Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144924.roa
File: AS144924.roa (raw, json)
Hash identifier: 2pFLXg6Ss8v4KSSarh5HAg91ssuGvHfwOlSP8sBBdkk=
Subject key identifier: 37:CC:2A:77:70:1E:EB:F8:AA:52:EC:0D:06:43:86:31:DD:31:97:2E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3ACAAC53346156AE2F829AEEA5FAD0E942D44895
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144924.roa
Signing time: Fri 22 May 2026 07:31:59 +0000
ROA not before: Fri 22 May 2026 07:26:59 +0000
ROA not after: Fri 21 May 2027 07:31:59 +0000
asID: 144924
IP address blocks: 240a:a8e2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:ca:ac:53:34:61:56:ae:2f:82:9a:ee:a5:fa:d0:e9:42:d4:48:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:26:59 2026 GMT
Not After : May 21 07:31:59 2027 GMT
Subject: CN=37CC2A77701EEBF8AA52EC0D06438631DD31972E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:be:9c:bb:b8:d2:ab:01:59:9f:20:dd:9d:46:
40:d6:27:0f:97:bd:2e:6f:af:39:89:1b:94:97:bb:
b3:71:bf:0b:98:1e:f4:6d:1a:37:fa:03:08:f5:50:
b0:a6:77:6e:09:ae:45:1d:cc:24:54:69:44:60:c3:
7a:f0:21:07:2f:70:32:71:97:04:a5:a9:cc:9c:a0:
5b:90:72:09:15:12:95:83:df:3c:b8:57:58:f5:60:
d2:6c:76:c2:0a:ec:87:d9:8a:ed:82:ef:01:60:20:
50:0c:4e:b0:63:7b:59:b7:46:f8:bd:76:47:dc:42:
58:45:48:de:81:65:e3:ba:b1:2a:bb:40:65:97:fd:
5f:e1:b5:d7:a2:f3:a1:ff:9e:03:ea:6a:27:8d:bb:
77:fb:e8:07:34:72:b8:da:be:20:5b:86:e6:9a:44:
4c:15:cc:14:c5:d9:b3:3c:3d:c2:e1:75:e1:27:68:
d5:b8:a8:98:5d:55:b5:42:4d:92:fe:e3:10:12:71:
ee:5d:e5:45:8a:d3:79:4d:d8:09:54:a5:38:1b:46:
2a:c1:dd:f3:b8:d2:11:da:c5:a9:7e:73:07:7d:3e:
1c:e2:90:94:7a:34:2e:68:05:55:88:3e:22:d9:28:
d9:42:42:8c:6d:9d:5e:59:ba:54:cb:fc:99:60:82:
12:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:CC:2A:77:70:1E:EB:F8:AA:52:EC:0D:06:43:86:31:DD:31:97:2E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144924.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a8e2::/32
Signature Algorithm: sha256WithRSAEncryption
8e:0f:6a:07:9c:b0:56:0d:51:f7:91:e7:6f:b4:9e:62:63:5d:
0f:c3:65:7e:ed:46:e2:16:38:8c:2c:66:60:69:5a:07:17:d5:
00:74:59:ea:66:90:14:d5:c0:e8:0b:ee:5b:05:e2:b1:14:ef:
72:d9:2d:fd:17:66:c3:78:92:02:ac:81:62:77:94:ec:a1:e2:
f6:a2:f7:7b:f4:5d:3f:86:1f:c6:f1:f3:bc:5e:bc:5a:58:63:
7f:ba:43:3e:97:f0:e8:2a:5b:ee:bb:eb:8c:af:6a:b8:94:cb:
e2:05:02:3f:b9:cc:e5:0e:40:f5:1d:ec:7e:bc:16:34:a8:06:
dd:19:1c:f6:d3:dd:e4:5d:50:31:fb:55:46:d7:29:22:8f:eb:
23:4e:9a:d7:8f:c9:97:56:14:d8:58:f4:1c:a2:40:6f:71:0f:
b1:48:55:54:25:a7:c0:9a:db:78:bb:76:e1:c5:1c:2d:6d:d2:
15:ef:6f:d7:54:f8:ed:6d:00:78:12:78:7a:f2:d0:6c:f9:a1:
ef:e9:07:8b:f6:16:e0:34:67:6a:d7:33:69:06:aa:8f:7a:4f:
31:fe:ac:03:4f:fc:2b:d1:4c:fe:20:11:4e:6b:81:ab:18:d1:
8b:9e:58:0f:e7:4d:93:66:c5:49:65:f2:c6:1b:d3:14:e6:83:
81:51:7f:17
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUOsqsUzRhVq4vgprupfrQ6ULUSJUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzI2NTlaFw0yNzA1MjEwNzMxNTlaMDMxMTAvBgNV
BAMTKDM3Q0MyQTc3NzAxRUVCRjhBQTUyRUMwRDA2NDM4NjMxREQzMTk3MkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6vpy7uNKrAVmfIN2dRkDWJw+X
vS5vrzmJG5SXu7NxvwuYHvRtGjf6Awj1ULCmd24JrkUdzCRUaURgw3rwIQcvcDJx
lwSlqcycoFuQcgkVEpWD3zy4V1j1YNJsdsIK7IfZiu2C7wFgIFAMTrBje1m3Rvi9
dkfcQlhFSN6BZeO6sSq7QGWX/V/htdei86H/ngPqaieNu3f76Ac0crjaviBbhuaa
REwVzBTF2bM8PcLhdeEnaNW4qJhdVbVCTZL+4xASce5d5UWK03lN2AlUpTgbRirB
3fO40hHaxal+cwd9PhzikJR6NC5oBVWIPiLZKNlCQoxtnV5ZulTL/JlgghLhAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUN8wqd3Ae6/iqUuwNBkOGMd0xly4wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0OTI0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqo4jANBgkqhkiG9w0BAQsFAAOCAQEAjg9q
B5ywVg1R95Hnb7SeYmNdD8Nlfu1G4hY4jCxmYGlaBxfVAHRZ6maQFNXA6AvuWwXi
sRTvctkt/Rdmw3iSAqyBYneU7KHi9qL3e/RdP4YfxvHzvF68Wlhjf7pDPpfw6Cpb
7rvrjK9quJTL4gUCP7nM5Q5A9R3sfrwWNKgG3Rkc9tPd5F1QMftVRtcpIo/rI06a
14/Jl1YU2Fj0HKJAb3EPsUhVVCWnwJrbeLt24cUcLW3SFe9v11T47W0AeBJ4evLQ
bPmh7+kHi/YW4DRnatczaQaqj3pPMf6sA0/8K9FM/iARTmuBqxjRi55YD+dNk2bF
SWXyxhvTFOaDgVF/Fw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:59 2026 by rpki-client