Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144983.roa
File: AS144983.roa (raw, json)
Hash identifier: THbok/l1x8S3qd3IwM8dskUFXGCBXhKmymGn0Kd9iPE=
Subject key identifier: 70:B6:E6:A4:F4:63:02:9B:68:A5:AA:64:1E:84:4D:7D:E7:1D:F0:3A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3E95A5CF6ABB13609AE715B289792F7F82FB6A9F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144983.roa
Signing time: Fri 22 May 2026 06:05:29 +0000
ROA not before: Fri 22 May 2026 06:00:29 +0000
ROA not after: Fri 21 May 2027 06:05:29 +0000
asID: 144983
IP address blocks: 240a:a91d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:95:a5:cf:6a:bb:13:60:9a:e7:15:b2:89:79:2f:7f:82:fb:6a:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:29 2026 GMT
Not After : May 21 06:05:29 2027 GMT
Subject: CN=70B6E6A4F463029B68A5AA641E844D7DE71DF03A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7b:8d:a4:2a:d7:38:c6:c2:98:56:55:ac:44:
3f:8f:a3:ac:c6:72:3c:ac:7d:8a:69:c6:44:c5:57:
3d:64:a7:b9:e9:68:90:bb:86:3f:86:40:a1:8c:11:
9f:06:9a:9e:a4:06:5f:1d:1a:44:80:71:40:16:a0:
a6:3d:8a:d6:43:5c:d7:00:d7:18:e5:0e:73:96:3f:
ac:1e:48:ee:ab:76:46:a2:60:c3:b6:9e:b1:32:0c:
7e:4b:37:e6:28:28:2c:59:99:73:b4:84:a1:54:07:
f7:40:e8:d6:6f:e8:6d:a7:2d:93:25:49:07:46:09:
b4:2b:7b:63:8f:71:b7:58:99:6f:31:42:db:29:e6:
b7:90:fd:45:a8:b9:2a:80:e8:38:e3:f2:93:13:32:
30:9f:07:22:b2:cd:8c:26:e8:80:f3:bc:10:1a:a0:
78:cd:37:06:72:16:f7:8f:4f:46:b3:9b:8e:56:98:
15:0e:eb:92:0b:1c:a7:13:ba:3d:8a:fd:85:a2:ed:
6a:41:8c:35:cd:10:af:8c:69:52:ff:01:14:59:87:
16:2f:b3:cc:46:d3:19:66:cb:ca:23:8b:06:dc:e7:
d0:f7:c0:aa:11:e0:f6:9a:d3:19:ce:68:b5:d8:34:
b4:49:26:d9:a9:c3:21:33:58:b1:79:4c:74:aa:a2:
27:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B6:E6:A4:F4:63:02:9B:68:A5:AA:64:1E:84:4D:7D:E7:1D:F0:3A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144983.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a91d::/32
Signature Algorithm: sha256WithRSAEncryption
91:6d:09:ca:f2:b0:b9:8b:4b:93:df:ff:6e:7b:48:0e:fe:48:
56:69:ac:fc:6a:86:ba:72:dc:a7:dd:59:05:a4:ad:4b:37:62:
2f:d1:b9:36:30:75:08:76:8d:27:81:91:e4:3e:2d:e3:ec:93:
41:6c:35:92:04:c8:55:75:28:89:3a:b8:29:d0:10:04:36:58:
27:73:84:e7:31:31:c3:96:17:1d:57:52:b7:e9:e0:7a:46:61:
62:98:4f:60:16:56:07:e1:b4:bf:2c:62:97:de:6e:0f:cb:05:
19:54:79:19:69:ff:9e:55:59:c3:5d:d5:4b:01:19:36:60:e1:
c6:5d:1f:e1:36:1d:46:62:8f:b6:7e:27:aa:e8:46:18:a7:40:
1d:a3:26:c3:5e:99:d4:67:c9:52:c9:a7:1e:1e:71:a3:18:05:
63:8a:15:04:2b:ce:4d:cf:37:99:7b:9e:d3:79:72:e7:90:78:
85:7c:bf:b2:f9:3e:be:74:ad:f7:42:b1:89:d4:ff:83:76:18:
a0:2e:07:8d:67:c1:97:b2:35:7b:b0:72:8d:25:ac:d6:ba:f0:
5a:ae:57:ee:34:6e:a5:fd:55:28:19:a0:c0:ae:1d:cd:ff:19:
20:5d:7e:2e:a1:9c:6a:a6:54:bb:4b:a5:8f:55:30:ed:20:87:
f5:9b:f1:d4
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUPpWlz2q7E2Ca5xWyiXkvf4L7ap8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjAwMjlaFw0yNzA1MjEwNjA1MjlaMDMxMTAvBgNV
BAMTKDcwQjZFNkE0RjQ2MzAyOUI2OEE1QUE2NDFFODQ0RDdERTcxREYwM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTe42kKtc4xsKYVlWsRD+Po6zG
cjysfYppxkTFVz1kp7npaJC7hj+GQKGMEZ8Gmp6kBl8dGkSAcUAWoKY9itZDXNcA
1xjlDnOWP6weSO6rdkaiYMO2nrEyDH5LN+YoKCxZmXO0hKFUB/dA6NZv6G2nLZMl
SQdGCbQre2OPcbdYmW8xQtsp5reQ/UWouSqA6Djj8pMTMjCfByKyzYwm6IDzvBAa
oHjNNwZyFvePT0azm45WmBUO65ILHKcTuj2K/YWi7WpBjDXNEK+MaVL/ARRZhxYv
s8xG0xlmy8ojiwbc59D3wKoR4Paa0xnOaLXYNLRJJtmpwyEzWLF5THSqoifzAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUcLbmpPRjAptopapkHoRNfecd8DowHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0OTgzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqpHTANBgkqhkiG9w0BAQsFAAOCAQEAkW0J
yvKwuYtLk9//bntIDv5IVmms/GqGunLcp91ZBaStSzdiL9G5NjB1CHaNJ4GR5D4t
4+yTQWw1kgTIVXUoiTq4KdAQBDZYJ3OE5zExw5YXHVdSt+ngekZhYphPYBZWB+G0
vyxil95uD8sFGVR5GWn/nlVZw13VSwEZNmDhxl0f4TYdRmKPtn4nquhGGKdAHaMm
w16Z1GfJUsmnHh5xoxgFY4oVBCvOTc83mXue03ly55B4hXy/svk+vnSt90KxidT/
g3YYoC4HjWfBl7I1e7ByjSWs1rrwWq5X7jRupf1VKBmgwK4dzf8ZIF1+LqGcaqZU
u0ulj1Uw7SCH9Zvx1A==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:43 2026 by rpki-client