Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144770.roa
File: AS144770.roa (raw, json)
Hash identifier: L1UfuSl9KBwoKLgOzscKEjGa1z262O2NeNLvzwz2WHk=
Subject key identifier: DD:C4:D7:A9:EF:13:92:F5:EA:32:4C:DA:1C:36:FB:86:66:0B:18:08
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 319673562A5D31C2A35D372FAB222F5451007487
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144770.roa
Signing time: Fri 22 May 2026 02:47:33 +0000
ROA not before: Fri 22 May 2026 02:42:33 +0000
ROA not after: Fri 21 May 2027 02:47:33 +0000
asID: 144770
IP address blocks: 240a:a848::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:96:73:56:2a:5d:31:c2:a3:5d:37:2f:ab:22:2f:54:51:00:74:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:33 2026 GMT
Not After : May 21 02:47:33 2027 GMT
Subject: CN=DDC4D7A9EF1392F5EA324CDA1C36FB86660B1808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:65:47:a8:b6:bf:cb:71:3c:02:1e:ab:3e:31:
cb:9d:92:d0:bd:02:cc:4b:a3:54:35:08:f4:62:f1:
c8:29:e7:76:3f:8d:56:e3:59:75:27:47:79:90:f8:
9a:8c:eb:9a:c2:af:9d:64:90:02:43:e4:20:bb:de:
ba:c0:9d:ab:0e:be:ce:32:f1:a6:03:a4:a6:10:9c:
d5:93:32:30:ae:a4:f6:5b:94:19:55:91:66:7c:c9:
08:15:44:27:3b:b7:28:f3:be:f0:52:c9:76:31:c7:
69:11:8f:64:ea:91:a4:9d:8f:06:80:42:66:4e:65:
04:85:b8:21:26:18:84:9d:71:b0:06:58:3c:67:8a:
91:5e:f3:96:f8:4b:3e:85:65:3b:ba:e5:5a:6a:aa:
9f:d0:47:60:32:4d:07:e7:41:16:36:ec:2b:0d:1b:
a3:f7:17:87:71:23:8c:89:68:0f:85:e0:5f:c9:0d:
52:97:9e:07:39:92:b0:1c:55:10:32:4a:f0:94:4b:
4a:eb:eb:c4:03:f6:fc:34:05:c6:18:1e:22:07:cd:
8d:e8:a8:0c:67:c3:5c:3c:ad:7b:e1:aa:71:75:61:
d8:ae:18:c6:98:ec:12:0f:16:50:f2:31:5d:cb:d4:
0a:95:ed:f4:8f:5e:c7:93:0f:91:67:d8:34:2b:86:
16:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C4:D7:A9:EF:13:92:F5:EA:32:4C:DA:1C:36:FB:86:66:0B:18:08
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144770.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a848::/32
Signature Algorithm: sha256WithRSAEncryption
bb:35:29:7b:fc:62:a1:f1:c5:d4:77:fc:f6:06:a2:e6:e5:0b:
fe:b7:6e:6c:39:d9:ce:91:d3:77:8c:f9:fd:e3:fd:46:a2:a0:
c5:c3:53:8a:eb:ac:c4:f6:5c:3e:82:ae:11:19:03:92:11:49:
7f:8f:76:d9:99:be:91:f7:0c:f4:c4:09:21:18:c7:3f:18:08:
6a:dc:e9:e0:3e:76:f1:11:31:1f:6b:16:f5:90:3d:6a:44:91:
ce:27:c3:95:25:05:e6:38:b6:e9:cc:c3:66:de:de:a9:16:fc:
61:c0:f7:68:f7:66:f8:d6:22:f6:bd:de:18:56:0d:40:12:9c:
a4:ba:74:20:e8:c1:ae:bd:6e:c1:33:88:bb:33:76:25:e4:1a:
38:ee:80:c2:71:f8:af:d3:0f:02:2e:9b:1f:36:54:ee:31:e8:
01:7d:fa:f0:16:2c:5a:5b:a5:20:6f:e7:d0:e1:0b:87:71:02:
88:26:84:6f:3b:a5:58:cb:8f:1e:f6:76:5f:28:16:20:8c:1b:
a9:a3:8f:9a:31:3a:9a:be:c4:3b:9b:0c:65:09:88:c2:78:ba:
df:73:9b:70:ec:ea:17:75:d7:8f:d1:2a:f3:f0:84:a8:fe:e5:
69:5d:4e:08:6b:24:2d:a5:c3:06:91:02:51:e0:15:62:d6:27:
d8:61:dc:a6
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUMZZzVipdMcKjXTcvqyIvVFEAdIcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwMjQyMzNaFw0yNzA1MjEwMjQ3MzNaMDMxMTAvBgNV
BAMTKEREQzREN0E5RUYxMzkyRjVFQTMyNENEQTFDMzZGQjg2NjYwQjE4MDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIZUeotr/LcTwCHqs+McudktC9
AsxLo1Q1CPRi8cgp53Y/jVbjWXUnR3mQ+JqM65rCr51kkAJD5CC73rrAnasOvs4y
8aYDpKYQnNWTMjCupPZblBlVkWZ8yQgVRCc7tyjzvvBSyXYxx2kRj2TqkaSdjwaA
QmZOZQSFuCEmGISdcbAGWDxnipFe85b4Sz6FZTu65Vpqqp/QR2AyTQfnQRY27CsN
G6P3F4dxI4yJaA+F4F/JDVKXngc5krAcVRAySvCUS0rr68QD9vw0BcYYHiIHzY3o
qAxnw1w8rXvhqnF1YdiuGMaY7BIPFlDyMV3L1AqV7fSPXseTD5Fn2DQrhhapAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU3cTXqe8TkvXqMkzaHDb7hmYLGAgwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0NzcwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqoSDANBgkqhkiG9w0BAQsFAAOCAQEAuzUp
e/xiofHF1Hf89gai5uUL/rdubDnZzpHTd4z5/eP9RqKgxcNTiuusxPZcPoKuERkD
khFJf4922Zm+kfcM9MQJIRjHPxgIatzp4D528RExH2sW9ZA9akSRzifDlSUF5ji2
6czDZt7eqRb8YcD3aPdm+NYi9r3eGFYNQBKcpLp0IOjBrr1uwTOIuzN2JeQaOO6A
wnH4r9MPAi6bHzZU7jHoAX368BYsWlulIG/n0OELh3ECiCaEbzulWMuPHvZ2XygW
IIwbqaOPmjE6mr7EO5sMZQmIwni633ObcOzqF3XXj9Eq8/CEqP7laV1OCGskLaXD
BpECUeAVYtYn2GHcpg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:22 2026 by rpki-client