Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144927.roa
File: AS144927.roa (raw, json)
Hash identifier: E8eQK/dpqHPbLvdbF/3hEgbq7uX99wyQevgAPFTbS/Y=
Subject key identifier: 46:2F:BE:CB:06:4D:A4:15:BF:64:CF:EC:37:82:1D:E3:26:ED:1E:58
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 360F83E8F2DE72D28ACB407B81656BFC335BA8C1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144927.roa
Signing time: Fri 22 May 2026 07:41:11 +0000
ROA not before: Fri 22 May 2026 07:36:11 +0000
ROA not after: Fri 21 May 2027 07:41:11 +0000
asID: 144927
IP address blocks: 240a:a8e5::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:0f:83:e8:f2:de:72:d2:8a:cb:40:7b:81:65:6b:fc:33:5b:a8:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:36:11 2026 GMT
Not After : May 21 07:41:11 2027 GMT
Subject: CN=462FBECB064DA415BF64CFEC37821DE326ED1E58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bf:3c:7b:3b:4c:ce:5b:a2:9b:f4:fa:82:45:
1c:1c:78:43:fc:d1:57:13:c7:a2:4d:34:79:6c:eb:
73:b1:34:32:6e:13:0f:84:58:ca:10:59:5a:2e:45:
03:39:1e:54:62:87:b7:da:21:d2:65:6a:13:5d:0a:
1b:5c:7a:f4:24:72:31:7b:43:b3:28:59:30:0e:18:
98:24:46:94:35:3d:5e:48:c6:e8:f6:79:32:33:21:
c0:f4:81:73:e0:3d:3e:3f:d8:59:c3:b7:77:89:0a:
27:d3:78:65:7f:67:51:07:72:d1:f8:cf:9f:2c:b4:
3f:3f:94:66:03:32:23:e7:c1:17:53:b6:af:e5:1a:
2c:65:ec:dd:7a:6f:e4:09:3a:29:27:4b:34:46:db:
e0:c7:7e:e6:f8:ff:1b:d0:ff:01:d1:3f:d5:6e:97:
57:9d:ed:a0:c5:34:66:da:da:58:2c:e8:11:e0:9d:
5b:de:e9:1b:e1:8b:8a:a8:ad:2e:63:88:f1:40:a5:
73:bf:66:94:3f:f9:58:8f:74:25:4f:84:17:18:89:
1a:48:b1:63:0d:cd:b2:ab:ea:81:2c:a6:f1:0f:0c:
14:86:af:05:33:70:42:72:e0:ab:65:50:03:44:70:
45:ef:84:e3:50:b1:0a:22:fb:9a:b6:2c:2d:2b:cc:
56:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:2F:BE:CB:06:4D:A4:15:BF:64:CF:EC:37:82:1D:E3:26:ED:1E:58
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144927.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a8e5::/32
Signature Algorithm: sha256WithRSAEncryption
04:3f:72:a8:1c:d6:d3:bb:ab:fd:e7:b0:1e:ac:5c:a1:cd:35:
26:4b:81:25:26:20:76:d5:d4:84:c0:64:7d:7a:b0:e6:7a:b3:
1e:5d:43:07:a3:ab:96:64:ed:81:9d:17:82:36:42:92:e1:e3:
5b:1b:94:14:a7:85:0a:fd:47:c0:9d:e0:d0:2a:67:e3:c8:51:
eb:b9:20:cb:10:16:53:4f:0d:98:cf:b0:f8:91:3b:41:48:ce:
eb:19:60:e0:3a:14:d4:91:49:56:b8:37:1e:c5:b0:f8:9f:a5:
81:37:2f:cc:96:16:a2:1f:0d:4c:3b:48:51:40:55:08:af:0e:
a7:51:d9:a8:51:19:7c:a1:3c:93:29:fb:3d:a3:1b:f3:59:a3:
23:9c:99:cd:f7:0f:2a:91:f7:0d:06:90:bc:5a:c3:47:ba:b8:
72:e4:e2:a8:b1:a9:87:42:5a:db:f8:cb:77:bd:9f:31:88:84:
37:71:ef:15:b9:c1:82:da:aa:8b:ee:2e:41:15:d4:25:3f:12:
0d:82:71:60:3b:90:03:83:62:5e:30:82:98:c6:39:57:7e:39:
b1:a8:5e:68:87:20:52:71:f5:37:4d:d1:5b:eb:3d:d8:30:fa:
70:d6:5f:1d:03:c6:72:8d:11:ba:46:13:69:1d:ea:1a:cd:6a:
8c:af:dc:ae
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUNg+D6PLectKKy0B7gWVr/DNbqMEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzM2MTFaFw0yNzA1MjEwNzQxMTFaMDMxMTAvBgNV
BAMTKDQ2MkZCRUNCMDY0REE0MTVCRjY0Q0ZFQzM3ODIxREUzMjZFRDFFNTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBvzx7O0zOW6Kb9PqCRRwceEP8
0VcTx6JNNHls63OxNDJuEw+EWMoQWVouRQM5HlRih7faIdJlahNdChtcevQkcjF7
Q7MoWTAOGJgkRpQ1PV5Ixuj2eTIzIcD0gXPgPT4/2FnDt3eJCifTeGV/Z1EHctH4
z58stD8/lGYDMiPnwRdTtq/lGixl7N16b+QJOiknSzRG2+DHfub4/xvQ/wHRP9Vu
l1ed7aDFNGba2lgs6BHgnVve6Rvhi4qorS5jiPFApXO/ZpQ/+ViPdCVPhBcYiRpI
sWMNzbKr6oEspvEPDBSGrwUzcEJy4KtlUANEcEXvhONQsQoi+5q2LC0rzFblAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQURi++ywZNpBW/ZM/sN4Id4ybtHlgwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0OTI3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqo5TANBgkqhkiG9w0BAQsFAAOCAQEABD9y
qBzW07ur/eewHqxcoc01JkuBJSYgdtXUhMBkfXqw5nqzHl1DB6OrlmTtgZ0XgjZC
kuHjWxuUFKeFCv1HwJ3g0Cpn48hR67kgyxAWU08NmM+w+JE7QUjO6xlg4DoU1JFJ
Vrg3HsWw+J+lgTcvzJYWoh8NTDtIUUBVCK8Op1HZqFEZfKE8kyn7PaMb81mjI5yZ
zfcPKpH3DQaQvFrDR7q4cuTiqLGph0Ja2/jLd72fMYiEN3HvFbnBgtqqi+4uQRXU
JT8SDYJxYDuQA4NiXjCCmMY5V345saheaIcgUnH1N03RW+s92DD6cNZfHQPGco0R
ukYTaR3qGs1qjK/crg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:14 2026 by rpki-client