Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144849.roa
File: AS144849.roa (raw, json)
Hash identifier: UBMM0VosQCxVk6P2P8ojb+Gbiu4EfLBpAETTf+7xbdM=
Subject key identifier: 1B:4D:D6:FB:89:E8:C1:32:F3:53:23:F3:1E:E4:88:77:84:3D:A5:91
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 59D0D79212196730A6C5117EBEBDFB3F7B32C78A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144849.roa
Signing time: Mon 25 May 2026 02:22:26 +0000
ROA not before: Mon 25 May 2026 02:17:26 +0000
ROA not after: Mon 24 May 2027 02:22:26 +0000
asID: 144849
IP address blocks: 240a:a897::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:d0:d7:92:12:19:67:30:a6:c5:11:7e:be:bd:fb:3f:7b:32:c7:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:26 2026 GMT
Not After : May 24 02:22:26 2027 GMT
Subject: CN=1B4DD6FB89E8C132F35323F31EE48877843DA591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:44:27:a4:35:4e:d9:a6:3d:30:d1:c9:0a:1d:
88:fd:3f:3a:eb:43:51:e0:da:39:dd:fb:cd:3f:3b:
83:ca:9e:0a:ab:d7:f8:47:af:e4:25:4c:78:9c:db:
12:cb:54:a7:58:f3:9d:ba:12:53:47:33:b9:e1:11:
41:2d:20:a3:81:d4:12:14:a2:67:c5:8c:c6:0d:69:
5d:22:2e:ed:32:eb:22:c5:5b:de:50:1e:e6:1a:b5:
0b:02:92:74:cf:28:92:a1:24:ec:30:9d:87:da:3b:
79:5e:55:b8:32:aa:bb:d1:39:fa:2d:d0:9e:90:5a:
e2:82:64:05:66:16:9b:69:c5:9f:a3:23:eb:3a:0c:
ce:a2:c8:8c:93:a1:98:82:7d:4b:d3:81:4a:96:50:
02:6c:6e:cd:0e:18:43:a2:f7:2b:6c:53:69:8c:f0:
b0:4d:b8:87:a2:a9:ad:ce:2a:76:13:3b:97:5b:6a:
bd:93:dc:cf:17:f5:dd:09:3e:36:37:f1:34:7b:69:
8f:b5:75:ef:0d:d1:5a:66:e9:36:3c:d1:6b:46:21:
e9:ab:a4:d7:e2:8b:c8:39:15:3a:75:72:91:e8:12:
69:1c:b4:2e:08:74:c5:43:91:f1:54:5c:62:11:3b:
eb:96:a9:48:85:cb:85:45:d1:74:38:8f:3f:45:94:
0c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:4D:D6:FB:89:E8:C1:32:F3:53:23:F3:1E:E4:88:77:84:3D:A5:91
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144849.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a897::/32
Signature Algorithm: sha256WithRSAEncryption
1b:0f:d6:0f:89:5a:c7:e2:78:63:97:e5:57:52:cd:23:1a:12:
cd:df:6f:68:be:78:ec:64:5c:a7:c6:ad:aa:0f:6d:a9:4f:5f:
e1:32:97:8c:49:e9:bb:6d:98:9f:61:ab:ee:d3:de:f6:6c:9c:
03:11:1a:3d:4d:e0:91:a5:cb:d5:b0:cc:b9:9b:77:6e:a5:02:
80:63:9a:1a:3b:f9:36:21:59:e2:17:96:ac:9e:c4:27:af:c8:
d1:a9:3a:fe:9d:71:2e:fe:e7:13:46:5a:54:b4:3f:92:80:52:
04:03:f9:e2:e8:8d:56:89:b6:f1:49:c3:aa:a7:fb:b7:12:4f:
65:66:af:98:78:79:92:53:22:30:5a:a1:6a:74:f2:67:0d:5a:
2f:b2:67:e5:12:c0:7e:63:0c:68:42:52:b5:8a:0f:77:ea:d5:
4e:04:55:73:38:34:f5:e7:b5:8f:af:f3:d3:b3:6e:3f:d8:44:
ab:39:5a:97:a5:44:13:1b:25:a4:5a:8b:b1:0d:f1:7a:ff:43:
9d:cd:0f:fd:4b:53:10:f7:ea:79:33:c1:db:5e:b4:6e:3f:3b:
5b:25:d5:4a:c4:cb:74:4e:7d:26:be:91:29:76:57:0d:fe:c5:
ce:ce:fe:9a:48:bf:ce:9d:ca:34:bc:73:c0:7a:bc:63:a5:9b:
01:29:d0:81
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUWdDXkhIZZzCmxRF+vr37P3syx4owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMjE3MjZaFw0yNzA1MjQwMjIyMjZaMDMxMTAvBgNV
BAMTKDFCNERENkZCODlFOEMxMzJGMzUzMjNGMzFFRTQ4ODc3ODQzREE1OTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCRCekNU7Zpj0w0ckKHYj9Pzrr
Q1Hg2jnd+80/O4PKngqr1/hHr+QlTHic2xLLVKdY8526ElNHM7nhEUEtIKOB1BIU
omfFjMYNaV0iLu0y6yLFW95QHuYatQsCknTPKJKhJOwwnYfaO3leVbgyqrvROfot
0J6QWuKCZAVmFptpxZ+jI+s6DM6iyIyToZiCfUvTgUqWUAJsbs0OGEOi9ytsU2mM
8LBNuIeiqa3OKnYTO5dbar2T3M8X9d0JPjY38TR7aY+1de8N0Vpm6TY80WtGIemr
pNfii8g5FTp1cpHoEmkctC4IdMVDkfFUXGIRO+uWqUiFy4VF0XQ4jz9FlAx5AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUG03W+4nowTLzUyPzHuSId4Q9pZEwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0ODQ5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqolzANBgkqhkiG9w0BAQsFAAOCAQEAGw/W
D4lax+J4Y5flV1LNIxoSzd9vaL547GRcp8atqg9tqU9f4TKXjEnpu22Yn2Gr7tPe
9mycAxEaPU3gkaXL1bDMuZt3bqUCgGOaGjv5NiFZ4heWrJ7EJ6/I0ak6/p1xLv7n
E0ZaVLQ/koBSBAP54uiNVom28UnDqqf7txJPZWavmHh5klMiMFqhanTyZw1aL7Jn
5RLAfmMMaEJStYoPd+rVTgRVczg09ee1j6/z07NuP9hEqzlal6VEExslpFqLsQ3x
ev9Dnc0P/UtTEPfqeTPB2160bj87WyXVSsTLdE59Jr6RKXZXDf7Fzs7+mki/zp3K
NLxzwHq8Y6WbASnQgQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:35 2026 by rpki-client