Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144796.roa
File: AS144796.roa (raw, json)
Hash identifier: f+XZZFP2f4+uMa1vufbp5B3hiB/kt23s7X3eHj3zbRw=
Subject key identifier: 72:1D:EF:57:58:48:51:2A:FC:27:AC:E7:62:96:F0:E4:05:4A:22:BE
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 77ADA590F613F05D28F7335E6CCD1CAA92F25E63
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144796.roa
Signing time: Tue 26 May 2026 02:35:12 +0000
ROA not before: Tue 26 May 2026 02:30:12 +0000
ROA not after: Tue 25 May 2027 02:35:12 +0000
asID: 144796
IP address blocks: 240a:a862::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:ad:a5:90:f6:13:f0:5d:28:f7:33:5e:6c:cd:1c:aa:92:f2:5e:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:12 2026 GMT
Not After : May 25 02:35:12 2027 GMT
Subject: CN=721DEF575848512AFC27ACE76296F0E4054A22BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:c8:0d:41:61:5d:cc:e1:e9:50:ca:15:48:64:
57:92:f5:ec:fe:56:11:71:3d:55:dd:cb:23:41:1f:
c2:c9:87:15:7c:e4:a0:ca:3b:5d:ba:ea:ca:11:0e:
9e:77:05:62:5b:36:5c:9e:05:b2:52:1f:31:4e:a5:
6d:5d:3a:07:c8:00:aa:66:99:31:6c:e1:01:d0:b9:
2a:28:3b:b8:28:93:6c:de:ac:87:c0:82:a0:e5:11:
0b:e7:91:32:2d:c1:ac:e4:e2:1f:36:d6:13:56:fd:
41:af:63:03:b5:46:f5:3d:c7:35:a4:c8:60:7a:2f:
e1:61:80:46:39:5b:47:dd:e6:c9:ae:55:e7:c3:20:
aa:33:00:95:50:2d:d7:39:ed:f9:4f:39:39:85:b8:
31:cd:61:37:55:c6:8a:d7:fa:2f:d1:26:59:28:17:
db:ec:37:42:37:63:55:3c:68:d5:15:7c:01:dc:d0:
f1:f0:48:61:e4:60:5c:49:fb:a8:db:48:57:67:cb:
a1:60:1f:9b:e3:99:6f:0a:d7:5f:e3:ce:3d:5f:1f:
51:d2:28:7c:e1:3e:2c:7f:7f:53:50:a5:e9:e8:01:
32:f4:ba:2e:1c:93:39:2c:16:e0:56:94:99:6f:5e:
83:88:62:99:8c:07:2c:18:1d:34:b2:10:a9:1a:94:
59:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:1D:EF:57:58:48:51:2A:FC:27:AC:E7:62:96:F0:E4:05:4A:22:BE
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144796.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a862::/32
Signature Algorithm: sha256WithRSAEncryption
00:04:9f:fb:e1:c8:69:88:4d:1d:fe:e2:04:e2:6b:96:dd:5c:
21:e2:9d:e1:65:50:bb:98:72:0a:d3:15:17:9f:e6:ec:8b:de:
12:21:d4:c3:c3:e0:d8:18:d2:95:1f:d3:1f:b2:f8:19:0a:8e:
9b:02:4d:fa:3b:31:be:28:87:04:ea:10:d3:be:ca:2f:10:75:
21:f2:e2:93:67:b2:67:28:19:74:7d:48:b7:40:2c:ed:b8:45:
91:57:e2:99:28:b7:f2:fa:be:83:1e:c8:1b:1e:cc:3c:12:2a:
63:63:a8:be:1e:2c:4b:65:99:b1:c2:ad:e4:bd:05:06:13:63:
d4:96:85:f6:70:18:16:f4:f1:52:8d:90:69:6d:af:ba:33:f7:
1a:9c:f2:a3:bb:e6:10:3d:0b:b1:68:1d:bb:83:5a:fd:58:93:
16:b4:55:43:97:90:bd:9a:6d:5f:be:b9:86:21:5d:7a:24:ee:
bc:2a:59:7a:3e:a9:f2:ce:9c:c2:d6:66:48:f9:3f:35:be:f6:
06:9f:45:d9:db:6c:a2:7d:6f:4a:76:14:c9:58:b5:bb:9e:cd:
36:48:7b:c5:63:17:ea:26:6a:56:47:28:2d:ee:4f:c3:61:71:
4f:97:d3:ee:ab:ed:6b:e0:5a:47:a2:ca:d2:30:b3:9f:53:75:
58:75:63:56
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUd62lkPYT8F0o9zNebM0cqpLyXmMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMjMwMTJaFw0yNzA1MjUwMjM1MTJaMDMxMTAvBgNV
BAMTKDcyMURFRjU3NTg0ODUxMkFGQzI3QUNFNzYyOTZGMEU0MDU0QTIyQkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxyA1BYV3M4elQyhVIZFeS9ez+
VhFxPVXdyyNBH8LJhxV85KDKO1266soRDp53BWJbNlyeBbJSHzFOpW1dOgfIAKpm
mTFs4QHQuSooO7gok2zerIfAgqDlEQvnkTItwazk4h821hNW/UGvYwO1RvU9xzWk
yGB6L+FhgEY5W0fd5smuVefDIKozAJVQLdc57flPOTmFuDHNYTdVxorX+i/RJlko
F9vsN0I3Y1U8aNUVfAHc0PHwSGHkYFxJ+6jbSFdny6FgH5vjmW8K11/jzj1fH1HS
KHzhPix/f1NQpenoATL0ui4ckzksFuBWlJlvXoOIYpmMBywYHTSyEKkalFk3AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUch3vV1hIUSr8J6znYpbw5AVKIr4wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0Nzk2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqoYjANBgkqhkiG9w0BAQsFAAOCAQEAAASf
++HIaYhNHf7iBOJrlt1cIeKd4WVQu5hyCtMVF5/m7IveEiHUw8Pg2BjSlR/TH7L4
GQqOmwJN+jsxviiHBOoQ077KLxB1IfLik2eyZygZdH1It0As7bhFkVfimSi38vq+
gx7IGx7MPBIqY2Oovh4sS2WZscKt5L0FBhNj1JaF9nAYFvTxUo2QaW2vujP3Gpzy
o7vmED0LsWgdu4Na/ViTFrRVQ5eQvZptX765hiFdeiTuvCpZej6p8s6cwtZmSPk/
Nb72Bp9F2dtson1vSnYUyVi1u57NNkh7xWMX6iZqVkcoLe5Pw2FxT5fT7qvta+Ba
R6LK0jCzn1N1WHVjVg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:21 2026 by rpki-client