Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144896.roa
File: AS144896.roa (raw, json)
Hash identifier: Kd7UkNDkmDQH0nJbRrvlbk/gneF7if1HRcVyefr7ll0=
Subject key identifier: 85:61:4E:26:2D:CF:F3:E2:B8:D7:29:7D:D3:6E:36:DE:5E:3A:28:0B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 476E8A5673F33ABF82D3C2050DA5694AFC958EB9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144896.roa
Signing time: Fri 22 May 2026 06:05:33 +0000
ROA not before: Fri 22 May 2026 06:00:33 +0000
ROA not after: Fri 21 May 2027 06:05:33 +0000
asID: 144896
IP address blocks: 240a:a8c6::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:6e:8a:56:73:f3:3a:bf:82:d3:c2:05:0d:a5:69:4a:fc:95:8e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:33 2026 GMT
Not After : May 21 06:05:33 2027 GMT
Subject: CN=85614E262DCFF3E2B8D7297DD36E36DE5E3A280B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3e:b0:53:16:b0:83:8b:8a:1e:f6:e2:ab:85:
52:e0:65:58:6d:eb:46:6f:bc:36:55:5e:07:40:a5:
29:14:94:27:4e:c9:1a:54:07:7a:b9:2b:50:9a:5d:
db:c0:e6:08:06:de:2f:2c:b3:6f:f4:ee:dc:6a:be:
79:0c:6c:d3:b7:99:6c:a4:6e:ff:60:fa:2e:e5:85:
ae:d1:a4:15:27:ce:ee:07:51:74:00:f8:0b:5c:3a:
28:f3:55:7b:90:48:2c:26:a6:8f:ee:cb:d9:16:ff:
c9:9c:60:41:53:06:e3:1a:bd:0f:b0:6b:dd:09:5b:
1e:10:15:66:4c:93:7a:f8:96:d3:8c:37:4a:12:31:
fe:f5:02:90:95:1e:3e:5f:dc:2f:d2:48:f5:79:a9:
13:cc:64:79:f8:bf:52:66:5c:15:fa:41:49:9c:cc:
c7:15:8f:cd:85:09:d3:4f:58:a8:d0:bc:b4:75:3d:
43:2d:b5:a9:a0:88:e7:33:17:2f:c5:b1:8c:44:97:
61:ec:c5:6e:c2:6d:d5:c0:13:4b:8b:08:4d:0c:9c:
72:8a:1d:6c:db:ea:2b:54:e2:3f:23:d8:7f:cc:52:
39:d3:05:ff:07:e8:ff:62:b2:e9:bd:b3:e0:35:bb:
0e:d0:73:db:79:cf:66:a6:a5:43:d6:5d:af:4d:ef:
84:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:61:4E:26:2D:CF:F3:E2:B8:D7:29:7D:D3:6E:36:DE:5E:3A:28:0B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144896.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a8c6::/32
Signature Algorithm: sha256WithRSAEncryption
4f:48:aa:c1:4c:4d:69:31:5f:5d:a3:0d:8b:68:a9:a4:e8:d7:
be:80:8c:96:8b:7e:24:ce:d9:f7:ee:e4:87:7c:db:a3:16:6c:
f9:61:4c:2a:e3:dd:69:83:fb:a6:ed:c8:5f:23:a1:88:b3:12:
b4:07:47:5b:c4:fd:15:ec:65:08:f1:6e:35:25:9f:27:ab:a4:
28:b4:b2:22:9c:8f:f5:d7:52:7f:06:5e:dc:d0:82:d2:84:6d:
80:34:eb:c9:50:3b:e0:eb:31:b0:33:39:ed:83:4c:11:5a:53:
d6:af:56:db:08:2f:f1:9f:b5:c9:25:b6:d5:66:b6:ff:ed:77:
f6:b1:67:4a:ed:c3:b7:3e:06:a0:a5:73:67:a8:56:7f:a4:ce:
3e:35:46:1b:77:d5:e7:b5:3e:27:39:49:b0:ef:64:8d:87:2a:
8c:51:ea:da:a6:e5:f4:6c:64:97:b2:d7:0c:1e:63:e2:bf:07:
79:eb:2d:4d:8b:86:1b:28:10:39:7d:6a:25:b5:5b:6e:4e:af:
92:b1:9a:5c:91:cb:a0:a8:af:ed:ca:65:40:6e:b4:11:0f:4e:
18:dd:0d:9c:66:70:df:f1:09:fe:3d:26:82:db:74:11:b0:9f:
72:d4:b3:5c:4c:57:3f:66:56:f3:dd:55:73:a4:62:b5:81:c7:
91:25:3c:b9
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUR26KVnPzOr+C08IFDaVpSvyVjrkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjAwMzNaFw0yNzA1MjEwNjA1MzNaMDMxMTAvBgNV
BAMTKDg1NjE0RTI2MkRDRkYzRTJCOEQ3Mjk3REQzNkUzNkRFNUUzQTI4MEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnPrBTFrCDi4oe9uKrhVLgZVht
60ZvvDZVXgdApSkUlCdOyRpUB3q5K1CaXdvA5ggG3i8ss2/07txqvnkMbNO3mWyk
bv9g+i7lha7RpBUnzu4HUXQA+AtcOijzVXuQSCwmpo/uy9kW/8mcYEFTBuMavQ+w
a90JWx4QFWZMk3r4ltOMN0oSMf71ApCVHj5f3C/SSPV5qRPMZHn4v1JmXBX6QUmc
zMcVj82FCdNPWKjQvLR1PUMttamgiOczFy/FsYxEl2HsxW7CbdXAE0uLCE0MnHKK
HWzb6itU4j8j2H/MUjnTBf8H6P9isum9s+A1uw7Qc9t5z2ampUPWXa9N74RxAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUhWFOJi3P8+K41yl902423l46KAswHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0ODk2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqoxjANBgkqhkiG9w0BAQsFAAOCAQEAT0iq
wUxNaTFfXaMNi2ippOjXvoCMlot+JM7Z9+7kh3zboxZs+WFMKuPdaYP7pu3IXyOh
iLMStAdHW8T9FexlCPFuNSWfJ6ukKLSyIpyP9ddSfwZe3NCC0oRtgDTryVA74Osx
sDM57YNMEVpT1q9W2wgv8Z+1ySW21Wa2/+139rFnSu3Dtz4GoKVzZ6hWf6TOPjVG
G3fV57U+JzlJsO9kjYcqjFHq2qbl9Gxkl7LXDB5j4r8HeestTYuGGygQOX1qJbVb
bk6vkrGaXJHLoKiv7cplQG60EQ9OGN0NnGZw3/EJ/j0mgtt0EbCfctSzXExXP2ZW
891Vc6RitYHHkSU8uQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:54 2026 by rpki-client