Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144969.roa
File: AS144969.roa (raw, json)
Hash identifier: KzpVZ9KZaV3BovoyFxscHjZv2tfPRRhJWrjZlCOh4Tg=
Subject key identifier: F2:25:E2:77:52:7D:10:90:7C:CA:FC:75:CF:2F:E3:3E:09:7E:EB:0E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3BEC67EF0C5F551DD4BBA3D73C3A52F3F16B3C34
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144969.roa
Signing time: Fri 22 May 2026 06:05:42 +0000
ROA not before: Fri 22 May 2026 06:00:42 +0000
ROA not after: Fri 21 May 2027 06:05:42 +0000
asID: 144969
IP address blocks: 240a:a90f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:ec:67:ef:0c:5f:55:1d:d4:bb:a3:d7:3c:3a:52:f3:f1:6b:3c:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:42 2026 GMT
Not After : May 21 06:05:42 2027 GMT
Subject: CN=F225E277527D10907CCAFC75CF2FE33E097EEB0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:5c:18:8c:05:a6:be:a3:16:fa:da:99:55:94:
ce:93:c4:c9:d0:88:9c:8e:ec:e0:81:7a:21:5c:81:
ba:a8:0d:67:be:e7:d8:53:fa:a3:b0:a3:fc:f1:ad:
fb:91:9a:5d:9b:22:d0:7c:e5:15:68:28:01:c7:f8:
ad:a1:b3:27:60:d0:5b:37:5f:e4:74:55:84:62:51:
98:83:cb:39:3f:34:7f:6f:c7:73:cc:fa:9e:f2:b3:
a7:43:3a:31:9b:d9:b8:7b:f6:06:66:d8:99:1f:78:
93:f9:a0:53:8c:9a:29:ca:c9:16:95:dc:fc:5d:f3:
41:a9:cd:72:29:e2:7a:b0:96:e6:37:b1:9b:7c:b7:
f2:66:86:10:a9:a8:47:b9:90:2e:16:a0:0e:5f:1c:
94:b3:ea:53:fb:61:3c:9c:a2:67:8e:a4:53:1a:fa:
e6:9b:b2:16:50:13:d7:56:22:f7:11:bb:3e:b8:04:
ad:b6:e0:31:79:9d:93:32:a8:37:0c:03:66:76:5e:
a2:c8:71:c9:de:53:f8:af:dd:3a:5e:b1:ac:84:30:
b7:e7:6c:a7:87:7b:84:c9:b9:ac:ac:e8:7c:a8:ab:
4a:8d:fe:11:3b:8f:88:35:3b:5b:24:74:ce:7e:68:
d5:81:38:e9:c2:9e:a9:7f:98:45:ca:59:48:03:4a:
8e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:25:E2:77:52:7D:10:90:7C:CA:FC:75:CF:2F:E3:3E:09:7E:EB:0E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144969.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a90f::/32
Signature Algorithm: sha256WithRSAEncryption
37:fc:15:76:2b:80:28:e9:c7:cd:13:00:9c:a3:a5:fe:71:a0:
e4:88:90:4f:9c:6c:ee:36:a6:d1:83:ee:e9:d2:3f:f0:bf:57:
6d:2a:72:20:9a:30:81:2b:1a:7c:b5:a4:ce:4f:d0:44:bc:a0:
cb:ef:d1:24:1b:ee:74:fa:b3:51:7e:19:0a:94:71:cd:63:5b:
de:cb:81:d1:86:7d:79:e4:c4:1e:88:e6:48:22:a4:4a:05:9a:
3a:5f:2f:27:27:0e:18:3b:23:c0:69:cf:fc:be:fd:51:7b:6f:
93:db:e4:64:dd:e5:04:81:8d:1e:f9:52:a8:1a:15:6a:e3:bc:
66:d2:0f:ab:b3:e2:01:0a:6c:d5:42:f8:ec:96:04:12:4a:d8:
57:0b:42:86:8e:e2:24:41:e7:27:14:85:80:5e:ff:e5:be:17:
b1:1a:ae:61:5a:c0:2a:fd:6b:ef:db:80:77:13:f2:93:9d:7a:
b6:06:1d:7a:b6:cf:f4:c8:3e:41:a2:cc:95:53:82:84:2a:e5:
34:d2:b6:6d:66:7a:10:18:2d:76:e0:a7:8d:3e:86:f5:83:5c:
ad:7b:92:61:29:f4:c6:af:25:fa:46:76:1c:e1:be:f1:27:49:
ae:c5:1f:70:6f:86:ff:86:e7:c1:02:1a:f0:63:ec:39:be:42:
b1:2e:70:53
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUO+xn7wxfVR3Uu6PXPDpS8/FrPDQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjAwNDJaFw0yNzA1MjEwNjA1NDJaMDMxMTAvBgNV
BAMTKEYyMjVFMjc3NTI3RDEwOTA3Q0NBRkM3NUNGMkZFMzNFMDk3RUVCMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqXBiMBaa+oxb62plVlM6TxMnQ
iJyO7OCBeiFcgbqoDWe+59hT+qOwo/zxrfuRml2bItB85RVoKAHH+K2hsydg0Fs3
X+R0VYRiUZiDyzk/NH9vx3PM+p7ys6dDOjGb2bh79gZm2JkfeJP5oFOMminKyRaV
3Pxd80GpzXIp4nqwluY3sZt8t/JmhhCpqEe5kC4WoA5fHJSz6lP7YTycomeOpFMa
+uabshZQE9dWIvcRuz64BK224DF5nZMyqDcMA2Z2XqLIccneU/iv3TpesayEMLfn
bKeHe4TJuays6Hyoq0qN/hE7j4g1O1skdM5+aNWBOOnCnql/mEXKWUgDSo4xAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU8iXid1J9EJB8yvx1zy/jPgl+6w4wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0OTY5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqpDzANBgkqhkiG9w0BAQsFAAOCAQEAN/wV
diuAKOnHzRMAnKOl/nGg5IiQT5xs7jam0YPu6dI/8L9XbSpyIJowgSsafLWkzk/Q
RLygy+/RJBvudPqzUX4ZCpRxzWNb3suB0YZ9eeTEHojmSCKkSgWaOl8vJycOGDsj
wGnP/L79UXtvk9vkZN3lBIGNHvlSqBoVauO8ZtIPq7PiAQps1UL47JYEEkrYVwtC
ho7iJEHnJxSFgF7/5b4XsRquYVrAKv1r79uAdxPyk516tgYderbP9Mg+QaLMlVOC
hCrlNNK2bWZ6EBgtduCnjT6G9YNcrXuSYSn0xq8l+kZ2HOG+8SdJrsUfcG+G/4bn
wQIa8GPsOb5CsS5wUw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:13 2026 by rpki-client