Ic7LN/jX1HbBtyRbQBNTZbzUjdDyv
krcnt6ypr+FfyVUZurGFdFAdp9l0pMA9/WR29vOmTb/rzd02DxpG3b5kkTP7fsJM
D8tqE7Pkmwr9lthBzA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:09 2026 by rpki-client