Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144803.roa
File: AS144803.roa (raw, json)
Hash identifier: xMv5ZstoFG4l4U1tVCAlEdtxtYnazN786tmY+l7XNLw=
Subject key identifier: 0E:40:EF:85:F6:08:16:3D:B5:E1:E7:AE:B4:83:02:47:6F:46:BC:2B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2A03B90CBA7D2BA71F049BA4B51CEB1FDCB9DE8B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144803.roa
Signing time: Fri 22 May 2026 06:46:14 +0000
ROA not before: Fri 22 May 2026 06:41:14 +0000
ROA not after: Fri 21 May 2027 06:46:14 +0000
asID: 144803
IP address blocks: 240a:a869::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:03:b9:0c:ba:7d:2b:a7:1f:04:9b:a4:b5:1c:eb:1f:dc:b9:de:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:14 2026 GMT
Not After : May 21 06:46:14 2027 GMT
Subject: CN=0E40EF85F608163DB5E1E7AEB48302476F46BC2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:fa:de:40:2a:fc:84:4b:f2:ba:2a:e9:02:1a:
a7:f4:71:6e:e5:b6:8b:e3:ed:34:e7:49:76:d9:05:
5e:cb:80:3d:15:98:d4:3a:8e:83:d1:80:03:54:78:
91:7e:2d:20:96:24:71:69:2b:87:8d:82:cc:c9:fe:
d8:2e:da:16:8c:52:9e:f3:b6:85:fa:76:31:ba:51:
68:42:d0:cc:6d:45:c4:58:db:22:39:eb:db:2f:08:
65:81:ac:68:ba:21:7f:19:df:72:26:22:d1:5e:cc:
54:05:74:c8:47:2a:f6:e5:f9:69:cf:ae:06:7b:84:
ca:c1:21:d0:f6:89:fa:7e:6e:3b:b2:4f:79:7e:f6:
ec:a8:04:a0:37:b4:99:06:7d:ff:a2:fe:f0:ee:6c:
bf:9a:a2:21:6d:47:43:05:45:64:3d:67:30:c2:4b:
a4:3b:be:86:f5:e7:3a:11:9b:4b:a1:7b:6e:ab:a9:
0c:95:ba:a9:44:e8:0c:15:1b:40:fb:15:2c:18:2d:
e1:a6:56:89:1e:1e:35:c3:78:82:7d:e5:4c:fc:05:
11:96:da:bc:41:9e:8e:e8:b6:9d:b6:42:84:1d:3e:
81:31:8c:a6:a8:e7:22:24:d7:b7:e5:42:4a:64:7c:
00:e0:d1:d2:f8:0a:b9:b6:ba:13:f8:8e:1e:e8:fa:
f5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:40:EF:85:F6:08:16:3D:B5:E1:E7:AE:B4:83:02:47:6F:46:BC:2B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144803.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a869::/32
Signature Algorithm: sha256WithRSAEncryption
15:3c:5c:78:d3:57:05:eb:b9:a0:2d:94:06:74:1a:8e:40:21:
fe:3f:b1:7d:bd:78:2e:3c:ae:75:0b:38:b0:f7:d2:f7:2d:66:
5c:55:7a:d4:c2:f2:9a:f0:3f:b7:3f:a5:75:fe:6f:4f:1e:75:
e4:b9:e3:6e:98:82:e4:9d:ca:82:23:77:44:19:a9:6a:23:b0:
76:f5:ed:0f:cc:00:1f:25:4b:e3:83:c9:1e:c3:bc:88:5e:b5:
6d:cf:7c:3b:a1:87:6b:bd:a8:a1:ba:e3:9f:e8:54:cc:d4:7f:
9d:10:15:04:f9:6c:94:26:59:3e:99:eb:47:8d:ac:b0:fe:0c:
94:7d:50:b8:f0:89:d9:8b:6d:aa:df:49:6e:d9:52:cd:b0:2d:
0f:1e:d2:2a:b1:91:1c:f0:eb:c1:3a:b7:bc:54:6d:1b:98:57:
68:56:bf:25:c2:22:58:57:98:2f:f2:14:c6:a0:02:67:d7:08:
14:0b:0e:50:ff:6d:a4:f0:5e:17:0e:d7:e8:80:31:1f:1c:b3:
28:01:5d:47:3f:25:ba:f7:aa:2b:68:78:59:37:f5:fc:45:77:
70:30:03:e5:20:5a:17:6b:91:d5:e7:09:0e:22:ca:d7:d4:36:
57:ab:6c:82:72:28:bc:45:cf:76:fa:f4:04:cd:57:3b:36:b3:
10:89:1e:6e
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUKgO5DLp9K6cfBJuktRzrH9y53oswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjQxMTRaFw0yNzA1MjEwNjQ2MTRaMDMxMTAvBgNV
BAMTKDBFNDBFRjg1RjYwODE2M0RCNUUxRTdBRUI0ODMwMjQ3NkY0NkJDMkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCN+t5AKvyES/K6KukCGqf0cW7l
tovj7TTnSXbZBV7LgD0VmNQ6joPRgANUeJF+LSCWJHFpK4eNgszJ/tgu2haMUp7z
toX6djG6UWhC0MxtRcRY2yI569svCGWBrGi6IX8Z33ImItFezFQFdMhHKvbl+WnP
rgZ7hMrBIdD2ifp+bjuyT3l+9uyoBKA3tJkGff+i/vDubL+aoiFtR0MFRWQ9ZzDC
S6Q7vob15zoRm0uhe26rqQyVuqlE6AwVG0D7FSwYLeGmVokeHjXDeIJ95Uz8BRGW
2rxBno7otp22QoQdPoExjKao5yIk17flQkpkfADg0dL4Crm2uhP4jh7o+vXvAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUDkDvhfYIFj214eeutIMCR29GvCswHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0ODAzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqoaTANBgkqhkiG9w0BAQsFAAOCAQEAFTxc
eNNXBeu5oC2UBnQajkAh/j+xfb14LjyudQs4sPfS9y1mXFV61MLymvA/tz+ldf5v
Tx515LnjbpiC5J3KgiN3RBmpaiOwdvXtD8wAHyVL44PJHsO8iF61bc98O6GHa72o
obrjn+hUzNR/nRAVBPlslCZZPpnrR42ssP4MlH1QuPCJ2Yttqt9JbtlSzbAtDx7S
KrGRHPDrwTq3vFRtG5hXaFa/JcIiWFeYL/IUxqACZ9cIFAsOUP9tpPBeFw7X6IAx
HxyzKAFdRz8luveqK2h4WTf1/EV3cDAD5SBaF2uR1ecJDiLK19Q2V6tsgnIovEXP
dvr0BM1XOzazEIkebg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:24 2026 by rpki-client