Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144859.roa
File: AS144859.roa (raw, json)
Hash identifier: GzdqkFaA1JxoDr0j8s7vehvfkL+hXybQ1I1Yv4CIFoI=
Subject key identifier: 5B:81:79:F9:DB:A1:40:80:49:A8:E3:A3:A3:26:A2:66:B4:1A:10:99
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 56BDFF197CC585094032A1D13AF9F2A99517D4C2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144859.roa
Signing time: Fri 22 May 2026 07:41:16 +0000
ROA not before: Fri 22 May 2026 07:36:16 +0000
ROA not after: Fri 21 May 2027 07:41:16 +0000
asID: 144859
IP address blocks: 240a:a8a1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:bd:ff:19:7c:c5:85:09:40:32:a1:d1:3a:f9:f2:a9:95:17:d4:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:36:16 2026 GMT
Not After : May 21 07:41:16 2027 GMT
Subject: CN=5B8179F9DBA1408049A8E3A3A326A266B41A1099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:94:dd:69:9d:96:db:5d:27:39:16:2f:03:75:
fa:5a:0b:a0:b1:dd:4a:e2:b8:34:54:e7:61:55:08:
41:c3:66:9c:8b:28:11:36:71:53:e2:2a:6c:58:51:
a8:65:28:33:79:99:fe:05:c0:c4:30:c0:98:df:32:
fc:24:2f:db:c6:bd:ec:f9:9c:5b:90:39:9d:5c:5b:
fc:59:5d:19:1a:45:90:d2:9e:a0:88:c6:5a:9c:89:
24:2d:bb:9e:96:68:5f:d5:a9:20:3c:af:06:fb:e0:
b7:67:75:d1:12:66:d8:4f:8f:42:3a:aa:e0:ee:70:
d8:38:fa:b6:3e:c3:85:30:98:80:bc:c7:e6:9d:ac:
ed:e6:1a:f0:74:46:df:cb:e2:75:e8:70:4a:04:a5:
fd:0a:a1:1b:9b:ab:aa:c0:b2:92:f5:e7:6c:54:69:
94:0f:fa:8a:a8:c3:33:92:4c:a4:06:78:6a:84:d7:
08:7b:0e:de:52:be:72:1f:a9:8e:e2:ac:77:54:1e:
d9:fa:8a:ad:7a:16:ff:44:fc:c5:99:7c:59:93:e7:
91:a4:d6:1e:db:23:d3:cb:1b:45:94:7e:56:ab:6d:
df:74:ef:27:3c:b3:4f:24:0a:4f:62:13:9e:fa:26:
0f:eb:11:6c:86:75:29:7b:69:8b:24:c9:8a:48:14:
0a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:81:79:F9:DB:A1:40:80:49:A8:E3:A3:A3:26:A2:66:B4:1A:10:99
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144859.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a8a1::/32
Signature Algorithm: sha256WithRSAEncryption
5b:f6:1c:e1:dd:39:b1:42:9e:0c:68:f4:7e:91:ed:55:18:9d:
6b:b4:e1:80:9c:98:f9:10:59:9f:ac:7b:c9:7d:2e:49:23:2d:
1e:5c:01:a7:ed:c2:05:29:43:5f:63:64:ea:a8:2f:34:1b:54:
a9:39:f3:a3:ce:50:28:9b:a5:64:61:b7:91:59:1d:0e:dd:44:
51:42:72:da:97:04:fd:d2:79:00:26:07:3b:79:b4:4d:53:09:
93:d8:34:6b:aa:a4:ea:52:c7:ab:74:2d:b4:f9:db:16:53:2b:
88:bc:25:ff:f5:f7:57:7d:81:98:53:3f:bd:e5:84:a1:5e:ff:
8b:5f:d0:4a:89:fa:a5:83:2e:ae:a6:48:43:4d:b6:19:f7:d3:
08:43:e4:9c:d7:36:4c:60:32:07:d8:40:d0:cf:6d:52:42:c3:
af:7f:a4:39:66:e6:c2:6b:26:5a:e0:34:d4:5d:b0:dc:2c:46:
e6:1d:7d:b0:b1:76:ce:60:de:1b:8b:35:17:73:e1:2b:35:03:
a1:c9:ab:2d:d7:79:d4:b9:41:30:32:b9:20:86:4f:9a:fc:8c:
52:08:b1:7f:74:7c:5f:b0:1c:5c:b8:03:3d:e6:e0:74:f0:07:
8e:a7:c8:db:0c:01:a9:c3:52:0b:30:93:70:36:58:fa:7d:5b:
af:30:d7:58
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUVr3/GXzFhQlAMqHROvnyqZUX1MIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzM2MTZaFw0yNzA1MjEwNzQxMTZaMDMxMTAvBgNV
BAMTKDVCODE3OUY5REJBMTQwODA0OUE4RTNBM0EzMjZBMjY2QjQxQTEwOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3lN1pnZbbXSc5Fi8DdfpaC6Cx
3UriuDRU52FVCEHDZpyLKBE2cVPiKmxYUahlKDN5mf4FwMQwwJjfMvwkL9vGvez5
nFuQOZ1cW/xZXRkaRZDSnqCIxlqciSQtu56WaF/VqSA8rwb74LdnddESZthPj0I6
quDucNg4+rY+w4UwmIC8x+adrO3mGvB0Rt/L4nXocEoEpf0KoRubq6rAspL152xU
aZQP+oqowzOSTKQGeGqE1wh7Dt5SvnIfqY7irHdUHtn6iq16Fv9E/MWZfFmT55Gk
1h7bI9PLG0WUflarbd907yc8s08kCk9iE576Jg/rEWyGdSl7aYskyYpIFAobAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUW4F5+duhQIBJqOOjoyaiZrQaEJkwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0ODU5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqooTANBgkqhkiG9w0BAQsFAAOCAQEAW/Yc
4d05sUKeDGj0fpHtVRida7ThgJyY+RBZn6x7yX0uSSMtHlwBp+3CBSlDX2Nk6qgv
NBtUqTnzo85QKJulZGG3kVkdDt1EUUJy2pcE/dJ5ACYHO3m0TVMJk9g0a6qk6lLH
q3QttPnbFlMriLwl//X3V32BmFM/veWEoV7/i1/QSon6pYMurqZIQ022GffTCEPk
nNc2TGAyB9hA0M9tUkLDr3+kOWbmwmsmWuA01F2w3CxG5h19sLF2zmDeG4s1F3Ph
KzUDocmrLdd51LlBMDK5IIZPmvyMUgixf3R8X7AcXLgDPebgdPAHjqfI2wwBqcNS
CzCTcDZY+n1brzDXWA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:16 2026 by rpki-client