Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144946.roa
File: AS144946.roa (raw, json)
Hash identifier: QnDvOUgTGuU8d6B0NBzp32LR0xJuhVHHztr8+g8fSz4=
Subject key identifier: AC:18:5B:FC:C7:6C:F2:0A:F6:A6:8F:A6:1C:C3:29:9C:D4:24:99:04
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5DFD3DACCA2A6EB65A1146C946AAA998FB151FF4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144946.roa
Signing time: Fri 22 May 2026 06:05:36 +0000
ROA not before: Fri 22 May 2026 06:00:36 +0000
ROA not after: Fri 21 May 2027 06:05:36 +0000
asID: 144946
IP address blocks: 240a:a8f8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:fd:3d:ac:ca:2a:6e:b6:5a:11:46:c9:46:aa:a9:98:fb:15:1f:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:36 2026 GMT
Not After : May 21 06:05:36 2027 GMT
Subject: CN=AC185BFCC76CF20AF6A68FA61CC3299CD4249904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5a:95:e5:aa:2d:49:84:a4:d7:25:e9:b1:93:
74:1c:cc:0e:ca:31:09:2c:5d:76:51:c9:89:34:37:
20:f4:73:a9:a8:79:3f:67:f4:13:40:f5:51:cc:e8:
30:a4:dc:63:fa:f4:23:36:8f:bc:c5:66:4c:43:0f:
5b:49:39:7e:2b:65:9c:ee:b8:7d:40:1a:51:63:e9:
33:ff:1a:15:ae:ed:9e:00:f8:af:27:a3:f7:4d:e1:
a0:aa:b4:24:5d:c2:67:27:98:4b:28:d1:72:d1:1d:
a4:3e:9a:97:33:45:3c:ad:1d:96:93:ce:b3:81:97:
ba:66:ae:f6:ae:31:23:27:11:4c:02:25:c2:5c:ce:
c3:d9:0c:94:88:61:2d:d5:c3:e4:f5:a0:b9:44:83:
ab:a4:c2:79:e2:7d:72:59:f2:6f:83:5f:20:8b:e0:
ee:60:3a:13:4e:5a:3b:5e:88:46:cf:c0:ff:e6:8a:
9e:43:24:9c:30:46:1a:f4:20:33:f4:e4:a3:b1:88:
40:7c:c8:17:c9:b3:23:2b:f6:a1:33:0d:d5:36:89:
e9:3c:a9:60:a1:7a:e4:5b:f0:0c:7a:03:b1:a0:db:
28:a2:88:dc:5e:1a:4f:0b:71:ed:b4:10:1b:da:a9:
9e:df:d1:5f:e8:c4:a5:10:aa:80:5f:2f:4c:24:a7:
e5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:18:5B:FC:C7:6C:F2:0A:F6:A6:8F:A6:1C:C3:29:9C:D4:24:99:04
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144946.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a8f8::/32
Signature Algorithm: sha256WithRSAEncryption
1d:8e:88:e7:5b:ed:94:b5:19:d2:8b:f7:aa:db:8d:d2:78:eb:
f3:bc:b0:32:59:52:27:64:9f:f4:fa:d7:7a:74:c7:0c:cf:64:
67:53:2b:cf:02:70:1a:c8:00:7d:e1:44:aa:e2:a8:94:db:09:
1e:8a:08:79:16:88:3c:36:04:6d:17:1e:78:56:e9:7b:1e:c6:
24:73:85:70:ae:6d:ed:7e:93:07:e7:37:9a:16:d1:49:7c:56:
cf:14:7e:70:7e:c1:77:5c:a6:59:61:bb:c1:04:47:58:1f:65:
a1:88:ef:4b:35:ad:e3:c4:ff:28:e7:18:37:47:73:45:87:63:
a1:8a:02:88:c4:ce:d8:b6:41:d4:58:65:72:b7:00:40:68:58:
be:c1:b1:f8:57:fd:e4:2a:b9:0a:7b:b1:d6:42:ca:8e:a8:2b:
ee:8a:5e:16:97:32:7d:55:74:a9:8b:ef:48:d2:4b:4b:70:8a:
6f:f0:6f:25:48:93:ca:24:24:0d:f7:1e:84:36:d1:b9:1b:98:
59:d5:e8:e6:64:51:b5:2a:2f:2f:2e:8f:5e:5f:50:d7:24:4f:
a2:d3:df:29:c1:f7:30:aa:a5:20:6d:e8:86:00:29:bd:d8:bc:
c2:61:9c:93:04:f8:10:bf:d4:a3:56:03:cd:29:4e:2a:52:f1:
fb:94:0c:2d
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUXf09rMoqbrZaEUbJRqqpmPsVH/QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjAwMzZaFw0yNzA1MjEwNjA1MzZaMDMxMTAvBgNV
BAMTKEFDMTg1QkZDQzc2Q0YyMEFGNkE2OEZBNjFDQzMyOTlDRDQyNDk5MDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwWpXlqi1JhKTXJemxk3QczA7K
MQksXXZRyYk0NyD0c6moeT9n9BNA9VHM6DCk3GP69CM2j7zFZkxDD1tJOX4rZZzu
uH1AGlFj6TP/GhWu7Z4A+K8no/dN4aCqtCRdwmcnmEso0XLRHaQ+mpczRTytHZaT
zrOBl7pmrvauMSMnEUwCJcJczsPZDJSIYS3Vw+T1oLlEg6ukwnnifXJZ8m+DXyCL
4O5gOhNOWjteiEbPwP/mip5DJJwwRhr0IDP05KOxiEB8yBfJsyMr9qEzDdU2iek8
qWCheuRb8Ax6A7Gg2yiiiNxeGk8Lce20EBvaqZ7f0V/oxKUQqoBfL0wkp+VDAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUrBhb/Mds8gr2po+mHMMpnNQkmQQwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0OTQ2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqo+DANBgkqhkiG9w0BAQsFAAOCAQEAHY6I
51vtlLUZ0ov3qtuN0njr87ywMllSJ2Sf9PrXenTHDM9kZ1MrzwJwGsgAfeFEquKo
lNsJHooIeRaIPDYEbRceeFbpex7GJHOFcK5t7X6TB+c3mhbRSXxWzxR+cH7Bd1ym
WWG7wQRHWB9loYjvSzWt48T/KOcYN0dzRYdjoYoCiMTO2LZB1FhlcrcAQGhYvsGx
+Ff95Cq5Cnux1kLKjqgr7opeFpcyfVV0qYvvSNJLS3CKb/BvJUiTyiQkDfcehDbR
uRuYWdXo5mRRtSovLy6PXl9Q1yRPotPfKcH3MKqlIG3ohgApvdi8wmGckwT4EL/U
o1YDzSlOKlLx+5QMLQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:16 2026 by rpki-client