Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144879.roa
File: AS144879.roa (raw, json)
Hash identifier: mmvoMAV5mDNuSSX+Ji4z1/shc6BinZUBFYwC9lRnGfc=
Subject key identifier: B9:E0:12:04:ED:8B:4F:A6:10:4E:BC:49:50:DA:84:1D:CE:67:D6:BE
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1D20A4D3FA56648AD82CBD7EEB8009BBDF5C0F01
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144879.roa
Signing time: Fri 22 May 2026 04:27:08 +0000
ROA not before: Fri 22 May 2026 04:22:08 +0000
ROA not after: Fri 21 May 2027 04:27:08 +0000
asID: 144879
IP address blocks: 240a:a8b5::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:20:a4:d3:fa:56:64:8a:d8:2c:bd:7e:eb:80:09:bb:df:5c:0f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:22:08 2026 GMT
Not After : May 21 04:27:08 2027 GMT
Subject: CN=B9E01204ED8B4FA6104EBC4950DA841DCE67D6BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f9:a0:6b:7e:64:70:24:1c:c8:98:2d:aa:c9:
12:6e:ad:42:62:f5:6f:af:02:e7:f9:e3:96:5b:6a:
5e:4b:e6:99:ea:a9:17:13:94:3f:a4:c1:5a:3d:c9:
31:91:63:e3:16:a5:b5:b5:b1:26:18:05:d9:43:ae:
d7:93:b3:a9:5e:e8:a7:c6:1e:50:ce:8a:45:0c:e4:
7e:41:d2:ca:44:66:dd:66:a7:3e:17:15:df:4a:4e:
21:00:e2:de:34:78:30:c6:ce:ec:4e:f1:c1:23:75:
29:2e:64:50:ee:fa:ec:11:47:7a:3c:a8:78:47:b1:
9a:88:05:a6:ab:f3:40:56:c2:3e:85:45:56:f1:1b:
b3:f1:1d:87:b2:4e:b7:0c:74:0a:6c:16:8f:63:72:
4b:18:98:3d:20:7d:f8:c2:f3:66:9e:97:6a:3b:0a:
c4:2f:06:03:ed:66:fc:24:1f:54:d2:0e:ad:cf:f6:
6c:49:80:81:76:4c:b8:a4:69:73:4e:4f:b8:8e:61:
92:65:c7:af:6c:24:62:46:c9:bf:61:8d:c6:70:44:
45:70:5e:77:dd:f8:f9:36:45:a0:61:83:76:1e:96:
bd:0f:bb:ee:a3:02:6d:8f:cc:8b:37:0a:ad:b8:f3:
f8:1f:51:4e:cb:91:e3:d1:bd:4f:e7:c6:88:39:56:
dd:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E0:12:04:ED:8B:4F:A6:10:4E:BC:49:50:DA:84:1D:CE:67:D6:BE
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144879.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a8b5::/32
Signature Algorithm: sha256WithRSAEncryption
4e:00:2c:e1:4c:d2:29:45:9a:1c:03:11:ab:38:8b:8d:51:05:
fb:23:51:fe:d6:15:75:17:28:25:ae:f4:0f:74:99:73:fd:2c:
c8:ca:5e:ea:9e:6a:4e:14:2d:7d:40:d3:cd:85:17:04:f7:2a:
1f:49:41:70:38:47:29:f3:37:6f:24:8b:5d:d0:35:78:5a:e3:
22:50:21:72:89:ab:be:3a:38:cb:26:af:73:25:e0:c7:fe:1c:
dd:b5:54:6e:54:8c:4b:ff:70:e9:78:24:bc:8f:fc:b3:30:06:
90:38:fc:56:76:25:e8:0f:81:28:69:39:9b:7b:42:c0:c6:a4:
94:7c:48:7f:ef:ce:7a:71:af:65:40:10:f4:f5:a4:30:25:6b:
85:d1:fb:d0:94:5f:29:5d:89:97:ac:ca:75:4c:b7:69:65:03:
ec:3f:35:b7:60:1b:ef:7f:c4:3e:7f:90:22:f5:e8:eb:b1:c9:
3b:30:61:3c:8c:81:87:2f:8a:ac:b0:dc:a5:99:fd:70:c3:78:
36:4c:b6:58:be:66:60:28:40:2e:5b:f5:e7:0b:a8:29:87:3f:
60:84:40:eb:f1:2a:73:2b:da:a9:8d:06:a0:6c:84:a1:91:0e:
d4:71:76:23:e8:bf:78:e4:93:5b:9a:bc:b3:57:3f:b0:68:d7:
e3:e1:bc:e8
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUHSCk0/pWZIrYLL1+64AJu99cDwEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNDIyMDhaFw0yNzA1MjEwNDI3MDhaMDMxMTAvBgNV
BAMTKEI5RTAxMjA0RUQ4QjRGQTYxMDRFQkM0OTUwREE4NDFEQ0U2N0Q2QkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN+aBrfmRwJBzImC2qyRJurUJi
9W+vAuf545Zbal5L5pnqqRcTlD+kwVo9yTGRY+MWpbW1sSYYBdlDrteTs6le6KfG
HlDOikUM5H5B0spEZt1mpz4XFd9KTiEA4t40eDDGzuxO8cEjdSkuZFDu+uwRR3o8
qHhHsZqIBaar80BWwj6FRVbxG7PxHYeyTrcMdApsFo9jcksYmD0gffjC82ael2o7
CsQvBgPtZvwkH1TSDq3P9mxJgIF2TLikaXNOT7iOYZJlx69sJGJGyb9hjcZwREVw
Xnfd+Pk2RaBhg3Yelr0Pu+6jAm2PzIs3Cq248/gfUU7LkePRvU/nxog5Vt2vAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUueASBO2LT6YQTrxJUNqEHc5n1r4wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0ODc5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqotTANBgkqhkiG9w0BAQsFAAOCAQEATgAs
4UzSKUWaHAMRqziLjVEF+yNR/tYVdRcoJa70D3SZc/0syMpe6p5qThQtfUDTzYUX
BPcqH0lBcDhHKfM3bySLXdA1eFrjIlAhcomrvjo4yyavcyXgx/4c3bVUblSMS/9w
6XgkvI/8szAGkDj8VnYl6A+BKGk5m3tCwMaklHxIf+/OenGvZUAQ9PWkMCVrhdH7
0JRfKV2Jl6zKdUy3aWUD7D81t2Ab73/EPn+QIvXo67HJOzBhPIyBhy+KrLDcpZn9
cMN4Nky2WL5mYChALlv15wuoKYc/YIRA6/EqcyvaqY0GoGyEoZEO1HF2I+i/eOST
W5q8s1c/sGjX4+G86A==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:56 2026 by rpki-client