Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144938.roa
File: AS144938.roa (raw, json)
Hash identifier: t/AJUEDv5zs/qRONJQiw1RT1rEgyHkLoYyfbOwMpgSk=
Subject key identifier: F4:E7:B0:29:4D:ED:3B:D5:1C:69:A1:EF:83:FA:7D:1C:F1:CE:A0:8D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 18625B4DC156AE5B3420FA03AF89002991C8910D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144938.roa
Signing time: Tue 26 May 2026 02:34:52 +0000
ROA not before: Tue 26 May 2026 02:29:52 +0000
ROA not after: Tue 25 May 2027 02:34:52 +0000
asID: 144938
IP address blocks: 240a:a8f0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:62:5b:4d:c1:56:ae:5b:34:20:fa:03:af:89:00:29:91:c8:91:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:29:52 2026 GMT
Not After : May 25 02:34:52 2027 GMT
Subject: CN=F4E7B0294DED3BD51C69A1EF83FA7D1CF1CEA08D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1d:75:40:d7:31:98:71:b6:a4:66:47:c6:6d:
98:a7:e1:5b:9e:ab:11:c4:88:7c:3b:85:b8:5a:cf:
0a:f6:3a:20:39:85:8a:ec:4f:06:89:d6:2a:00:42:
24:8a:7f:ba:37:bd:be:d8:5d:5a:6c:60:ec:70:2b:
a7:fa:f4:f3:7c:c7:bf:f9:f4:b5:bb:dd:25:7c:ba:
50:9c:77:0a:35:bb:e0:bb:a3:3d:2f:60:2d:c0:13:
ef:ef:d1:33:2d:76:36:80:8a:d7:38:29:37:ce:f7:
a2:87:0b:02:5d:e2:f6:e6:8d:4d:68:32:cc:61:95:
29:57:08:de:f5:a5:7e:d4:c4:ec:e1:04:d9:ed:04:
d9:ed:f4:5e:a3:fb:1a:be:96:b7:ef:6d:26:3c:6c:
59:ac:83:63:6f:d6:4b:65:0c:86:e1:35:4b:2d:78:
e3:55:42:9c:d0:92:b3:23:dd:92:59:44:3f:81:86:
23:bb:28:00:83:89:c6:c8:bb:b8:55:29:6c:da:98:
95:69:88:8b:4a:27:78:da:db:6a:b0:05:cb:a0:b0:
25:83:a3:fc:ac:e4:95:b1:bd:b5:12:be:35:52:d5:
0d:4b:49:1a:8f:46:46:5d:b9:48:20:0d:fc:71:2b:
14:84:da:42:7f:82:a0:37:2a:8b:f1:97:eb:88:be:
f5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E7:B0:29:4D:ED:3B:D5:1C:69:A1:EF:83:FA:7D:1C:F1:CE:A0:8D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a8f0::/32
Signature Algorithm: sha256WithRSAEncryption
a2:a3:7d:9d:d9:8a:73:62:9f:7f:93:76:c3:04:7e:09:58:19:
38:b5:b1:f9:0f:e4:2c:67:15:f7:0d:5a:de:bd:ea:cb:e8:29:
37:53:64:c8:81:10:8c:44:fd:8c:ae:d1:6d:5d:08:e4:23:17:
bd:f7:d9:06:7b:e8:5b:4c:73:b2:0f:9a:98:70:7b:6c:9b:c9:
76:6c:dc:cb:d6:dc:b5:fe:b4:5c:ae:1b:b7:fc:da:a5:8e:5f:
c0:73:4f:d9:cc:9d:9b:f6:81:b9:ff:57:9e:28:a4:78:d8:36:
3a:76:21:91:aa:d2:8f:fe:e5:67:50:e8:e2:ba:ac:ed:76:f5:
18:cb:48:e9:e7:2f:58:5b:f6:c8:53:2e:0c:01:af:9b:ad:b8:
8e:7b:c4:a3:90:ad:94:30:6f:19:e1:ae:e3:48:51:58:7a:9c:
86:a9:af:cb:bd:5e:11:6a:fb:d6:d6:e8:e0:bc:0e:d8:1a:b7:
7f:a5:d7:cc:46:9d:4f:78:9f:67:0e:59:67:04:de:33:e1:08:
6d:3d:ae:bd:7e:7a:81:66:fc:5b:07:04:0c:03:dc:d1:ad:d1:
24:c7:69:f9:68:c2:cc:21:3f:62:0c:04:bb:9b:ac:1c:33:b2:
74:9b:e7:c0:2e:ef:db:68:46:ed:5a:e8:4e:56:f0:48:0d:7d:
8a:8b:c3:70
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUGGJbTcFWrls0IPoDr4kAKZHIkQ0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMjI5NTJaFw0yNzA1MjUwMjM0NTJaMDMxMTAvBgNV
BAMTKEY0RTdCMDI5NERFRDNCRDUxQzY5QTFFRjgzRkE3RDFDRjFDRUEwOEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZHXVA1zGYcbakZkfGbZin4Vue
qxHEiHw7hbhazwr2OiA5hYrsTwaJ1ioAQiSKf7o3vb7YXVpsYOxwK6f69PN8x7/5
9LW73SV8ulCcdwo1u+C7oz0vYC3AE+/v0TMtdjaAitc4KTfO96KHCwJd4vbmjU1o
MsxhlSlXCN71pX7UxOzhBNntBNnt9F6j+xq+lrfvbSY8bFmsg2Nv1ktlDIbhNUst
eONVQpzQkrMj3ZJZRD+BhiO7KACDicbIu7hVKWzamJVpiItKJ3ja22qwBcugsCWD
o/ys5JWxvbUSvjVS1Q1LSRqPRkZduUggDfxxKxSE2kJ/gqA3Kovxl+uIvvVDAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU9OewKU3tO9UcaaHvg/p9HPHOoI0wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0OTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqo8DANBgkqhkiG9w0BAQsFAAOCAQEAoqN9
ndmKc2Kff5N2wwR+CVgZOLWx+Q/kLGcV9w1a3r3qy+gpN1NkyIEQjET9jK7RbV0I
5CMXvffZBnvoW0xzsg+amHB7bJvJdmzcy9bctf60XK4bt/zapY5fwHNP2cydm/aB
uf9XniikeNg2OnYhkarSj/7lZ1Do4rqs7Xb1GMtI6ecvWFv2yFMuDAGvm624jnvE
o5CtlDBvGeGu40hRWHqchqmvy71eEWr71tbo4LwO2Bq3f6XXzEadT3ifZw5ZZwTe
M+EIbT2uvX56gWb8WwcEDAPc0a3RJMdp+WjCzCE/YgwEu5usHDOydJvnwC7v22hG
7VroTlbwSA19iovDcA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:56 2026 by rpki-client