Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144791.roa
File: AS144791.roa (raw, json)
Hash identifier: jqjzQ2xYVUCX5qEFiUS7Tilv1JOv3jN+YzmqVFHsd+w=
Subject key identifier: F1:2A:81:25:EF:FA:AF:06:EE:C8:1A:EF:5A:C3:4D:2E:EE:9E:84:79
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 64A953E8392FD1373ADC1EBDFC90507F5BED5671
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144791.roa
Signing time: Fri 22 May 2026 06:46:12 +0000
ROA not before: Fri 22 May 2026 06:41:12 +0000
ROA not after: Fri 21 May 2027 06:46:12 +0000
asID: 144791
IP address blocks: 240a:a85d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:a9:53:e8:39:2f:d1:37:3a:dc:1e:bd:fc:90:50:7f:5b:ed:56:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:12 2026 GMT
Not After : May 21 06:46:12 2027 GMT
Subject: CN=F12A8125EFFAAF06EEC81AEF5AC34D2EEE9E8479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:83:7f:32:d9:39:44:4f:20:86:b7:9b:f4:72:
05:7e:f4:e5:ec:bd:8b:82:fd:3b:fb:e4:7e:75:57:
ed:6c:52:68:60:ea:08:2a:a7:6c:58:3f:e2:8b:74:
7e:41:43:b6:07:c4:5e:8a:05:2e:52:d1:15:33:9d:
12:27:22:34:66:ca:62:1c:58:62:31:4e:b0:c3:ad:
b5:85:93:12:f3:87:c0:75:68:69:2a:06:84:1f:f9:
af:d0:1c:44:32:f8:4a:30:e4:3c:cc:45:ea:2d:a3:
a6:45:b4:9d:ea:f9:81:0a:9b:db:5f:7e:c6:8c:53:
8d:92:de:b8:fc:4b:6f:8a:5c:27:b9:c2:0d:32:da:
1d:42:88:df:e6:07:62:39:d7:fb:19:6a:68:80:77:
78:19:36:03:ba:cc:bb:77:c6:8b:1e:16:fa:e3:7f:
49:3d:d0:4a:d0:74:cf:6e:e6:3c:0a:86:fb:d6:5d:
e9:56:42:a6:9a:fc:bd:0a:c3:fe:56:88:ba:21:01:
97:c6:5b:b3:4b:0f:22:87:3b:d3:10:76:9a:a2:c9:
f6:96:45:85:1b:0b:e9:41:ce:75:8e:16:e3:2b:ff:
d6:36:52:db:1a:96:fa:6f:83:17:5d:dc:f0:73:40:
c1:c0:2b:3a:5d:45:a3:a2:0b:2d:92:b1:e1:31:0a:
b5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:2A:81:25:EF:FA:AF:06:EE:C8:1A:EF:5A:C3:4D:2E:EE:9E:84:79
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144791.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a85d::/32
Signature Algorithm: sha256WithRSAEncryption
8a:42:00:cd:87:10:cd:f9:f1:69:7b:88:d0:e3:89:20:87:7e:
0e:99:58:6d:cc:6f:f7:7d:27:8b:19:3e:e8:c1:c6:cf:54:76:
84:63:3e:01:f5:cc:0f:81:13:95:33:cc:fa:8a:fe:58:e8:38:
05:65:89:d0:04:d3:c1:8f:7a:0a:b9:07:09:fd:a0:0d:42:0a:
3f:7c:4a:95:3c:ae:f3:a8:58:a6:2d:5a:ad:b5:81:9b:f0:48:
a5:9a:3e:f0:7f:58:44:2b:14:94:5d:2b:8c:86:ea:fb:59:c6:
0c:14:74:ad:ba:7d:19:bf:97:e9:e9:e0:f2:29:21:c1:21:da:
3e:23:e2:ee:da:66:9b:b7:ab:06:0e:06:da:fb:27:c1:13:fe:
de:7d:07:54:29:a6:c0:08:4d:20:9d:f5:5d:07:14:24:f7:15:
9c:61:27:45:2d:1a:a1:f7:9f:64:08:db:84:54:c7:d4:80:55:
c0:09:9b:7a:89:9f:dd:bb:a7:a5:90:15:06:c9:7d:96:02:24:
58:07:f0:3b:36:00:35:e7:cd:de:da:1c:72:0b:23:74:a6:a9:
db:a9:ea:4d:42:de:a7:e0:67:a0:8e:0e:8f:63:16:e6:36:23:
46:17:78:c8:43:fe:25:ab:3c:d2:83:04:fd:19:80:26:5e:e0:
f6:42:14:af
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUZKlT6Dkv0Tc63B69/JBQf1vtVnEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjQxMTJaFw0yNzA1MjEwNjQ2MTJaMDMxMTAvBgNV
BAMTKEYxMkE4MTI1RUZGQUFGMDZFRUM4MUFFRjVBQzM0RDJFRUU5RTg0NzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2g38y2TlETyCGt5v0cgV+9OXs
vYuC/Tv75H51V+1sUmhg6ggqp2xYP+KLdH5BQ7YHxF6KBS5S0RUznRInIjRmymIc
WGIxTrDDrbWFkxLzh8B1aGkqBoQf+a/QHEQy+Eow5DzMReoto6ZFtJ3q+YEKm9tf
fsaMU42S3rj8S2+KXCe5wg0y2h1CiN/mB2I51/sZamiAd3gZNgO6zLt3xoseFvrj
f0k90ErQdM9u5jwKhvvWXelWQqaa/L0Kw/5WiLohAZfGW7NLDyKHO9MQdpqiyfaW
RYUbC+lBznWOFuMr/9Y2Utsalvpvgxdd3PBzQMHAKzpdRaOiCy2SseExCrXvAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU8SqBJe/6rwbuyBrvWsNNLu6ehHkwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0NzkxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqoXTANBgkqhkiG9w0BAQsFAAOCAQEAikIA
zYcQzfnxaXuI0OOJIId+DplYbcxv930nixk+6MHGz1R2hGM+AfXMD4ETlTPM+or+
WOg4BWWJ0ATTwY96CrkHCf2gDUIKP3xKlTyu86hYpi1arbWBm/BIpZo+8H9YRCsU
lF0rjIbq+1nGDBR0rbp9Gb+X6eng8ikhwSHaPiPi7tpmm7erBg4G2vsnwRP+3n0H
VCmmwAhNIJ31XQcUJPcVnGEnRS0aofefZAjbhFTH1IBVwAmbeomf3bunpZAVBsl9
lgIkWAfwOzYANefN3toccgsjdKap26nqTULep+BnoI4Oj2MW5jYjRhd4yEP+Jas8
0oME/RmAJl7g9kIUrw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:34 2026 by rpki-client