Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144954.roa
File: AS144954.roa (raw, json)
Hash identifier: iUlvVpZb4XyudOcYtI6UpU4EPpz7nb3Ek9opO8CHvXA=
Subject key identifier: E8:62:36:DF:EF:97:E7:5B:6E:EB:A2:44:65:9D:01:CE:0C:89:F3:25
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4C6D296C397576997EAA4A20A6B88A54B9131FCB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144954.roa
Signing time: Tue 26 May 2026 08:52:52 +0000
ROA not before: Tue 26 May 2026 08:47:52 +0000
ROA not after: Tue 25 May 2027 08:52:52 +0000
asID: 144954
IP address blocks: 240a:a900::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:6d:29:6c:39:75:76:99:7e:aa:4a:20:a6:b8:8a:54:b9:13:1f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 08:47:52 2026 GMT
Not After : May 25 08:52:52 2027 GMT
Subject: CN=E86236DFEF97E75B6EEBA244659D01CE0C89F325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:94:8d:cf:f8:8e:5e:20:c4:09:a9:18:45:95:
c7:cb:8d:bf:b2:fe:b8:05:e3:64:33:86:fb:cf:19:
5e:5e:7c:aa:3e:d9:fe:c5:af:9f:29:18:be:05:70:
90:a4:31:0e:62:a4:78:d7:7b:f4:d1:8c:bf:dc:14:
b1:8a:e8:04:de:20:d8:07:c4:7f:56:28:62:11:54:
fa:83:86:0e:43:3d:00:a7:13:b2:6b:36:8c:57:d0:
64:ec:10:fa:1e:c5:06:95:c3:99:f3:ad:7e:90:a7:
81:ae:0a:c7:dc:63:97:57:e7:25:40:fb:22:34:c0:
40:6c:b6:6f:7e:4e:7d:07:56:aa:30:24:e6:47:a9:
87:2b:5f:4b:bf:7b:2a:a7:12:c8:2d:3f:90:46:18:
48:27:2b:1c:c8:3a:ee:fc:b9:b2:79:e3:c2:6b:d9:
c1:51:c0:7c:c4:8c:e9:e5:10:d5:05:c6:b6:47:7c:
77:5a:fa:d5:51:fe:af:e1:c7:3f:34:d6:2d:ef:1b:
86:71:89:a0:58:84:d5:fc:03:05:69:ab:1e:3e:06:
91:05:89:5e:f4:38:25:1f:4b:e6:95:6e:94:e8:53:
2f:ac:14:53:6d:b4:02:3e:f3:31:e5:37:d6:e2:ec:
80:df:f4:17:a9:6a:2f:e5:b7:34:54:58:98:28:f5:
d2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:62:36:DF:EF:97:E7:5B:6E:EB:A2:44:65:9D:01:CE:0C:89:F3:25
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144954.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a900::/32
Signature Algorithm: sha256WithRSAEncryption
92:ef:98:be:b2:45:b5:fd:08:55:ae:8a:19:91:5c:91:dd:c9:
60:58:d6:60:d5:2d:3f:81:f3:be:f9:78:e7:48:eb:d4:08:bc:
f8:aa:86:3c:14:7f:8e:eb:ab:b5:bf:d4:75:26:79:0b:af:2d:
64:0f:00:31:e6:92:56:79:70:fb:3e:17:60:d8:ba:7f:3e:ff:
de:33:8a:4e:fd:6a:3d:34:84:64:7c:17:96:f9:75:42:f6:6f:
b6:80:e1:93:20:39:e3:c2:95:ad:33:e6:e2:0b:7e:fe:bb:b3:
e9:44:ae:94:a3:e5:71:ef:eb:5b:4a:da:2f:d2:84:bd:96:7c:
8f:22:92:4b:24:66:32:3f:b8:e2:80:30:9d:e3:4b:b5:c8:a3:
3e:39:06:d6:c2:ee:3a:06:2b:23:19:ad:ec:bb:21:b2:71:6d:
e0:76:d1:9b:d2:9c:06:b5:de:9a:53:59:94:ef:e8:66:5e:40:
aa:0e:9f:8e:10:7c:7c:5c:5d:01:21:b6:cb:86:7f:21:a7:29:
0e:46:87:08:82:d5:bb:56:6d:0b:86:a2:17:52:bd:0c:79:ef:
92:b9:52:25:88:6c:8e:e2:20:7b:6e:83:4c:e9:0c:bd:90:95:
0b:b6:db:c7:83:36:c3:0f:26:99:90:4b:5e:c3:58:1b:47:4d:
68:03:a8:c3
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUTG0pbDl1dpl+qkogpriKVLkTH8swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwODQ3NTJaFw0yNzA1MjUwODUyNTJaMDMxMTAvBgNV
BAMTKEU4NjIzNkRGRUY5N0U3NUI2RUVCQTI0NDY1OUQwMUNFMEM4OUYzMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDblI3P+I5eIMQJqRhFlcfLjb+y
/rgF42QzhvvPGV5efKo+2f7Fr58pGL4FcJCkMQ5ipHjXe/TRjL/cFLGK6ATeINgH
xH9WKGIRVPqDhg5DPQCnE7JrNoxX0GTsEPoexQaVw5nzrX6Qp4GuCsfcY5dX5yVA
+yI0wEBstm9+Tn0HVqowJOZHqYcrX0u/eyqnEsgtP5BGGEgnKxzIOu78ubJ548Jr
2cFRwHzEjOnlENUFxrZHfHda+tVR/q/hxz801i3vG4ZxiaBYhNX8AwVpqx4+BpEF
iV70OCUfS+aVbpToUy+sFFNttAI+8zHlN9bi7IDf9Bepai/ltzRUWJgo9dLxAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU6GI23++X51tu66JEZZ0BzgyJ8yUwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0OTU0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqpADANBgkqhkiG9w0BAQsFAAOCAQEAku+Y
vrJFtf0IVa6KGZFckd3JYFjWYNUtP4Hzvvl450jr1Ai8+KqGPBR/juurtb/UdSZ5
C68tZA8AMeaSVnlw+z4XYNi6fz7/3jOKTv1qPTSEZHwXlvl1QvZvtoDhkyA548KV
rTPm4gt+/ruz6USulKPlce/rW0raL9KEvZZ8jyKSSyRmMj+44oAwneNLtcijPjkG
1sLuOgYrIxmt7LshsnFt4HbRm9KcBrXemlNZlO/oZl5Aqg6fjhB8fFxdASG2y4Z/
IacpDkaHCILVu1ZtC4aiF1K9DHnvkrlSJYhsjuIge26DTOkMvZCVC7bbx4M2ww8m
mZBLXsNYG0dNaAOoww==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:50:02 2026 by rpki-client