Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144953.roa
File: AS144953.roa (raw, json)
Hash identifier: u6t/BPQqXwrN+xnM7AOn0vYzVbZR3oROCI7MacQNMb4=
Subject key identifier: 00:48:15:10:26:38:C7:61:5E:CE:E7:8C:1E:95:1A:38:F0:B0:B4:FA
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3A0A4E20A8774B7FC93D75B21D8C48AD90B21876
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144953.roa
Signing time: Fri 22 May 2026 06:05:32 +0000
ROA not before: Fri 22 May 2026 06:00:32 +0000
ROA not after: Fri 21 May 2027 06:05:32 +0000
asID: 144953
IP address blocks: 240a:a8ff::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:0a:4e:20:a8:77:4b:7f:c9:3d:75:b2:1d:8c:48:ad:90:b2:18:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:32 2026 GMT
Not After : May 21 06:05:32 2027 GMT
Subject: CN=004815102638C7615ECEE78C1E951A38F0B0B4FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0d:4d:3b:73:16:72:4c:a6:10:32:56:20:90:
3b:e5:9a:a5:cf:d3:a0:e6:0e:ed:68:71:96:9e:95:
bc:bb:23:7c:d9:c7:0d:cb:31:e9:c2:e5:5d:e1:47:
57:d1:83:29:e1:18:4e:ef:20:1f:f3:98:f7:cf:e7:
d9:24:0b:4a:49:6f:c5:c7:a6:b5:ea:4b:a1:14:4f:
de:56:70:97:fe:18:40:60:60:45:35:3f:b2:54:37:
1d:71:9d:4d:e5:8d:d3:c5:8b:03:d8:8b:0b:5a:80:
c5:d4:44:27:a6:33:d1:b2:1b:99:04:9e:e5:ba:26:
cc:fb:57:ca:20:d3:90:21:f5:d2:cb:c1:e4:b5:fd:
35:99:86:56:b3:e2:37:81:00:29:a9:aa:b4:3a:a1:
54:a9:39:e0:26:ff:4c:51:7e:36:01:88:50:9d:0e:
45:da:f7:a5:5c:1e:f7:12:97:60:d8:b8:2a:cf:cf:
ae:cc:f8:65:54:2b:b2:f0:41:1c:0c:81:31:7d:4b:
d4:38:d9:22:b9:f1:1e:21:7a:f5:44:5f:af:7e:28:
b6:8b:e3:4b:d5:9e:03:c0:65:5c:bc:f7:28:d5:17:
a5:69:7c:76:5d:e1:91:b9:da:17:71:60:68:9e:52:
b3:f5:61:35:51:cf:e6:5e:9f:3b:3d:9d:bc:c2:d1:
2e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:48:15:10:26:38:C7:61:5E:CE:E7:8C:1E:95:1A:38:F0:B0:B4:FA
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144953.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a8ff::/32
Signature Algorithm: sha256WithRSAEncryption
ac:a0:be:4c:ef:9b:a2:a8:11:44:2d:ea:5c:5b:b7:34:32:c3:
a5:50:6b:d0:3b:3c:28:56:b8:12:2b:10:55:c7:34:d4:e8:ab:
cc:83:cd:17:c5:a5:bb:ad:11:32:6e:21:e5:64:19:62:ab:fb:
6e:ec:f6:05:e1:20:85:d7:f5:59:19:66:89:70:3f:90:94:6f:
64:4b:af:5c:12:d2:54:ab:42:1c:15:7a:d8:88:3e:fc:ba:a5:
1f:ec:ad:94:08:fd:9d:0b:cf:5a:c5:6a:f2:15:78:7f:c6:69:
e7:b2:36:80:1d:50:ae:07:96:e2:2b:b7:fe:8a:0e:da:db:c6:
00:c4:e2:0d:14:28:0b:44:79:81:d0:39:18:e7:f4:08:9f:94:
f9:3f:b3:9a:5a:cc:2e:6f:73:94:19:58:b5:a2:29:ef:06:ac:
83:26:3f:e8:fd:93:5e:46:69:1f:de:94:da:3c:ee:28:6a:ed:
1d:aa:a6:5b:59:29:1c:86:69:c9:54:c9:8e:7c:f5:3b:cd:54:
48:bf:da:7d:c7:87:e8:58:26:16:78:d8:17:e2:f1:02:07:c1:
92:8e:f1:76:3b:54:aa:fc:93:a1:75:b4:57:0e:1a:38:7b:63:
9e:cc:ce:19:00:fd:61:22:75:03:1a:e4:52:d8:99:58:10:ae:
3f:8d:14:5b
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUOgpOIKh3S3/JPXWyHYxIrZCyGHYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjAwMzJaFw0yNzA1MjEwNjA1MzJaMDMxMTAvBgNV
BAMTKDAwNDgxNTEwMjYzOEM3NjE1RUNFRTc4QzFFOTUxQTM4RjBCMEI0RkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+DU07cxZyTKYQMlYgkDvlmqXP
06DmDu1ocZaelby7I3zZxw3LMenC5V3hR1fRgynhGE7vIB/zmPfP59kkC0pJb8XH
prXqS6EUT95WcJf+GEBgYEU1P7JUNx1xnU3ljdPFiwPYiwtagMXURCemM9GyG5kE
nuW6Jsz7V8og05Ah9dLLweS1/TWZhlaz4jeBACmpqrQ6oVSpOeAm/0xRfjYBiFCd
DkXa96VcHvcSl2DYuCrPz67M+GVUK7LwQRwMgTF9S9Q42SK58R4hevVEX69+KLaL
40vVngPAZVy89yjVF6VpfHZd4ZG52hdxYGieUrP1YTVRz+Zenzs9nbzC0S7ZAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUAEgVECY4x2FezueMHpUaOPCwtPowHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0OTUzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqo/zANBgkqhkiG9w0BAQsFAAOCAQEArKC+
TO+boqgRRC3qXFu3NDLDpVBr0Ds8KFa4EisQVcc01OirzIPNF8Wlu60RMm4h5WQZ
Yqv7buz2BeEghdf1WRlmiXA/kJRvZEuvXBLSVKtCHBV62Ig+/LqlH+ytlAj9nQvP
WsVq8hV4f8Zp57I2gB1QrgeW4iu3/ooO2tvGAMTiDRQoC0R5gdA5GOf0CJ+U+T+z
mlrMLm9zlBlYtaIp7wasgyY/6P2TXkZpH96U2jzuKGrtHaqmW1kpHIZpyVTJjnz1
O81USL/afceH6FgmFnjYF+LxAgfBko7xdjtUqvyToXW0Vw4aOHtjnszOGQD9YSJ1
AxrkUtiZWBCuP40UWw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:58 2026 by rpki-client