Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144840.roa
File: AS144840.roa (raw, json)
Hash identifier: pQXlljW66y/0axasdCCfX2wHaJxEyON3azRvCKYTnSM=
Subject key identifier: A1:44:87:E6:BA:83:5F:4B:FA:BA:4D:C8:15:9F:E7:1A:AE:F6:13:17
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 127F9858B147A3488800BF06EBAECD14670AFFCC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144840.roa
Signing time: Fri 22 May 2026 07:24:27 +0000
ROA not before: Fri 22 May 2026 07:19:27 +0000
ROA not after: Fri 21 May 2027 07:24:27 +0000
asID: 144840
IP address blocks: 240a:a88e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:7f:98:58:b1:47:a3:48:88:00:bf:06:eb:ae:cd:14:67:0a:ff:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:27 2026 GMT
Not After : May 21 07:24:27 2027 GMT
Subject: CN=A14487E6BA835F4BFABA4DC8159FE71AAEF61317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:dd:77:ae:d3:b9:20:2e:fb:b4:2e:a6:d7:58:
33:dc:87:ec:8b:b6:e3:3f:42:72:50:7c:9a:10:2e:
56:ac:33:7b:c9:3c:cb:36:3b:ef:59:ec:de:51:01:
ba:93:76:32:61:28:d0:8a:e7:fd:d1:c0:c1:d5:19:
f2:51:ce:0a:82:ba:53:98:25:0e:96:1a:1a:ec:82:
bb:40:bd:86:55:f4:05:63:77:43:d6:14:6d:f7:bd:
d1:70:1c:b3:56:8a:5e:f8:1b:41:bf:37:71:e7:3b:
07:d1:37:10:b5:d5:0b:d1:9b:64:6e:a6:05:98:d9:
1e:9d:30:ad:7b:56:bd:9e:1d:31:31:42:28:2a:e8:
be:dd:58:be:24:73:e9:52:75:d2:b1:a9:f1:97:c8:
10:06:bc:af:96:32:7d:bc:4b:1a:a8:dc:f7:0e:d8:
e2:5c:32:08:dc:75:81:b5:c1:6c:80:4a:fd:2d:a8:
3b:88:23:8f:1f:8c:8a:17:54:29:23:de:ac:dc:41:
a8:16:4b:da:0a:0f:52:9a:86:2e:ef:49:66:49:ee:
7d:02:06:03:58:3c:ca:7b:72:51:b6:37:53:7a:ca:
22:18:98:0c:80:bc:ab:12:33:20:83:77:f7:a4:0d:
ad:ec:c7:56:a7:7c:02:7e:34:cb:f5:9e:2e:d9:9d:
10:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:44:87:E6:BA:83:5F:4B:FA:BA:4D:C8:15:9F:E7:1A:AE:F6:13:17
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144840.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a88e::/32
Signature Algorithm: sha256WithRSAEncryption
a6:d8:10:e3:74:3f:d1:99:22:6e:80:f7:4f:f4:48:19:a7:a7:
73:ea:0e:61:b9:de:5c:bf:3f:eb:51:12:39:9f:b3:6e:00:8a:
d4:a7:b4:e6:13:51:a3:d9:d7:7a:cf:c4:d5:d9:43:47:7d:91:
8e:cc:8e:c7:fe:3a:2e:6d:31:84:2d:a3:bf:2e:e9:16:a6:5a:
12:2a:38:92:45:6a:72:70:da:ce:47:e7:02:8d:e9:0d:ea:55:
ba:1d:ef:87:26:84:aa:4c:68:3c:98:2e:8b:3e:61:77:8d:61:
79:b4:e1:e2:e8:c9:42:85:06:2f:5f:48:10:3a:8a:cb:59:69:
1d:52:20:e1:4d:05:26:03:ca:e6:40:ae:81:58:d7:67:71:bf:
d8:12:48:da:d3:cb:02:6d:85:0d:9f:68:8e:c1:3c:93:ba:8c:
78:1c:a1:00:f2:80:00:9c:1e:97:ac:a7:3d:00:8e:39:9f:66:
70:e8:e9:ef:ca:e8:58:92:ca:b4:d1:b5:c4:d6:82:99:4e:c8:
a0:6c:98:af:c8:bc:a9:a2:9d:f8:4e:c9:ec:c9:30:23:68:d6:
b9:01:fc:ed:4d:c1:87:9f:7d:13:c9:32:72:5b:2c:f7:34:40:
96:95:fe:cb:fe:82:02:1f:85:ad:a2:d8:0d:02:d1:ec:49:21:
a6:a5:cc:43
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUEn+YWLFHo0iIAL8G667NFGcK/8wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzE5MjdaFw0yNzA1MjEwNzI0MjdaMDMxMTAvBgNV
BAMTKEExNDQ4N0U2QkE4MzVGNEJGQUJBNERDODE1OUZFNzFBQUVGNjEzMTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/3Xeu07kgLvu0LqbXWDPch+yL
tuM/QnJQfJoQLlasM3vJPMs2O+9Z7N5RAbqTdjJhKNCK5/3RwMHVGfJRzgqCulOY
JQ6WGhrsgrtAvYZV9AVjd0PWFG33vdFwHLNWil74G0G/N3HnOwfRNxC11QvRm2Ru
pgWY2R6dMK17Vr2eHTExQigq6L7dWL4kc+lSddKxqfGXyBAGvK+WMn28Sxqo3PcO
2OJcMgjcdYG1wWyASv0tqDuII48fjIoXVCkj3qzcQagWS9oKD1Kahi7vSWZJ7n0C
BgNYPMp7clG2N1N6yiIYmAyAvKsSMyCDd/ekDa3sx1anfAJ+NMv1ni7ZnRCxAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUoUSH5rqDX0v6uk3IFZ/nGq72ExcwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0ODQwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqojjANBgkqhkiG9w0BAQsFAAOCAQEAptgQ
43Q/0ZkiboD3T/RIGaenc+oOYbneXL8/61ESOZ+zbgCK1Ke05hNRo9nXes/E1dlD
R32RjsyOx/46Lm0xhC2jvy7pFqZaEio4kkVqcnDazkfnAo3pDepVuh3vhyaEqkxo
PJguiz5hd41hebTh4ujJQoUGL19IEDqKy1lpHVIg4U0FJgPK5kCugVjXZ3G/2BJI
2tPLAm2FDZ9ojsE8k7qMeByhAPKAAJwel6ynPQCOOZ9mcOjp78roWJLKtNG1xNaC
mU7IoGyYr8i8qaKd+E7J7MkwI2jWuQH87U3Bh599E8kyclss9zRAlpX+y/6CAh+F
raLYDQLR7EkhpqXMQw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:21 2026 by rpki-client