Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144923.roa
File: AS144923.roa (raw, json)
Hash identifier: NuXPElfjzJtl8eWcSFwpGIaxY0wocuD+A+PXOCFEp6Y=
Subject key identifier: 82:CE:15:1B:AC:E5:6A:94:56:AC:EF:4B:75:0A:56:B1:0A:58:B9:C8
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2C3490366803C9AA80FFE05AA3194FD2E2BFBAD8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144923.roa
Signing time: Fri 22 May 2026 07:08:48 +0000
ROA not before: Fri 22 May 2026 07:03:48 +0000
ROA not after: Fri 21 May 2027 07:08:48 +0000
asID: 144923
IP address blocks: 240a:a8e1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:34:90:36:68:03:c9:aa:80:ff:e0:5a:a3:19:4f:d2:e2:bf:ba:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:03:48 2026 GMT
Not After : May 21 07:08:48 2027 GMT
Subject: CN=82CE151BACE56A9456ACEF4B750A56B10A58B9C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c1:ea:42:05:f8:7c:ab:b4:9e:5e:3e:54:97:
c2:eb:e8:52:07:1d:26:e1:1d:ee:1c:a3:74:1a:62:
4e:e6:53:32:db:81:c3:86:6d:81:a3:ae:49:14:41:
48:db:66:bb:a8:7a:20:67:d0:7b:18:d8:e0:87:94:
c0:f9:6d:8a:be:d0:bd:90:80:a0:e5:2d:5f:c8:27:
a3:4b:06:68:a5:c9:d7:f2:e3:10:c2:cc:d4:d7:1c:
20:47:71:b8:1f:3c:bd:f1:1e:bc:c6:55:d5:31:e3:
f6:8b:3a:b2:bd:5b:79:41:6b:0e:a8:2f:e1:87:9f:
12:e7:29:5c:82:6e:87:4e:42:1a:7c:f1:5e:78:b2:
fd:b3:40:68:5d:70:5d:7e:c2:88:7f:ca:e2:7f:86:
19:2d:fb:99:da:1e:94:ca:50:4d:22:6c:a4:c5:51:
b9:ea:6d:af:26:9f:db:85:f0:41:92:4b:65:f3:48:
5a:fb:12:3e:1b:bb:fe:3b:d7:eb:e3:f8:e4:ed:61:
cf:60:fd:cb:41:c6:9c:ea:b7:67:03:fc:19:0a:6c:
06:54:b2:83:9f:ce:ea:3f:70:b6:c4:5c:7f:73:9b:
3b:7a:7c:a5:6e:e0:a0:4c:c2:fc:50:b7:25:04:51:
40:c5:11:ef:40:bb:7f:b9:4c:39:cf:55:d5:c8:41:
d4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:CE:15:1B:AC:E5:6A:94:56:AC:EF:4B:75:0A:56:B1:0A:58:B9:C8
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144923.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a8e1::/32
Signature Algorithm: sha256WithRSAEncryption
41:39:80:36:dc:72:75:75:99:97:70:b5:be:5c:71:b4:1e:c9:
25:40:7f:16:a4:d8:a4:fb:0d:30:4d:f1:d3:10:b2:3e:2a:1f:
69:a2:4b:23:d1:40:4d:dc:12:37:9b:91:61:6c:d2:62:20:a1:
6b:38:99:f7:16:dd:f4:ee:61:78:12:cc:16:03:4e:4b:45:60:
ba:16:53:23:aa:fb:e1:a7:4c:2a:a4:d2:24:0b:c6:fc:0b:db:
3e:a3:7c:60:51:88:d3:f6:07:bd:71:bf:de:fb:b5:53:c1:54:
8b:4d:56:83:3b:5e:a1:11:ab:f4:2e:1e:f0:62:ce:3c:7b:05:
54:e7:82:1c:7e:52:10:df:53:96:02:ba:86:c7:a7:be:cf:f4:
27:f6:80:a0:e4:02:6f:87:03:81:b2:e3:1e:89:5d:e1:d5:4f:
8d:35:40:a5:75:10:c4:6e:22:65:9b:ed:cf:29:f5:ab:0d:ee:
fd:d7:a1:79:c6:fe:5b:6f:8b:77:56:17:c7:95:89:eb:0f:a5:
c0:fe:a4:de:df:69:c1:3a:60:94:47:4f:d5:60:26:e3:f8:3a:
64:be:61:5f:79:29:e5:82:06:ed:14:af:3c:fe:ce:6b:b9:88:
95:1d:2c:02:da:68:af:44:00:74:af:4c:ab:f9:64:44:97:70:
14:ad:be:fe
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIULDSQNmgDyaqA/+BaoxlP0uK/utgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzAzNDhaFw0yNzA1MjEwNzA4NDhaMDMxMTAvBgNV
BAMTKDgyQ0UxNTFCQUNFNTZBOTQ1NkFDRUY0Qjc1MEE1NkIxMEE1OEI5QzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKwepCBfh8q7SeXj5Ul8Lr6FIH
HSbhHe4co3QaYk7mUzLbgcOGbYGjrkkUQUjbZruoeiBn0HsY2OCHlMD5bYq+0L2Q
gKDlLV/IJ6NLBmilydfy4xDCzNTXHCBHcbgfPL3xHrzGVdUx4/aLOrK9W3lBaw6o
L+GHnxLnKVyCbodOQhp88V54sv2zQGhdcF1+woh/yuJ/hhkt+5naHpTKUE0ibKTF
Ubnqba8mn9uF8EGSS2XzSFr7Ej4bu/471+vj+OTtYc9g/ctBxpzqt2cD/BkKbAZU
soOfzuo/cLbEXH9zmzt6fKVu4KBMwvxQtyUEUUDFEe9Au3+5TDnPVdXIQdTDAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUgs4VG6zlapRWrO9LdQpWsQpYucgwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0OTIzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqo4TANBgkqhkiG9w0BAQsFAAOCAQEAQTmA
NtxydXWZl3C1vlxxtB7JJUB/FqTYpPsNME3x0xCyPiofaaJLI9FATdwSN5uRYWzS
YiChaziZ9xbd9O5heBLMFgNOS0VguhZTI6r74adMKqTSJAvG/AvbPqN8YFGI0/YH
vXG/3vu1U8FUi01WgzteoRGr9C4e8GLOPHsFVOeCHH5SEN9TlgK6hsenvs/0J/aA
oOQCb4cDgbLjHold4dVPjTVApXUQxG4iZZvtzyn1qw3u/dehecb+W2+Ld1YXx5WJ
6w+lwP6k3t9pwTpglEdP1WAm4/g6ZL5hX3kp5YIG7RSvPP7Oa7mIlR0sAtpor0QA
dK9Mq/lkRJdwFK2+/g==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:12 2026 by rpki-client