Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144978.roa
File: AS144978.roa (raw, json)
Hash identifier: vFUTLfhfiVfE7pF464Lpi62f19+OmfwrIa6OQ2MQFEc=
Subject key identifier: CA:34:F8:4E:B1:42:22:CC:00:28:F3:86:41:F9:B4:18:0B:57:1A:CA
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 71F8269BA766924D0409A38AF57FC57EA3006939
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144978.roa
Signing time: Fri 22 May 2026 06:58:21 +0000
ROA not before: Fri 22 May 2026 06:53:21 +0000
ROA not after: Fri 21 May 2027 06:58:21 +0000
asID: 144978
IP address blocks: 240a:a918::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:f8:26:9b:a7:66:92:4d:04:09:a3:8a:f5:7f:c5:7e:a3:00:69:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:21 2026 GMT
Not After : May 21 06:58:21 2027 GMT
Subject: CN=CA34F84EB14222CC0028F38641F9B4180B571ACA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d6:62:db:7a:4f:41:09:99:bb:0a:e8:c5:5b:
c1:3b:2b:fa:a1:82:24:49:54:83:fc:9e:50:e8:d8:
d5:4a:1a:9f:46:6d:71:29:6f:92:ff:3c:06:af:f3:
cf:8e:53:62:5b:e3:9f:fc:b4:0d:8d:6e:59:a2:5f:
cb:6b:42:94:7f:1b:ac:c0:03:ea:9b:85:05:8d:ac:
f1:81:a2:de:32:b7:6e:40:da:e1:f7:68:70:e1:b6:
95:00:96:ee:ce:36:56:a9:7f:69:cd:6a:1b:59:ec:
cd:a2:77:95:1d:78:91:47:98:53:f8:15:a6:ad:ee:
4b:fd:b7:e4:db:fc:1b:a7:08:bb:33:71:34:86:01:
f1:d9:98:d7:1e:f5:38:b0:cb:5e:03:62:c7:11:c6:
2e:6a:bc:83:5a:70:e5:8f:de:20:89:3e:7e:74:85:
04:78:19:23:cb:3d:9a:a6:89:64:5a:b9:74:9c:34:
00:3e:3c:83:7d:c0:d2:28:e3:8c:94:96:e1:f3:9c:
8d:c7:51:37:23:1d:0a:2e:c3:c3:5b:fe:b6:a2:ab:
8b:14:79:b4:17:96:02:58:a7:a5:db:a4:ee:5a:1f:
af:3e:1a:36:db:25:a3:2d:2f:69:81:7a:d2:1e:22:
93:66:44:ba:c8:db:73:57:a0:a3:77:83:35:e3:0d:
55:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:34:F8:4E:B1:42:22:CC:00:28:F3:86:41:F9:B4:18:0B:57:1A:CA
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144978.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a918::/32
Signature Algorithm: sha256WithRSAEncryption
07:5f:4f:aa:02:db:8b:f8:4c:73:52:d7:25:8c:d0:c9:c9:e9:
f5:2e:94:46:44:62:b1:a8:93:21:31:f5:56:f1:f5:8a:79:f2:
e2:64:66:54:0d:12:54:ab:18:b9:7e:03:fa:7b:9e:74:52:9b:
dc:17:a7:b6:c5:c7:a1:5a:94:72:6f:89:ea:fe:44:41:78:01:
b8:29:91:d7:3f:07:74:3f:38:d6:df:d5:38:a1:23:00:ca:5a:
22:dd:c7:7b:36:79:cb:05:ca:df:6f:28:d3:04:e8:20:02:86:
78:c0:c7:77:3c:7d:de:fc:fa:71:9e:53:74:de:78:29:00:35:
a9:41:2e:5f:ca:2e:e4:f2:8a:98:c8:3a:39:b9:32:96:55:2d:
08:3c:51:47:00:cd:26:ea:c9:3f:3a:db:78:29:ca:08:ab:92:
68:72:b4:48:4a:dc:63:5e:f0:ba:02:69:b2:ba:71:11:b8:f0:
06:00:90:37:ef:8d:6e:cc:e5:26:52:00:13:83:78:c7:a8:99:
a1:2b:93:74:e0:21:61:e6:b8:b1:f0:cd:1d:40:5b:f7:d1:e6:
89:2c:10:b6:25:f3:da:b5:07:86:d1:07:2c:72:53:31:82:a9:
a2:03:3b:f4:d2:af:11:2f:f8:24:d4:fa:db:e5:22:18:6e:da:
60:af:d3:3b
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUcfgmm6dmkk0ECaOK9X/FfqMAaTkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjUzMjFaFw0yNzA1MjEwNjU4MjFaMDMxMTAvBgNV
BAMTKENBMzRGODRFQjE0MjIyQ0MwMDI4RjM4NjQxRjlCNDE4MEI1NzFBQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg1mLbek9BCZm7CujFW8E7K/qh
giRJVIP8nlDo2NVKGp9GbXEpb5L/PAav88+OU2Jb45/8tA2NblmiX8trQpR/G6zA
A+qbhQWNrPGBot4yt25A2uH3aHDhtpUAlu7ONlapf2nNahtZ7M2id5UdeJFHmFP4
Faat7kv9t+Tb/BunCLszcTSGAfHZmNce9Tiwy14DYscRxi5qvINacOWP3iCJPn50
hQR4GSPLPZqmiWRauXScNAA+PIN9wNIo44yUluHznI3HUTcjHQouw8Nb/raiq4sU
ebQXlgJYp6XbpO5aH68+GjbbJaMtL2mBetIeIpNmRLrI23NXoKN3gzXjDVUbAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUyjT4TrFCIswAKPOGQfm0GAtXGsowHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0OTc4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqpGDANBgkqhkiG9w0BAQsFAAOCAQEAB19P
qgLbi/hMc1LXJYzQycnp9S6URkRisaiTITH1VvH1inny4mRmVA0SVKsYuX4D+nue
dFKb3BentsXHoVqUcm+J6v5EQXgBuCmR1z8HdD841t/VOKEjAMpaIt3HezZ5ywXK
328o0wToIAKGeMDHdzx93vz6cZ5TdN54KQA1qUEuX8ou5PKKmMg6ObkyllUtCDxR
RwDNJurJPzrbeCnKCKuSaHK0SErcY17wugJpsrpxEbjwBgCQN++NbszlJlIAE4N4
x6iZoSuTdOAhYea4sfDNHUBb99HmiSwQtiXz2rUHhtEHLHJTMYKpogM79NKvES/4
JNT62+UiGG7aYK/TOw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:09 2026 by rpki-client