Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144867.roa
File: AS144867.roa (raw, json)
Hash identifier: yuS/n0YrDAv8rJEqKpkhW6D8tFaIAj1aYXeSKMK95qo=
Subject key identifier: A2:3C:FD:DF:B7:3C:4B:02:4C:56:E3:68:67:F6:BE:12:A1:21:3A:5F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 57136F3E2AA9410AFAD267DA4C93251CAC2011FB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144867.roa
Signing time: Fri 22 May 2026 06:45:58 +0000
ROA not before: Fri 22 May 2026 06:40:58 +0000
ROA not after: Fri 21 May 2027 06:45:58 +0000
asID: 144867
IP address blocks: 240a:a8a9::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:13:6f:3e:2a:a9:41:0a:fa:d2:67:da:4c:93:25:1c:ac:20:11:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:40:58 2026 GMT
Not After : May 21 06:45:58 2027 GMT
Subject: CN=A23CFDDFB73C4B024C56E36867F6BE12A1213A5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a7:c4:e0:de:b7:0a:1c:71:27:b6:b8:1a:57:
53:dc:85:54:45:a6:24:d7:56:85:6d:07:7b:00:34:
6d:5e:f7:dd:fb:e7:fb:53:bb:61:ee:2b:92:74:32:
52:96:57:ad:f1:d2:c5:15:d1:fd:90:82:f7:8c:fe:
57:f5:b6:8f:a6:5c:a2:d1:4c:f8:06:d5:43:e5:10:
eb:fb:a2:0d:83:a8:e5:89:3a:1a:fb:aa:7f:37:ab:
c8:1a:05:9a:28:22:a9:9f:29:9a:4b:4f:7b:9d:9a:
8a:5a:ed:bb:cd:dc:2a:8b:72:19:b7:e1:36:98:26:
81:be:9d:03:f4:a0:6d:4b:7c:a7:42:d3:b4:c9:a4:
fa:b0:dd:a6:5a:3e:64:9c:d0:e0:be:92:db:c3:aa:
79:00:73:6c:c9:55:a7:ee:e1:90:fd:56:f7:3c:ed:
08:73:cf:7f:8e:2c:f0:a9:4b:04:5d:15:76:17:6b:
d0:b1:e0:7d:4f:32:f9:1e:6a:b6:31:96:cc:e5:3a:
6d:93:f1:46:b6:b5:ff:5d:96:c0:f8:2e:df:c6:52:
4c:34:00:d3:a6:cf:5e:be:e9:ba:85:0a:c9:6f:bf:
a4:33:4c:98:af:48:31:ad:fb:0e:d1:5b:56:54:15:
1b:79:40:4f:31:b8:15:0f:34:c9:92:f9:bf:bd:f8:
f2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:3C:FD:DF:B7:3C:4B:02:4C:56:E3:68:67:F6:BE:12:A1:21:3A:5F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144867.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a8a9::/32
Signature Algorithm: sha256WithRSAEncryption
10:6a:34:ac:20:a6:ec:80:9e:5e:4c:80:86:d2:13:6f:7a:13:
d7:f8:a5:ef:e6:32:80:7c:7f:b5:c2:ec:56:b1:5c:ae:50:fe:
fc:25:f6:0f:e3:7a:73:7d:e4:3e:b8:c4:0b:43:08:cb:1d:2b:
d3:cb:eb:cf:d1:30:fd:c5:28:b3:65:88:98:c4:91:8b:7e:6a:
c4:91:fb:fc:9b:c0:cd:66:9d:a3:b0:0a:0a:21:a1:8e:a7:b0:
3d:3e:b6:fe:64:27:c5:d7:31:5c:31:2f:16:69:a7:50:39:48:
1e:55:b8:2c:77:fc:5d:c0:ae:34:8a:1b:2a:c7:b4:99:8d:a3:
4f:55:95:6f:ab:e8:1e:c6:21:f8:12:62:6a:28:9d:5f:58:45:
2b:f4:60:59:61:35:9d:cd:7c:4f:7c:28:05:8a:27:98:9c:6a:
b3:c7:06:9b:47:38:50:b5:5f:bd:08:46:6d:18:cd:15:97:2a:
e6:f8:54:2f:9b:a9:14:29:2b:56:97:33:fc:a9:9d:f6:09:27:
6a:88:cb:18:c0:6f:d9:fa:0c:8d:29:84:63:b1:76:bf:d1:db:
91:9d:a0:f8:fb:ba:d8:b1:f3:da:c1:05:81:39:25:f7:e7:b9:
04:9f:a2:b0:9f:d4:b2:24:07:29:7b:8f:be:f7:dd:16:d1:34:
77:df:f8:fe
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUVxNvPiqpQQr60mfaTJMlHKwgEfswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjQwNThaFw0yNzA1MjEwNjQ1NThaMDMxMTAvBgNV
BAMTKEEyM0NGRERGQjczQzRCMDI0QzU2RTM2ODY3RjZCRTEyQTEyMTNBNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfp8Tg3rcKHHEntrgaV1PchVRF
piTXVoVtB3sANG1e99375/tTu2HuK5J0MlKWV63x0sUV0f2QgveM/lf1to+mXKLR
TPgG1UPlEOv7og2DqOWJOhr7qn83q8gaBZooIqmfKZpLT3udmopa7bvN3CqLchm3
4TaYJoG+nQP0oG1LfKdC07TJpPqw3aZaPmSc0OC+ktvDqnkAc2zJVafu4ZD9Vvc8
7Qhzz3+OLPCpSwRdFXYXa9Cx4H1PMvkearYxlszlOm2T8Ua2tf9dlsD4Lt/GUkw0
ANOmz16+6bqFCslvv6QzTJivSDGt+w7RW1ZUFRt5QE8xuBUPNMmS+b+9+PIHAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUojz937c8SwJMVuNoZ/a+EqEhOl8wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0ODY3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqoqTANBgkqhkiG9w0BAQsFAAOCAQEAEGo0
rCCm7ICeXkyAhtITb3oT1/il7+YygHx/tcLsVrFcrlD+/CX2D+N6c33kPrjEC0MI
yx0r08vrz9Ew/cUos2WImMSRi35qxJH7/JvAzWado7AKCiGhjqewPT62/mQnxdcx
XDEvFmmnUDlIHlW4LHf8XcCuNIobKse0mY2jT1WVb6voHsYh+BJiaiidX1hFK/Rg
WWE1nc18T3woBYonmJxqs8cGm0c4ULVfvQhGbRjNFZcq5vhUL5upFCkrVpcz/Kmd
9gknaojLGMBv2foMjSmEY7F2v9HbkZ2g+Pu62LHz2sEFgTkl9+e5BJ+isJ/UsiQH
KXuPvvfdFtE0d9/4/g==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:55 2026 by rpki-client