Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144940.roa
File: AS144940.roa (raw, json)
Hash identifier: ZXZemdj498XHiSKtGg90IopiuAoZYTh94LpwQFOVIVw=
Subject key identifier: 7B:F5:4B:73:51:43:6E:11:48:11:E2:79:DD:68:1B:1D:59:A5:EA:79
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 539AD472CC50FC7D1587EFAFEAF5B0B152387878
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144940.roa
Signing time: Tue 26 May 2026 01:13:17 +0000
ROA not before: Tue 26 May 2026 01:08:17 +0000
ROA not after: Tue 25 May 2027 01:13:17 +0000
asID: 144940
IP address blocks: 240a:a8f2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:9a:d4:72:cc:50:fc:7d:15:87:ef:af:ea:f5:b0:b1:52:38:78:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:17 2026 GMT
Not After : May 25 01:13:17 2027 GMT
Subject: CN=7BF54B7351436E114811E279DD681B1D59A5EA79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:dc:62:bb:de:1b:b0:fe:7f:6b:de:cb:af:0e:
1f:dd:f5:b3:ce:9f:7b:7f:b4:62:a3:d7:5f:93:99:
9b:81:fd:2f:c5:c5:21:b6:08:1d:d8:67:30:a4:44:
4c:a7:f0:1c:0a:51:01:8b:41:c9:3c:4a:d9:b4:3b:
6b:14:4a:55:45:15:3b:d6:b8:34:fd:cb:44:bc:65:
ce:80:89:f2:3b:32:ce:12:bc:e7:c7:c2:ba:9c:d0:
db:fa:ff:bf:80:a9:92:ef:13:55:56:84:25:78:fb:
58:fc:56:c7:57:1c:6b:17:4c:04:4e:f7:8f:56:8d:
04:8b:26:76:9e:34:78:8f:dc:76:02:2d:0b:a2:ba:
9c:73:1c:b9:8f:ec:80:83:30:ad:d8:c6:7b:cd:04:
46:76:35:06:db:b0:dc:a3:9a:2c:34:2c:92:4d:b4:
5d:52:ba:75:0f:62:6d:57:64:da:b5:82:e7:53:d2:
06:aa:eb:8c:21:d8:51:10:8f:a4:ce:4b:63:73:ae:
d7:dc:ad:29:a2:96:4d:3a:5b:05:ca:5d:5a:27:5f:
32:8b:c6:0c:ea:a1:73:33:40:f7:13:cc:7c:f5:04:
b1:2d:2a:6c:04:1f:20:d6:31:8d:eb:7b:a4:d4:2a:
41:c4:32:dc:f3:2b:09:3b:76:19:d0:df:82:89:17:
3b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F5:4B:73:51:43:6E:11:48:11:E2:79:DD:68:1B:1D:59:A5:EA:79
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144940.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a8f2::/32
Signature Algorithm: sha256WithRSAEncryption
41:5f:5e:80:ef:d0:c2:84:f1:63:f6:97:1f:1b:73:c6:bb:3a:
07:a5:96:24:67:5f:48:30:f6:76:b2:88:d1:0a:fc:b2:2e:13:
09:53:72:14:c5:5d:fa:e5:be:b8:9e:ac:ad:d7:4a:58:9b:ea:
a8:48:c6:ec:34:2e:31:5c:33:2b:4b:b4:a6:83:b4:64:c1:17:
89:c4:1e:5f:8f:4f:a5:24:a0:6b:56:48:49:70:41:f3:29:d2:
90:31:1f:f2:2c:8c:cb:dc:2f:db:b4:f0:2f:06:96:c5:a5:9c:
dd:46:b7:e9:b2:7e:49:bb:96:2d:a4:a8:dd:e6:70:74:dd:f2:
7a:83:85:ca:0a:62:ca:e0:e7:6f:34:55:9b:0f:f6:17:14:ae:
9b:0f:53:20:a4:54:6e:3f:fa:0b:04:71:98:a8:ac:b4:1d:d0:
02:48:f1:57:3b:d8:3b:8c:1b:f4:7b:22:ee:7b:72:1a:0e:22:
ef:a4:f1:1e:41:cb:42:fa:0b:0a:a3:bd:ac:4d:5b:17:0b:46:
3f:dc:23:ac:b9:bb:13:0f:83:97:50:a2:c4:71:ee:53:b8:e1:
81:65:5c:68:37:a9:3a:82:b5:55:6e:20:df:f8:44:44:aa:b1:
e8:5b:5b:2a:7c:47:cd:f9:19:2a:b0:78:7b:b9:17:59:09:3d:
c7:35:37:b5
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUU5rUcsxQ/H0Vh++v6vWwsVI4eHgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMTA4MTdaFw0yNzA1MjUwMTEzMTdaMDMxMTAvBgNV
BAMTKDdCRjU0QjczNTE0MzZFMTE0ODExRTI3OURENjgxQjFENTlBNUVBNzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv3GK73huw/n9r3suvDh/d9bPO
n3t/tGKj11+TmZuB/S/FxSG2CB3YZzCkREyn8BwKUQGLQck8Stm0O2sUSlVFFTvW
uDT9y0S8Zc6AifI7Ms4SvOfHwrqc0Nv6/7+AqZLvE1VWhCV4+1j8VsdXHGsXTARO
949WjQSLJnaeNHiP3HYCLQuiupxzHLmP7ICDMK3YxnvNBEZ2NQbbsNyjmiw0LJJN
tF1SunUPYm1XZNq1gudT0gaq64wh2FEQj6TOS2NzrtfcrSmilk06WwXKXVonXzKL
xgzqoXMzQPcTzHz1BLEtKmwEHyDWMY3re6TUKkHEMtzzKwk7dhnQ34KJFzs1AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUe/VLc1FDbhFIEeJ53WgbHVml6nkwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0OTQwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqo8jANBgkqhkiG9w0BAQsFAAOCAQEAQV9e
gO/QwoTxY/aXHxtzxrs6B6WWJGdfSDD2drKI0Qr8si4TCVNyFMVd+uW+uJ6srddK
WJvqqEjG7DQuMVwzK0u0poO0ZMEXicQeX49PpSSga1ZISXBB8ynSkDEf8iyMy9wv
27TwLwaWxaWc3Ua36bJ+SbuWLaSo3eZwdN3yeoOFygpiyuDnbzRVmw/2FxSumw9T
IKRUbj/6CwRxmKistB3QAkjxVzvYO4wb9Hsi7ntyGg4i76TxHkHLQvoLCqO9rE1b
FwtGP9wjrLm7Ew+Dl1CixHHuU7jhgWVcaDepOoK1VW4g3/hERKqx6FtbKnxHzfkZ
KrB4e7kXWQk9xzU3tQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:07 2026 by rpki-client