Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144902.roa
File: AS144902.roa (raw, json)
Hash identifier: LVikr6tp1RWgvDTqfedpjQyZg409tXaRjVUOsXZ91eg=
Subject key identifier: D0:AE:B5:8C:87:4A:96:40:63:C0:31:C5:FF:62:4A:BE:4E:F4:B9:70
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 077CB413A5E48544FCC113FDD3EC663A210C0184
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144902.roa
Signing time: Mon 25 May 2026 06:28:48 +0000
ROA not before: Mon 25 May 2026 06:23:48 +0000
ROA not after: Mon 24 May 2027 06:28:48 +0000
asID: 144902
IP address blocks: 240a:a8cc::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:7c:b4:13:a5:e4:85:44:fc:c1:13:fd:d3:ec:66:3a:21:0c:01:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:48 2026 GMT
Not After : May 24 06:28:48 2027 GMT
Subject: CN=D0AEB58C874A964063C031C5FF624ABE4EF4B970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a8:d1:88:aa:8a:25:c1:5a:29:9a:6c:51:cd:
e6:eb:dc:c5:5d:0a:0f:fa:71:65:37:44:83:b8:27:
87:5b:40:b9:57:e2:2c:dc:b0:94:e5:82:28:c5:1b:
20:4c:25:7d:6f:a6:8e:4a:50:ba:d0:24:48:c8:61:
c9:9e:96:9e:76:f8:e2:98:f4:d9:82:c4:9c:e6:e8:
02:75:dc:15:4f:05:8a:2a:74:80:4b:f1:90:c9:b7:
94:d5:19:99:c1:da:da:7f:c4:08:bf:f9:c7:b8:af:
df:45:9e:41:16:9a:0c:40:bb:8c:5b:f1:35:ea:a1:
ed:60:df:84:6a:3d:df:30:d3:dd:24:f0:81:bc:b9:
98:f2:e5:05:aa:92:bb:14:87:03:11:5a:6c:89:8b:
0a:1c:81:c6:bd:37:25:21:84:bd:c9:01:81:95:88:
ba:39:14:17:20:df:64:71:85:f8:4b:5c:0e:e2:cb:
5d:39:cf:00:10:d4:a7:cb:bb:84:46:8d:d3:0d:16:
ee:27:32:05:a3:f5:95:a1:0b:a6:37:3f:30:53:9e:
8a:74:cf:09:f5:ee:85:98:20:6b:0f:08:43:14:5e:
21:46:c9:6e:a8:9e:95:63:bf:2e:54:37:fb:0e:f0:
a4:bb:57:3f:86:af:ea:ab:bc:06:4b:90:25:9f:23:
90:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:AE:B5:8C:87:4A:96:40:63:C0:31:C5:FF:62:4A:BE:4E:F4:B9:70
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144902.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a8cc::/32
Signature Algorithm: sha256WithRSAEncryption
99:c0:60:67:f0:df:12:01:d0:f4:2d:be:44:af:86:3a:46:fd:
28:c7:7a:f0:f7:98:e5:ea:89:0e:9a:0b:6e:8a:98:3d:b0:c3:
8e:69:ea:c1:36:fd:6b:d1:cb:5b:09:a9:26:3c:f5:14:4d:dd:
3d:76:d5:d2:84:3e:72:2e:75:1a:31:46:27:b5:a1:cd:d2:9f:
98:5f:2e:6b:7d:94:62:03:5c:e8:47:52:bd:36:0c:10:0f:28:
de:13:12:2d:c6:5d:6c:60:1d:2b:00:5f:a3:e3:6a:b5:20:36:
ca:03:23:5b:03:c4:7b:a4:4c:dc:fe:a7:c0:be:15:d6:e3:6d:
8a:92:2f:07:c2:9a:cb:12:e3:67:1b:61:e7:e0:95:c1:30:cc:
ed:1d:47:64:e0:bf:a2:25:65:e3:e1:6f:bc:72:81:3a:ed:df:
74:38:80:95:db:84:71:97:42:2e:bd:60:a6:43:cf:09:89:bb:
3e:d0:66:75:3a:b9:4b:9d:1c:79:1e:91:5a:02:ba:4c:f9:67:
a8:5c:d5:cb:d4:6a:f2:43:a4:ac:6c:7f:ef:ca:ba:ba:c1:a4:
5d:34:f3:b4:ba:ec:fa:17:89:0d:82:ca:c7:d1:d1:27:b6:ec:
c6:be:70:29:6b:65:63:c3:b5:1f:94:59:ec:f3:ea:91:74:32:
01:2b:d4:25
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUB3y0E6XkhUT8wRP90+xmOiEMAYQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwNjIzNDhaFw0yNzA1MjQwNjI4NDhaMDMxMTAvBgNV
BAMTKEQwQUVCNThDODc0QTk2NDA2M0MwMzFDNUZGNjI0QUJFNEVGNEI5NzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCqNGIqoolwVopmmxRzebr3MVd
Cg/6cWU3RIO4J4dbQLlX4izcsJTlgijFGyBMJX1vpo5KULrQJEjIYcmelp52+OKY
9NmCxJzm6AJ13BVPBYoqdIBL8ZDJt5TVGZnB2tp/xAi/+ce4r99FnkEWmgxAu4xb
8TXqoe1g34RqPd8w090k8IG8uZjy5QWqkrsUhwMRWmyJiwocgca9NyUhhL3JAYGV
iLo5FBcg32RxhfhLXA7iy105zwAQ1KfLu4RGjdMNFu4nMgWj9ZWhC6Y3PzBTnop0
zwn17oWYIGsPCEMUXiFGyW6onpVjvy5UN/sO8KS7Vz+Gr+qrvAZLkCWfI5AdAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU0K61jIdKlkBjwDHF/2JKvk70uXAwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0OTAyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqozDANBgkqhkiG9w0BAQsFAAOCAQEAmcBg
Z/DfEgHQ9C2+RK+GOkb9KMd68PeY5eqJDpoLboqYPbDDjmnqwTb9a9HLWwmpJjz1
FE3dPXbV0oQ+ci51GjFGJ7WhzdKfmF8ua32UYgNc6EdSvTYMEA8o3hMSLcZdbGAd
KwBfo+NqtSA2ygMjWwPEe6RM3P6nwL4V1uNtipIvB8KayxLjZxth5+CVwTDM7R1H
ZOC/oiVl4+FvvHKBOu3fdDiAlduEcZdCLr1gpkPPCYm7PtBmdTq5S50ceR6RWgK6
TPlnqFzVy9Rq8kOkrGx/78q6usGkXTTztLrs+heJDYLKx9HRJ7bsxr5wKWtlY8O1
H5RZ7PPqkXQyASvUJQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:11 2026 by rpki-client