Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144789.roa
File: AS144789.roa (raw, json)
Hash identifier: ad4C9mzCajJxR8UU4OdAmsLrKABbdzIS/IT/3/IQsTA=
Subject key identifier: 54:7B:D2:2D:8F:E6:6A:5B:A3:02:54:6E:C0:9C:E0:D4:94:C9:61:88
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7E7DEE1859CD8BB7096D4473C85CAF1A92468500
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144789.roa
Signing time: Fri 22 May 2026 04:07:54 +0000
ROA not before: Fri 22 May 2026 04:02:54 +0000
ROA not after: Fri 21 May 2027 04:07:54 +0000
asID: 144789
IP address blocks: 240a:a85b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:7d:ee:18:59:cd:8b:b7:09:6d:44:73:c8:5c:af:1a:92:46:85:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:02:54 2026 GMT
Not After : May 21 04:07:54 2027 GMT
Subject: CN=547BD22D8FE66A5BA302546EC09CE0D494C96188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:79:ce:c0:25:02:34:c5:33:6d:b0:1d:d7:db:
d6:d4:a6:76:0f:d6:9c:24:69:6d:d6:ac:ee:f4:92:
ca:b3:f0:c8:57:3f:92:35:25:a9:25:5e:51:02:a0:
d2:26:3e:54:c1:7d:e9:21:ce:30:54:f2:80:30:4b:
b2:e6:a3:4b:b4:39:80:2e:46:75:18:5c:8f:26:f9:
88:f9:1b:81:20:b3:9d:8d:b4:7d:c1:d9:65:c6:11:
a1:5c:61:67:08:67:0a:5f:09:44:69:43:8f:98:72:
a8:b0:b6:08:7c:ac:d4:d4:c5:27:d0:5f:81:fb:5e:
93:da:ba:df:7e:a5:85:6a:82:f1:a9:80:f7:c2:11:
ba:3d:72:11:9a:54:0a:c8:15:92:c2:89:67:2c:3b:
82:96:cc:fa:26:5b:ff:23:14:c8:f2:9e:56:60:04:
81:b6:7d:8a:b3:6b:d3:1a:61:d8:93:f6:74:89:51:
ee:6a:9c:de:41:ce:03:81:75:30:31:56:86:df:a1:
d6:7e:b2:13:83:31:90:db:f0:53:68:0e:ac:37:1c:
ea:70:59:e3:ad:65:db:a0:aa:88:d8:d5:06:fe:82:
7e:66:54:52:88:cf:23:61:05:10:b4:17:f5:37:cc:
96:ba:ce:25:79:4b:4e:79:5f:f8:98:ed:15:47:1f:
81:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:7B:D2:2D:8F:E6:6A:5B:A3:02:54:6E:C0:9C:E0:D4:94:C9:61:88
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144789.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a85b::/32
Signature Algorithm: sha256WithRSAEncryption
2b:a7:cc:57:89:a3:97:e9:85:ed:62:51:bb:82:ba:20:09:ef:
4c:01:de:3c:3a:04:57:33:c7:2a:84:fc:20:e6:12:78:93:b7:
26:14:57:fb:00:8d:7e:7b:da:14:73:b0:41:45:81:96:98:55:
d3:eb:b8:43:21:94:aa:13:41:ac:90:34:7f:07:68:ed:fe:1b:
59:dd:c5:c8:be:96:35:3c:57:a0:c8:ce:bc:21:a2:42:d1:6b:
26:f4:d6:a4:36:76:32:06:e1:43:41:23:56:78:3c:e4:9d:7d:
e8:fb:9c:94:94:27:80:a1:7f:29:90:d0:80:6b:eb:db:ff:f1:
cb:dc:de:b3:2a:e0:21:8a:c1:18:b1:88:40:03:21:26:19:eb:
87:73:ec:eb:86:ff:2b:20:bf:c8:b5:4d:62:a7:21:1c:ea:d4:
68:8b:00:87:41:a0:a7:d3:44:b3:d4:0b:9d:d3:6d:da:85:ea:
2e:e5:74:ff:28:7f:99:8c:1b:4d:c2:5c:62:7b:43:c1:05:3c:
73:36:e7:51:0b:ac:bb:a6:a7:07:83:ee:82:cb:b2:86:0e:17:
ea:c2:29:19:25:fa:76:30:bb:62:ac:f6:75:fb:b3:29:5f:d0:
53:a8:10:e8:cc:ee:e8:a0:5e:6b:0f:24:f3:37:f2:fa:e3:92:
34:8f:14:18
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUfn3uGFnNi7cJbURzyFyvGpJGhQAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNDAyNTRaFw0yNzA1MjEwNDA3NTRaMDMxMTAvBgNV
BAMTKDU0N0JEMjJEOEZFNjZBNUJBMzAyNTQ2RUMwOUNFMEQ0OTRDOTYxODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxec7AJQI0xTNtsB3X29bUpnYP
1pwkaW3WrO70ksqz8MhXP5I1JaklXlECoNImPlTBfekhzjBU8oAwS7Lmo0u0OYAu
RnUYXI8m+Yj5G4Egs52NtH3B2WXGEaFcYWcIZwpfCURpQ4+Ycqiwtgh8rNTUxSfQ
X4H7XpPaut9+pYVqgvGpgPfCEbo9chGaVArIFZLCiWcsO4KWzPomW/8jFMjynlZg
BIG2fYqza9MaYdiT9nSJUe5qnN5BzgOBdTAxVobfodZ+shODMZDb8FNoDqw3HOpw
WeOtZdugqojY1Qb+gn5mVFKIzyNhBRC0F/U3zJa6ziV5S055X/iY7RVHH4HhAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUVHvSLY/malujAlRuwJzg1JTJYYgwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0Nzg5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqoWzANBgkqhkiG9w0BAQsFAAOCAQEAK6fM
V4mjl+mF7WJRu4K6IAnvTAHePDoEVzPHKoT8IOYSeJO3JhRX+wCNfnvaFHOwQUWB
lphV0+u4QyGUqhNBrJA0fwdo7f4bWd3FyL6WNTxXoMjOvCGiQtFrJvTWpDZ2Mgbh
Q0EjVng85J196PuclJQngKF/KZDQgGvr2//xy9zesyrgIYrBGLGIQAMhJhnrh3Ps
64b/KyC/yLVNYqchHOrUaIsAh0Ggp9NEs9QLndNt2oXqLuV0/yh/mYwbTcJcYntD
wQU8czbnUQusu6anB4Pugsuyhg4X6sIpGSX6djC7Yqz2dfuzKV/QU6gQ6Mzu6KBe
aw8k8zfy+uOSNI8UGA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:58 2026 by rpki-client