Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144819.roa
File: AS144819.roa (raw, json)
Hash identifier: U9G9ALrsIv/TmH0te4RCF8emNSBek78alwk3HwJjdOI=
Subject key identifier: B6:70:AA:7F:A3:B4:1C:3F:86:AF:02:E7:91:F6:12:0C:43:53:70:BE
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3168F3F7024CADAAEE784BE666A1868B99BF381E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144819.roa
Signing time: Mon 25 May 2026 02:22:14 +0000
ROA not before: Mon 25 May 2026 02:17:14 +0000
ROA not after: Mon 24 May 2027 02:22:14 +0000
asID: 144819
IP address blocks: 240a:a879::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:68:f3:f7:02:4c:ad:aa:ee:78:4b:e6:66:a1:86:8b:99:bf:38:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:14 2026 GMT
Not After : May 24 02:22:14 2027 GMT
Subject: CN=B670AA7FA3B41C3F86AF02E791F6120C435370BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:be:64:f9:e7:b3:e9:ae:fe:79:99:81:08:6c:
a9:29:71:e9:eb:be:56:ba:bd:d3:df:d8:f0:ec:1a:
67:70:14:11:0b:38:53:7c:a7:4b:34:35:68:dc:17:
ce:fc:cc:84:eb:c9:ee:8f:af:d3:ef:65:a5:50:e9:
bc:e3:80:f7:7d:42:3b:2e:bd:5b:dc:a5:52:78:ca:
6f:5b:23:9c:92:a2:ce:70:d2:d9:e7:89:4b:de:25:
67:29:4a:e7:d4:f2:3d:bd:f2:e1:8c:5c:3d:ee:76:
26:28:9b:a5:a3:80:83:5f:76:3c:ac:3b:70:f9:da:
28:bc:b3:5e:33:dc:15:69:d3:c2:e3:91:4d:fd:b0:
a4:52:5a:67:1a:be:e3:d7:7a:37:fc:70:11:a8:dd:
5b:a2:1a:0d:f6:38:3e:25:d2:60:19:91:4f:ae:20:
a3:68:48:e0:92:a9:01:f9:6f:5b:75:cb:83:a1:e2:
b0:45:37:b0:42:d3:7d:f0:a9:58:9f:b6:6a:7d:7e:
d2:00:cd:23:82:b5:1f:bb:c1:77:8c:8c:0b:4f:d3:
59:e3:2a:a8:ee:5d:48:89:f6:4d:2e:0c:04:ba:b7:
3d:80:b6:1b:3f:10:ce:d5:4f:53:7a:1f:9c:78:aa:
eb:0b:24:cd:8c:ac:4a:f2:ea:61:ab:52:21:05:b5:
7c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:70:AA:7F:A3:B4:1C:3F:86:AF:02:E7:91:F6:12:0C:43:53:70:BE
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144819.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a879::/32
Signature Algorithm: sha256WithRSAEncryption
67:60:82:c2:e0:b1:e5:b2:24:52:6a:f1:93:17:95:5d:54:6f:
ea:19:92:13:31:ec:c1:16:f6:34:fa:75:de:cb:b4:ae:0b:d6:
0a:92:f1:33:2b:a8:fd:f5:b1:3e:48:ca:81:d5:c3:52:a4:21:
cd:b4:d2:7c:33:58:65:18:12:68:19:eb:35:bb:ae:c0:91:92:
c6:ec:f6:e8:53:f5:33:11:5b:ff:7a:53:81:94:1e:78:91:be:
9e:69:77:47:e1:ef:17:1d:5a:e1:4d:cc:25:7b:7d:07:39:86:
47:68:67:15:73:62:9b:92:9a:72:dd:47:f0:82:50:2a:f5:9a:
0f:13:94:bf:80:1a:f9:bd:01:5f:6c:43:bd:cd:1a:43:bb:da:
73:4e:eb:2e:0b:50:fe:d9:ca:a8:a9:4d:4f:12:a8:fc:b2:d5:
aa:ad:f3:a9:fa:cb:bd:7a:37:4f:ef:06:c3:fb:7b:41:03:89:
62:7b:57:4d:47:3f:35:b3:65:8f:26:28:24:4e:0f:b8:f0:6b:
17:bc:b1:f7:46:8e:a4:37:62:4f:68:7a:20:94:fc:72:fe:41:
d4:7c:55:2b:19:13:93:2e:f8:09:a1:3e:76:18:30:2a:a0:e5:
30:8e:dd:d5:b4:a7:9a:0f:a2:3e:1d:95:cf:3e:8e:b6:1b:2b:
f0:55:43:54
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUMWjz9wJMrarueEvmZqGGi5m/OB4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMjE3MTRaFw0yNzA1MjQwMjIyMTRaMDMxMTAvBgNV
BAMTKEI2NzBBQTdGQTNCNDFDM0Y4NkFGMDJFNzkxRjYxMjBDNDM1MzcwQkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7vmT557Pprv55mYEIbKkpcenr
vla6vdPf2PDsGmdwFBELOFN8p0s0NWjcF878zITrye6Pr9PvZaVQ6bzjgPd9Qjsu
vVvcpVJ4ym9bI5ySos5w0tnniUveJWcpSufU8j298uGMXD3udiYom6WjgINfdjys
O3D52ii8s14z3BVp08LjkU39sKRSWmcavuPXejf8cBGo3VuiGg32OD4l0mAZkU+u
IKNoSOCSqQH5b1t1y4Oh4rBFN7BC033wqViftmp9ftIAzSOCtR+7wXeMjAtP01nj
KqjuXUiJ9k0uDAS6tz2Aths/EM7VT1N6H5x4qusLJM2MrEry6mGrUiEFtXxrAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUtnCqf6O0HD+GrwLnkfYSDENTcL4wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0ODE5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqoeTANBgkqhkiG9w0BAQsFAAOCAQEAZ2CC
wuCx5bIkUmrxkxeVXVRv6hmSEzHswRb2NPp13su0rgvWCpLxMyuo/fWxPkjKgdXD
UqQhzbTSfDNYZRgSaBnrNbuuwJGSxuz26FP1MxFb/3pTgZQeeJG+nml3R+HvFx1a
4U3MJXt9BzmGR2hnFXNim5Kact1H8IJQKvWaDxOUv4Aa+b0BX2xDvc0aQ7vac07r
LgtQ/tnKqKlNTxKo/LLVqq3zqfrLvXo3T+8Gw/t7QQOJYntXTUc/NbNljyYoJE4P
uPBrF7yx90aOpDdiT2h6IJT8cv5B1HxVKxkTky74CaE+dhgwKqDlMI7d1bSnmg+i
Ph2Vzz6Othsr8FVDVA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:49 2026 by rpki-client