Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144875.roa
File: AS144875.roa (raw, json)
Hash identifier: ofTZhuNyPGcYHP1FaoVAvOsxXBvLJh7LGS+MCYrcRIo=
Subject key identifier: 49:DD:84:00:5D:68:C8:10:30:EF:00:37:89:83:C7:0B:80:66:37:3D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1E948A469133D1836A68FD7C31E556B99249BAC5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144875.roa
Signing time: Fri 22 May 2026 07:32:35 +0000
ROA not before: Fri 22 May 2026 07:27:35 +0000
ROA not after: Fri 21 May 2027 07:32:35 +0000
asID: 144875
IP address blocks: 240a:a8b1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:94:8a:46:91:33:d1:83:6a:68:fd:7c:31:e5:56:b9:92:49:ba:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:35 2026 GMT
Not After : May 21 07:32:35 2027 GMT
Subject: CN=49DD84005D68C81030EF00378983C70B8066373D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:71:71:06:13:f7:6a:1a:ad:59:b0:c0:e7:19:
28:ff:ac:84:7c:58:6e:d0:9f:8c:2e:aa:02:dc:6c:
6f:65:03:20:0d:63:2b:b0:87:fd:e8:45:b6:26:40:
4b:ed:89:53:d3:e7:a2:88:40:94:eb:a2:be:3e:d0:
95:3e:1c:ba:bc:41:39:08:b2:cf:14:66:28:fb:39:
12:a8:cf:e1:b3:4a:35:b3:fb:b9:a2:2a:a2:cd:6b:
41:2a:af:ce:71:2a:d3:a8:4d:50:dc:e0:74:f7:b7:
37:c0:98:70:41:1e:0b:c8:c1:04:3c:3d:08:c8:6b:
3f:9c:aa:de:07:8d:a7:96:38:8f:fc:51:21:2a:66:
58:cf:21:50:ac:87:1e:53:eb:84:d2:a6:47:41:8b:
4d:4d:10:27:62:49:45:36:fd:9e:bd:24:e5:a9:b8:
d1:bc:bf:31:21:fa:92:1f:a6:cb:71:68:12:62:3a:
f4:8b:da:fd:cc:78:02:19:89:c1:8a:f2:f0:41:9f:
29:93:e0:5d:77:d2:01:65:7e:01:57:9a:a4:8c:41:
db:36:61:90:89:96:94:1e:1b:3e:51:79:35:fc:12:
5e:94:11:c6:fd:92:d0:83:30:1c:e1:9f:d4:d8:25:
a5:89:8c:50:76:51:58:97:01:e5:ec:7e:d8:53:0e:
b3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:DD:84:00:5D:68:C8:10:30:EF:00:37:89:83:C7:0B:80:66:37:3D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144875.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a8b1::/32
Signature Algorithm: sha256WithRSAEncryption
aa:68:f9:9c:31:c2:25:9c:82:78:14:6e:2c:09:d3:2f:40:25:
63:ba:e3:7e:37:0e:c4:4c:04:59:28:d5:31:c4:03:43:d6:92:
2c:9d:4f:db:28:77:cb:2b:2d:a6:9c:be:3d:10:82:f0:d4:88:
16:87:7b:55:c7:e6:ce:ec:a2:2b:52:2a:a2:50:03:1d:12:e0:
b9:f7:fc:19:01:aa:57:f0:ba:85:a1:c1:4d:ef:9c:27:0b:60:
f7:39:72:6b:de:9b:d8:29:eb:48:67:17:e2:a6:0f:91:66:2c:
f0:8c:00:e7:b9:2d:2f:12:ec:7d:1a:a6:ab:87:f7:f4:e0:52:
33:6d:2a:d6:bd:35:ed:e0:58:3a:db:32:33:b4:1c:52:84:e6:
1b:54:64:56:5a:21:01:98:4c:65:e6:3e:2c:ce:38:30:c2:f9:
3b:00:b4:4c:da:a5:f3:8c:94:66:ff:62:9f:36:66:77:41:98:
0c:85:ab:41:dd:1f:17:17:92:32:4b:9d:7e:8c:77:65:82:c7:
ef:7e:90:4a:0b:81:e3:4f:69:1e:f2:a4:9b:11:9f:0b:c5:2a:
31:78:0e:fc:54:2b:74:fb:b3:a3:c8:db:f1:65:dc:bb:ae:83:
ef:0f:e9:3b:d8:a3:c4:83:8c:cc:d9:04:ea:fe:cf:b2:2d:83:
a0:f9:c0:85
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUHpSKRpEz0YNqaP18MeVWuZJJusUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzI3MzVaFw0yNzA1MjEwNzMyMzVaMDMxMTAvBgNV
BAMTKDQ5REQ4NDAwNUQ2OEM4MTAzMEVGMDAzNzg5ODNDNzBCODA2NjM3M0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPcXEGE/dqGq1ZsMDnGSj/rIR8
WG7Qn4wuqgLcbG9lAyANYyuwh/3oRbYmQEvtiVPT56KIQJTror4+0JU+HLq8QTkI
ss8UZij7ORKoz+GzSjWz+7miKqLNa0Eqr85xKtOoTVDc4HT3tzfAmHBBHgvIwQQ8
PQjIaz+cqt4HjaeWOI/8USEqZljPIVCshx5T64TSpkdBi01NECdiSUU2/Z69JOWp
uNG8vzEh+pIfpstxaBJiOvSL2v3MeAIZicGK8vBBnymT4F130gFlfgFXmqSMQds2
YZCJlpQeGz5ReTX8El6UEcb9ktCDMBzhn9TYJaWJjFB2UViXAeXsfthTDrPJAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUSd2EAF1oyBAw7wA3iYPHC4BmNz0wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0ODc1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqosTANBgkqhkiG9w0BAQsFAAOCAQEAqmj5
nDHCJZyCeBRuLAnTL0AlY7rjfjcOxEwEWSjVMcQDQ9aSLJ1P2yh3yystppy+PRCC
8NSIFod7VcfmzuyiK1IqolADHRLguff8GQGqV/C6haHBTe+cJwtg9zlya96b2Cnr
SGcX4qYPkWYs8IwA57ktLxLsfRqmq4f39OBSM20q1r017eBYOtsyM7QcUoTmG1Rk
VlohAZhMZeY+LM44MML5OwC0TNql84yUZv9inzZmd0GYDIWrQd0fFxeSMkudfox3
ZYLH736QSguB409pHvKkmxGfC8UqMXgO/FQrdPuzo8jb8WXcu66D7w/pO9ijxIOM
zNkE6v7Psi2DoPnAhQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:00 2026 by rpki-client