Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144897.roa
File: AS144897.roa (raw, json)
Hash identifier: MJyHFmKU4ArTFlTwtdKs5AYfJ3EFp5gVlpvzv0lGA1w=
Subject key identifier: 32:8C:CE:99:CD:C7:38:6A:74:5A:B1:C2:A6:5D:AA:95:61:8A:6E:60
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5E743110E28A0DAB14D5ADDAC8C4F594B27A04D9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144897.roa
Signing time: Tue 26 May 2026 06:12:53 +0000
ROA not before: Tue 26 May 2026 06:07:53 +0000
ROA not after: Tue 25 May 2027 06:12:53 +0000
asID: 144897
IP address blocks: 240a:a8c7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:74:31:10:e2:8a:0d:ab:14:d5:ad:da:c8:c4:f5:94:b2:7a:04:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:07:53 2026 GMT
Not After : May 25 06:12:53 2027 GMT
Subject: CN=328CCE99CDC7386A745AB1C2A65DAA95618A6E60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:95:00:2e:8d:1a:fd:bc:c5:48:a1:78:f1:1e:
66:17:43:aa:18:25:96:5c:fc:da:21:c4:b5:c9:bb:
75:e9:f4:59:3b:e2:18:f4:d2:33:89:c5:d7:ea:8b:
ff:ad:96:c1:2c:bc:c7:23:5f:9b:54:b4:54:d6:98:
30:6e:b4:8b:bc:21:83:f3:89:bf:e7:9b:0c:e5:64:
df:fe:34:98:03:f4:89:c0:74:87:43:2d:8f:6c:ce:
79:22:ca:91:5e:94:0a:90:51:79:eb:e0:0f:90:53:
aa:89:ef:9f:95:2c:90:1f:e1:62:07:c2:25:95:fe:
a7:d0:3c:2e:5d:27:b2:23:98:fd:e5:b5:62:b0:04:
7e:4d:9d:8b:cd:56:9f:a8:d2:d3:5e:61:cd:f4:d6:
8c:76:d9:d5:4a:25:e1:c9:9a:ea:2c:3c:47:44:3c:
30:16:24:3a:81:47:b1:b0:7b:ec:13:9e:90:b8:74:
2b:8f:e5:4e:47:dd:38:56:7b:8b:d9:a2:a7:77:e2:
97:d7:3a:97:c4:69:42:b2:59:1f:f8:f8:5d:a1:f2:
a9:04:e7:e4:5a:81:17:59:05:01:3c:83:4e:2a:87:
74:a3:8b:ef:8f:66:bd:02:8a:b9:63:70:92:c2:d3:
f0:d1:25:b8:bb:1d:0d:7b:95:ce:3d:d9:5a:15:2a:
c6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:8C:CE:99:CD:C7:38:6A:74:5A:B1:C2:A6:5D:AA:95:61:8A:6E:60
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144897.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a8c7::/32
Signature Algorithm: sha256WithRSAEncryption
85:1b:88:ff:1c:0f:be:d5:b8:9b:8c:c0:7d:fc:8d:bb:eb:8e:
60:5f:e5:7f:bf:66:8e:53:4c:8f:eb:26:ab:fd:1e:34:d3:14:
5e:3a:2a:b3:dd:bc:66:61:eb:16:6f:26:e2:c4:91:7d:b6:60:
45:b3:c3:1e:36:08:ab:b8:b5:57:b8:75:18:0e:f5:6b:96:0c:
73:b6:47:b9:e3:e6:67:04:88:cb:c9:51:39:a2:fd:4f:cd:3b:
ca:f0:9a:b7:85:df:7b:48:cd:76:8c:5f:81:20:e8:08:19:24:
c0:30:ad:d3:bf:7d:4f:a3:21:1d:08:be:22:57:45:c3:ee:c7:
74:b5:77:d5:78:f5:ca:31:2c:23:65:00:da:be:de:3e:ee:1e:
56:88:b1:d5:65:75:d4:7c:43:14:ba:eb:c9:65:22:df:e2:ba:
d3:59:73:d0:d2:5c:d1:88:8f:42:a6:f9:9c:db:83:f8:01:41:
14:7d:19:b4:ee:1a:10:60:85:f3:5d:1c:60:c8:de:3d:a0:4f:
27:d9:53:4b:98:b0:2b:c0:cd:29:2d:b3:7a:4c:dd:96:72:f1:
41:88:83:8d:3c:ac:be:b2:c5:b6:fb:03:4b:7e:87:ea:11:4c:
0e:c6:ca:61:c6:b9:c5:cd:52:a1:30:57:b6:d5:bd:f2:88:c1:
17:7e:2f:b0
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUXnQxEOKKDasU1a3ayMT1lLJ6BNkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwNjA3NTNaFw0yNzA1MjUwNjEyNTNaMDMxMTAvBgNV
BAMTKDMyOENDRTk5Q0RDNzM4NkE3NDVBQjFDMkE2NURBQTk1NjE4QTZFNjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXlQAujRr9vMVIoXjxHmYXQ6oY
JZZc/NohxLXJu3Xp9Fk74hj00jOJxdfqi/+tlsEsvMcjX5tUtFTWmDButIu8IYPz
ib/nmwzlZN/+NJgD9InAdIdDLY9sznkiypFelAqQUXnr4A+QU6qJ75+VLJAf4WIH
wiWV/qfQPC5dJ7IjmP3ltWKwBH5NnYvNVp+o0tNeYc301ox22dVKJeHJmuosPEdE
PDAWJDqBR7Gwe+wTnpC4dCuP5U5H3ThWe4vZoqd34pfXOpfEaUKyWR/4+F2h8qkE
5+RagRdZBQE8g04qh3Sji++PZr0CirljcJLC0/DRJbi7HQ17lc492VoVKsZrAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUMozOmc3HOGp0WrHCpl2qlWGKbmAwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0ODk3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqoxzANBgkqhkiG9w0BAQsFAAOCAQEAhRuI
/xwPvtW4m4zAffyNu+uOYF/lf79mjlNMj+smq/0eNNMUXjoqs928ZmHrFm8m4sSR
fbZgRbPDHjYIq7i1V7h1GA71a5YMc7ZHuePmZwSIy8lROaL9T807yvCat4Xfe0jN
doxfgSDoCBkkwDCt0799T6MhHQi+IldFw+7HdLV31Xj1yjEsI2UA2r7ePu4eVoix
1WV11HxDFLrryWUi3+K601lz0NJc0YiPQqb5nNuD+AFBFH0ZtO4aEGCF810cYMje
PaBPJ9lTS5iwK8DNKS2zekzdlnLxQYiDjTysvrLFtvsDS36H6hFMDsbKYca5xc1S
oTBXttW98ojBF34vsA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:09 2026 by rpki-client