Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144799.roa
File: AS144799.roa (raw, json)
Hash identifier: +yStehspW9FC2KO8ZIhgnN67zTkpi8MWVw6LAPIudZA=
Subject key identifier: 84:C4:E3:F4:55:51:C3:3B:59:6B:F4:F9:7B:8B:9B:D6:87:96:25:D6
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1ACC631CE3D9BF1AFED9278D6E356C80E213999E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144799.roa
Signing time: Tue 26 May 2026 02:34:57 +0000
ROA not before: Tue 26 May 2026 02:29:57 +0000
ROA not after: Tue 25 May 2027 02:34:57 +0000
asID: 144799
IP address blocks: 240a:a865::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:cc:63:1c:e3:d9:bf:1a:fe:d9:27:8d:6e:35:6c:80:e2:13:99:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:29:57 2026 GMT
Not After : May 25 02:34:57 2027 GMT
Subject: CN=84C4E3F45551C33B596BF4F97B8B9BD6879625D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8e:08:dd:55:fb:87:5f:d0:10:24:48:fb:a9:
b8:d4:7e:af:9f:d0:20:69:25:88:2b:50:8c:20:35:
2e:a1:8b:fb:4d:64:d2:b0:77:4d:99:a7:ec:b9:09:
5f:33:88:e4:03:d6:36:af:63:07:d9:ca:3a:4e:a8:
90:7b:1e:02:c6:cd:04:fa:70:a8:21:e8:65:11:0f:
99:75:c1:17:28:b6:56:5c:ad:a3:f0:55:32:b6:62:
14:98:37:73:26:23:46:32:54:ea:c0:e4:9d:96:7e:
74:ae:bd:a1:ed:b0:a9:69:a6:52:02:3a:f0:c0:50:
1d:ae:b8:eb:8f:b8:04:a9:49:cd:e9:cc:f0:cb:a4:
ed:ef:08:41:1a:3d:24:3f:42:e7:f2:d4:9e:b2:b5:
21:95:68:f6:db:6f:79:1d:43:0a:de:eb:60:b2:49:
8a:e1:e4:04:f9:1e:13:b5:46:d2:97:e1:c8:8d:a9:
fb:d8:9a:a9:be:53:eb:e9:95:07:44:7f:67:37:8c:
5f:1f:2a:e9:d5:a1:50:d6:b2:8e:b2:19:c4:0a:d5:
c7:a8:37:52:54:d7:51:8f:77:ac:53:df:38:03:9e:
c4:18:5a:2c:c1:00:7b:2c:2b:5a:59:b0:dd:c8:41:
99:af:5f:52:3e:8b:e0:ce:bd:40:49:42:cc:43:50:
d2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C4:E3:F4:55:51:C3:3B:59:6B:F4:F9:7B:8B:9B:D6:87:96:25:D6
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144799.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a865::/32
Signature Algorithm: sha256WithRSAEncryption
46:57:83:b9:84:bd:1d:6b:df:db:8a:bd:3d:64:12:f3:f4:f4:
e2:99:77:3a:d3:21:43:cb:ea:19:a6:70:45:ab:ae:22:6e:c5:
0a:e9:01:9a:b4:69:50:3d:5d:16:7e:4f:77:b7:7b:68:bc:f8:
27:74:c2:f5:fe:19:89:97:99:55:13:2e:d8:c1:5e:75:34:43:
62:c0:8d:ef:70:9a:b9:65:2a:2b:72:bd:6e:2d:25:61:7f:c4:
c2:51:5d:43:61:64:c1:ac:58:ba:be:2a:88:94:2d:10:c0:9f:
38:8f:49:d6:a8:15:57:2c:b7:0c:ae:d8:87:73:46:e4:e7:46:
94:d7:a1:4d:cb:0a:0e:0b:86:a8:71:0e:3e:dc:be:22:c1:be:
f6:df:ef:49:61:67:b7:95:75:0c:85:c2:16:5e:e8:8a:d8:e5:
61:26:4c:7d:32:8a:78:1d:8d:9f:6e:a4:4f:e9:af:98:d5:68:
be:6b:86:2d:01:73:96:d4:3c:60:ca:3f:db:48:bd:d7:2a:f5:
14:09:dc:3c:b6:00:e0:38:ea:f0:0a:f0:6b:6d:32:98:77:8e:
77:2d:e6:43:47:92:5b:d3:99:c8:38:22:2b:a3:fc:35:2a:c1:
55:c6:b4:a8:c2:a5:cf:fd:16:57:95:e1:57:33:4b:9c:06:80:
f9:84:72:4c
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUGsxjHOPZvxr+2SeNbjVsgOITmZ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMjI5NTdaFw0yNzA1MjUwMjM0NTdaMDMxMTAvBgNV
BAMTKDg0QzRFM0Y0NTU1MUMzM0I1OTZCRjRGOTdCOEI5QkQ2ODc5NjI1RDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWjgjdVfuHX9AQJEj7qbjUfq+f
0CBpJYgrUIwgNS6hi/tNZNKwd02Zp+y5CV8ziOQD1javYwfZyjpOqJB7HgLGzQT6
cKgh6GURD5l1wRcotlZcraPwVTK2YhSYN3MmI0YyVOrA5J2WfnSuvaHtsKlpplIC
OvDAUB2uuOuPuASpSc3pzPDLpO3vCEEaPSQ/Qufy1J6ytSGVaPbbb3kdQwre62Cy
SYrh5AT5HhO1RtKX4ciNqfvYmqm+U+vplQdEf2c3jF8fKunVoVDWso6yGcQK1ceo
N1JU11GPd6xT3zgDnsQYWizBAHssK1pZsN3IQZmvX1I+i+DOvUBJQsxDUNKdAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUhMTj9FVRwztZa/T5e4ub1oeWJdYwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0Nzk5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqoZTANBgkqhkiG9w0BAQsFAAOCAQEARleD
uYS9HWvf24q9PWQS8/T04pl3OtMhQ8vqGaZwRauuIm7FCukBmrRpUD1dFn5Pd7d7
aLz4J3TC9f4ZiZeZVRMu2MFedTRDYsCN73CauWUqK3K9bi0lYX/EwlFdQ2FkwaxY
ur4qiJQtEMCfOI9J1qgVVyy3DK7Yh3NG5OdGlNehTcsKDguGqHEOPty+IsG+9t/v
SWFnt5V1DIXCFl7oitjlYSZMfTKKeB2Nn26kT+mvmNVovmuGLQFzltQ8YMo/20i9
1yr1FAncPLYA4Djq8Arwa20ymHeOdy3mQ0eSW9OZyDgiK6P8NSrBVca0qMKlz/0W
V5XhVzNLnAaA+YRyTA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:43 2026 by rpki-client