Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144825.roa
File: AS144825.roa (raw, json)
Hash identifier: QSagLmsyHCY3PVOugaFsotn7WcyH3KgcmspnxbUj63w=
Subject key identifier: EF:AD:0A:BD:98:3E:79:10:D4:A1:FA:C7:12:63:D2:CB:76:D4:21:A4
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 620B564CF63B1A4130D69D7E229062D11E7C2077
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144825.roa
Signing time: Fri 22 May 2026 07:32:20 +0000
ROA not before: Fri 22 May 2026 07:27:20 +0000
ROA not after: Fri 21 May 2027 07:32:20 +0000
asID: 144825
IP address blocks: 240a:a87f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:0b:56:4c:f6:3b:1a:41:30:d6:9d:7e:22:90:62:d1:1e:7c:20:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:20 2026 GMT
Not After : May 21 07:32:20 2027 GMT
Subject: CN=EFAD0ABD983E7910D4A1FAC71263D2CB76D421A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d3:73:dc:3e:b1:68:85:c8:8f:33:f4:19:f0:
23:c0:db:a2:64:4c:64:98:0e:c4:c5:60:b2:b0:9f:
9a:17:50:f3:2b:48:60:fa:c3:52:6c:16:b3:05:2e:
95:4e:63:8e:e6:fa:ba:6c:b8:31:0a:9d:6c:8d:2f:
ca:a0:07:1d:3f:5c:88:f5:8e:4c:4f:d4:fe:69:d0:
35:f6:a7:8a:54:a9:c4:0f:fd:25:29:76:d7:b3:65:
4b:98:c1:d2:c5:ac:fe:67:14:55:ae:ce:10:88:d2:
58:45:eb:32:26:f9:a9:ba:d4:88:cf:96:75:56:1e:
ac:fa:e6:ad:5b:34:73:bf:b4:33:18:a2:7a:ce:12:
42:f2:45:2e:e2:4c:7c:de:8a:a3:c2:1b:60:66:af:
78:67:59:af:e1:62:d8:15:ae:d4:24:07:72:16:d4:
16:2b:8d:5e:c1:46:94:4c:56:d0:71:36:6f:cf:b6:
8f:60:14:45:08:ad:f1:d3:e9:49:d1:65:e5:ab:d8:
da:f0:f7:db:3e:4d:40:1a:fb:5b:07:97:47:8d:7e:
6b:35:ef:b2:64:d9:b4:27:da:67:2e:29:43:2c:4f:
06:ce:e4:a7:a8:82:f2:9f:9e:f4:97:a5:55:df:4f:
67:18:87:62:34:1b:70:ba:52:8b:42:80:7d:c3:f8:
d4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:AD:0A:BD:98:3E:79:10:D4:A1:FA:C7:12:63:D2:CB:76:D4:21:A4
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144825.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a87f::/32
Signature Algorithm: sha256WithRSAEncryption
0f:d2:7b:d7:d1:0d:5a:1c:d1:d9:c4:30:ef:05:dc:2a:e8:3c:
43:c0:43:1f:ca:5a:2c:f1:92:4a:00:19:c7:0b:04:36:88:08:
72:85:26:1c:14:46:3d:76:11:f2:ec:dd:8d:0f:aa:6e:ba:0e:
59:18:a4:85:4d:fa:51:78:71:17:cb:86:58:57:ab:3f:34:1b:
60:48:93:70:48:0e:df:56:b9:50:36:2e:16:60:70:be:4a:4b:
28:84:ca:83:f8:9b:c4:3d:ac:f8:95:c8:0d:f3:ff:bb:ca:88:
92:57:89:47:2b:c8:3c:5e:b9:a4:19:b4:6c:ff:b7:8a:10:c4:
e7:47:b6:b6:e8:7b:20:94:71:ae:9d:b6:09:4c:f2:04:d7:47:
c6:8e:96:71:09:74:46:ef:0a:bf:24:10:0e:ff:11:7c:10:7d:
8f:96:61:a9:34:56:a5:77:46:93:3f:ae:c9:f7:49:d2:26:07:
fa:f6:64:17:7a:e6:ca:be:f3:91:e6:e6:f2:41:b5:54:73:5f:
2d:b8:bb:04:a1:af:90:1d:af:f9:a5:a7:a4:5f:25:d2:e9:cb:
9c:43:de:31:ba:10:7b:38:0d:7b:53:bd:b5:f8:33:b3:c6:1f:
1c:d0:ef:60:16:99:fe:9d:3c:ad:8a:2a:c2:30:f4:ed:55:57:
49:49:98:fe
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUYgtWTPY7GkEw1p1+IpBi0R58IHcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzI3MjBaFw0yNzA1MjEwNzMyMjBaMDMxMTAvBgNV
BAMTKEVGQUQwQUJEOTgzRTc5MTBENEExRkFDNzEyNjNEMkNCNzZENDIxQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC103PcPrFohciPM/QZ8CPA26Jk
TGSYDsTFYLKwn5oXUPMrSGD6w1JsFrMFLpVOY47m+rpsuDEKnWyNL8qgBx0/XIj1
jkxP1P5p0DX2p4pUqcQP/SUpdtezZUuYwdLFrP5nFFWuzhCI0lhF6zIm+am61IjP
lnVWHqz65q1bNHO/tDMYonrOEkLyRS7iTHzeiqPCG2Bmr3hnWa/hYtgVrtQkB3IW
1BYrjV7BRpRMVtBxNm/Pto9gFEUIrfHT6UnRZeWr2Nrw99s+TUAa+1sHl0eNfms1
77Jk2bQn2mcuKUMsTwbO5KeogvKfnvSXpVXfT2cYh2I0G3C6UotCgH3D+NSFAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU760KvZg+eRDUofrHEmPSy3bUIaQwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0ODI1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqofzANBgkqhkiG9w0BAQsFAAOCAQEAD9J7
19ENWhzR2cQw7wXcKug8Q8BDH8paLPGSSgAZxwsENogIcoUmHBRGPXYR8uzdjQ+q
broOWRikhU36UXhxF8uGWFerPzQbYEiTcEgO31a5UDYuFmBwvkpLKITKg/ibxD2s
+JXIDfP/u8qIkleJRyvIPF65pBm0bP+3ihDE50e2tuh7IJRxrp22CUzyBNdHxo6W
cQl0Ru8KvyQQDv8RfBB9j5ZhqTRWpXdGkz+uyfdJ0iYH+vZkF3rmyr7zkebm8kG1
VHNfLbi7BKGvkB2v+aWnpF8l0unLnEPeMboQezgNe1O9tfgzs8YfHNDvYBaZ/p08
rYoqwjD07VVXSUmY/g==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:06 2026 by rpki-client