Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144899.roa
File: AS144899.roa (raw, json)
Hash identifier: OdMmU5wmna5i6lkZbAbIW3HHZ0dGiuHXOk18Yyv3azg=
Subject key identifier: 2C:F7:AE:FA:0F:5F:81:3C:13:B7:6C:BA:56:A2:47:AC:37:2D:9B:29
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 330967A8BE6C3F91B96D0FFCBB59CB6D004E12DC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144899.roa
Signing time: Fri 22 May 2026 06:05:35 +0000
ROA not before: Fri 22 May 2026 06:00:35 +0000
ROA not after: Fri 21 May 2027 06:05:35 +0000
asID: 144899
IP address blocks: 240a:a8c9::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:09:67:a8:be:6c:3f:91:b9:6d:0f:fc:bb:59:cb:6d:00:4e:12:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:35 2026 GMT
Not After : May 21 06:05:35 2027 GMT
Subject: CN=2CF7AEFA0F5F813C13B76CBA56A247AC372D9B29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5b:03:a3:eb:6d:d8:c2:72:15:9c:98:cf:58:
6a:14:3b:c6:c3:e9:0f:75:51:82:0f:1c:b7:0f:73:
52:1a:f4:a2:ce:22:35:fb:38:38:84:31:14:43:0b:
8e:0c:9d:a9:5f:7f:e6:a4:8b:e8:67:06:c1:43:89:
76:a6:db:50:2d:14:01:59:0c:11:15:d8:33:67:9f:
dd:56:cb:10:f4:f0:62:22:92:08:5f:4b:ed:8a:65:
b5:0b:9f:a2:18:d5:57:ba:f1:e0:a0:1a:a2:fb:3f:
58:a6:49:08:32:52:a0:a3:4f:bd:07:c7:bc:d1:48:
36:c1:30:d5:44:6e:a8:51:39:87:67:2a:60:ce:54:
0d:93:b5:d8:91:12:fb:e9:92:3f:ef:b6:1d:16:74:
64:40:1e:0d:eb:33:ac:a6:73:7a:45:a4:2b:42:47:
7e:56:7c:08:b8:f7:20:44:00:20:14:a7:6a:67:74:
5b:5c:bb:97:1e:4b:04:55:22:1b:d9:8b:2d:9e:10:
82:97:3e:cd:46:ff:19:8c:52:06:74:ed:48:6e:b3:
db:e1:5b:62:29:0f:39:12:8d:44:eb:3c:3b:76:82:
a6:b1:a7:45:84:0e:5f:b3:2f:06:f6:f3:6a:28:e2:
00:9c:5c:7e:e8:61:ff:ff:78:7d:c5:38:ac:12:9d:
1d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F7:AE:FA:0F:5F:81:3C:13:B7:6C:BA:56:A2:47:AC:37:2D:9B:29
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144899.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a8c9::/32
Signature Algorithm: sha256WithRSAEncryption
0c:b0:f4:25:95:ce:e3:fa:9b:05:35:ff:25:3a:75:c0:3c:34:
19:fa:25:e6:6b:dd:6c:56:68:92:de:32:64:8d:e7:94:1d:e2:
f8:c1:5e:50:63:c6:53:d8:17:2e:7f:34:1d:63:73:63:4d:84:
6b:ec:f0:20:07:88:9c:bb:bb:3e:45:72:36:89:6e:23:49:e3:
fb:56:d5:a5:1d:07:d6:d6:96:86:14:9d:13:c9:bc:d4:37:fc:
2f:1e:a9:da:be:27:d5:89:c6:d1:ff:b9:91:68:6a:91:ff:b9:
ff:c3:63:d0:39:22:f8:fb:76:59:ae:6d:0d:41:2b:a9:bc:bb:
5b:4f:2a:42:74:c8:7a:99:46:9a:42:28:e1:4c:8b:49:31:84:
c3:86:94:38:8b:c8:46:f1:23:bb:91:ec:fc:33:e2:96:dc:1e:
41:b5:0d:1b:06:11:74:98:40:da:1c:e6:fc:77:60:00:0f:55:
9f:17:15:aa:cf:b0:f3:b5:73:7f:3d:88:68:66:59:5f:eb:9c:
4c:84:ea:75:84:f1:89:80:5f:36:cd:a9:8f:1e:52:b3:25:2c:
2a:a9:4e:7d:24:74:0f:ea:51:61:df:32:16:33:07:15:0c:4a:
ce:00:67:5e:2f:e3:8f:0d:b7:01:34:9a:f0:e7:0c:71:59:a9:
59:45:d7:2a
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUMwlnqL5sP5G5bQ/8u1nLbQBOEtwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjAwMzVaFw0yNzA1MjEwNjA1MzVaMDMxMTAvBgNV
BAMTKDJDRjdBRUZBMEY1RjgxM0MxM0I3NkNCQTU2QTI0N0FDMzcyRDlCMjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmWwOj623YwnIVnJjPWGoUO8bD
6Q91UYIPHLcPc1Ia9KLOIjX7ODiEMRRDC44Mnalff+aki+hnBsFDiXam21AtFAFZ
DBEV2DNnn91WyxD08GIikghfS+2KZbULn6IY1Ve68eCgGqL7P1imSQgyUqCjT70H
x7zRSDbBMNVEbqhROYdnKmDOVA2TtdiREvvpkj/vth0WdGRAHg3rM6ymc3pFpCtC
R35WfAi49yBEACAUp2pndFtcu5ceSwRVIhvZiy2eEIKXPs1G/xmMUgZ07Uhus9vh
W2IpDzkSjUTrPDt2gqaxp0WEDl+zLwb282oo4gCcXH7oYf//eH3FOKwSnR1dAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQULPeu+g9fgTwTt2y6VqJHrDctmykwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0ODk5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqoyTANBgkqhkiG9w0BAQsFAAOCAQEADLD0
JZXO4/qbBTX/JTp1wDw0Gfol5mvdbFZokt4yZI3nlB3i+MFeUGPGU9gXLn80HWNz
Y02Ea+zwIAeInLu7PkVyNoluI0nj+1bVpR0H1taWhhSdE8m81Df8Lx6p2r4n1YnG
0f+5kWhqkf+5/8Nj0Dki+Pt2Wa5tDUErqby7W08qQnTIeplGmkIo4UyLSTGEw4aU
OIvIRvEju5Hs/DPiltweQbUNGwYRdJhA2hzm/HdgAA9VnxcVqs+w87Vzfz2IaGZZ
X+ucTITqdYTxiYBfNs2pjx5SsyUsKqlOfSR0D+pRYd8yFjMHFQxKzgBnXi/jjw23
ATSa8OcMcVmpWUXXKg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:48 2026 by rpki-client