Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144984.roa
File: AS144984.roa (raw, json)
Hash identifier: 3UutWSwaIJsqHLl6a8x+e5pwCG3+3TooZUIbTJaWBfE=
Subject key identifier: 3B:82:6E:B3:D6:85:F4:9E:9C:0C:A7:49:02:1B:7B:BD:69:9D:C8:F7
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 24F8ECD1AE6F2E42D54E3E32C2DE9D84BC18FBB9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144984.roa
Signing time: Tue 26 May 2026 06:30:57 +0000
ROA not before: Tue 26 May 2026 06:25:57 +0000
ROA not after: Tue 25 May 2027 06:30:57 +0000
asID: 144984
IP address blocks: 240a:a91e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:f8:ec:d1:ae:6f:2e:42:d5:4e:3e:32:c2:de:9d:84:bc:18:fb:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:25:57 2026 GMT
Not After : May 25 06:30:57 2027 GMT
Subject: CN=3B826EB3D685F49E9C0CA749021B7BBD699DC8F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a1:7c:3c:f8:35:be:6b:ad:6d:0b:be:b4:6f:
12:97:a9:46:5d:72:4a:db:74:30:fa:dd:67:86:e5:
10:04:57:95:b3:d4:09:9d:b1:68:2c:7b:a0:64:48:
e9:c1:e0:22:fd:ac:13:fd:3d:6f:20:f6:ea:64:b5:
49:ad:ac:ca:bd:33:54:2e:16:8c:7b:98:53:fa:61:
08:9f:0c:58:dd:70:92:42:94:de:0e:52:17:56:e7:
db:e1:b1:25:0d:73:f5:dc:cd:c7:f7:5c:34:d7:97:
18:08:2c:68:87:d0:0e:ec:7b:48:c3:15:07:28:b2:
39:56:bf:9b:e1:a2:d6:6e:5e:f5:28:cd:ab:ea:89:
2d:df:2f:31:d4:49:31:b9:0f:17:ac:63:55:bf:c1:
c3:7e:08:e2:ba:fe:d1:1c:6f:ac:92:cc:a9:39:3c:
75:51:28:2f:41:d1:00:64:5d:8d:8a:c8:5f:b4:7c:
00:fa:17:16:d9:9e:ff:99:14:ab:a2:95:14:31:be:
f3:5b:d0:96:44:8b:7a:7d:5e:f2:45:dc:89:77:24:
b4:94:2b:36:c3:a0:91:55:47:81:fd:43:2c:ae:02:
19:0a:ec:ae:ba:df:56:ef:2a:c0:6a:79:3e:a0:77:
37:ed:09:40:b6:65:4c:bb:a9:8a:14:df:33:d4:a4:
22:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:82:6E:B3:D6:85:F4:9E:9C:0C:A7:49:02:1B:7B:BD:69:9D:C8:F7
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144984.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a91e::/32
Signature Algorithm: sha256WithRSAEncryption
0c:0f:91:95:d1:0c:94:94:1f:b5:3b:88:65:0f:d5:05:09:ed:
3b:f0:40:4c:bb:a2:e9:1b:07:5c:c8:dd:5b:e2:a7:de:eb:16:
da:a9:d1:37:5d:2e:48:76:7c:61:3c:5b:0a:42:29:7b:98:eb:
80:4d:86:99:84:8e:f8:30:4c:ef:a2:e5:38:c1:6f:21:11:ea:
20:ae:4a:af:ec:e1:8d:83:a6:c7:a1:89:db:59:d1:1e:c2:68:
d2:00:38:cf:5d:ad:e9:23:6d:3b:b4:19:38:bf:3c:4c:9c:55:
4c:c5:97:38:af:5f:f9:54:c5:93:3e:04:e4:2b:2b:c8:1f:b1:
f0:c2:31:ba:64:ab:6d:05:2b:89:57:bd:ff:71:15:d6:af:76:
c8:50:ca:d0:82:e3:02:bc:15:9a:bb:d8:1a:af:e4:bd:2f:0a:
71:01:4b:b0:41:45:da:e9:9a:d4:b1:91:a4:8f:8d:6a:75:09:
91:14:3f:d4:1a:78:74:f7:60:dc:3e:34:3d:09:88:33:4c:14:
c0:dd:05:40:d1:9d:7b:40:9b:47:89:b9:23:2d:02:38:41:96:
bb:bc:31:fa:b2:3d:df:92:53:d6:39:ae:76:d9:b0:79:ef:60:
24:80:13:7a:d1:74:26:96:ce:df:23:a4:fb:7d:eb:56:d3:e2:
15:f4:ea:21
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUJPjs0a5vLkLVTj4ywt6dhLwY+7kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwNjI1NTdaFw0yNzA1MjUwNjMwNTdaMDMxMTAvBgNV
BAMTKDNCODI2RUIzRDY4NUY0OUU5QzBDQTc0OTAyMUI3QkJENjk5REM4RjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDboXw8+DW+a61tC760bxKXqUZd
ckrbdDD63WeG5RAEV5Wz1AmdsWgse6BkSOnB4CL9rBP9PW8g9upktUmtrMq9M1Qu
Fox7mFP6YQifDFjdcJJClN4OUhdW59vhsSUNc/Xczcf3XDTXlxgILGiH0A7se0jD
FQcosjlWv5vhotZuXvUozavqiS3fLzHUSTG5DxesY1W/wcN+COK6/tEcb6ySzKk5
PHVRKC9B0QBkXY2KyF+0fAD6FxbZnv+ZFKuilRQxvvNb0JZEi3p9XvJF3Il3JLSU
KzbDoJFVR4H9QyyuAhkK7K6631bvKsBqeT6gdzftCUC2ZUy7qYoU3zPUpCJvAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUO4Jus9aF9J6cDKdJAht7vWmdyPcwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0OTg0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqpHjANBgkqhkiG9w0BAQsFAAOCAQEADA+R
ldEMlJQftTuIZQ/VBQntO/BATLui6RsHXMjdW+Kn3usW2qnRN10uSHZ8YTxbCkIp
e5jrgE2GmYSO+DBM76LlOMFvIRHqIK5Kr+zhjYOmx6GJ21nRHsJo0gA4z12t6SNt
O7QZOL88TJxVTMWXOK9f+VTFkz4E5CsryB+x8MIxumSrbQUriVe9/3EV1q92yFDK
0ILjArwVmrvYGq/kvS8KcQFLsEFF2uma1LGRpI+NanUJkRQ/1Bp4dPdg3D40PQmI
M0wUwN0FQNGde0CbR4m5Iy0COEGWu7wx+rI935JT1jmudtmwee9gJIATetF0JpbO
3yOk+33rVtPiFfTqIQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:47 2026 by rpki-client