Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144985.roa
File: AS144985.roa (raw, json)
Hash identifier: kQCD44EhTm9qApL+75pBR7VB+ULg9wsrOraLCA2Et/8=
Subject key identifier: 33:3C:40:85:C4:18:76:17:DB:41:36:1A:A8:B8:67:B6:1E:E4:49:C9
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 57FD039FD12B0BAE5BE1334B504DBDF474B7999E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144985.roa
Signing time: Mon 25 May 2026 01:20:28 +0000
ROA not before: Mon 25 May 2026 01:15:28 +0000
ROA not after: Mon 24 May 2027 01:20:28 +0000
asID: 144985
IP address blocks: 240a:a91f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:fd:03:9f:d1:2b:0b:ae:5b:e1:33:4b:50:4d:bd:f4:74:b7:99:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:28 2026 GMT
Not After : May 24 01:20:28 2027 GMT
Subject: CN=333C4085C4187617DB41361AA8B867B61EE449C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b0:47:fb:58:7a:6d:dc:87:ac:82:b3:4a:93:
cd:0f:fd:08:b5:a9:2d:80:67:e7:db:fe:1f:0c:4c:
4f:26:80:28:5b:1a:92:35:52:1e:7f:f0:ae:fe:42:
99:98:91:cf:69:1f:28:c7:e9:d3:aa:76:3e:98:f6:
c4:9b:7c:02:6a:7c:04:0b:ad:3c:b7:be:3a:99:2d:
54:37:53:fa:c5:25:66:29:90:74:46:0a:f5:9e:4e:
8c:3a:41:64:6a:3a:bb:ef:d5:43:49:13:c9:cd:31:
76:7f:30:ba:1e:04:e3:69:c1:dd:01:60:7d:c7:d1:
5b:33:a8:f8:20:1e:d3:c5:57:a3:28:90:03:bf:10:
7f:bf:d7:bd:ab:aa:eb:28:a6:f1:13:e8:fa:7b:e4:
0c:48:f0:45:e3:45:bd:5e:f7:d1:30:23:bd:d9:eb:
f5:07:f3:56:28:74:48:41:77:b1:ab:d3:ef:d6:6a:
ae:ad:10:71:b3:5f:3f:5a:92:0f:91:a9:fd:5d:c9:
e5:d7:11:70:16:86:c1:cc:97:4e:b1:94:87:5e:d9:
e9:0a:92:df:62:4c:6c:5e:6e:f3:01:2b:53:61:7c:
f5:f7:29:1c:ed:4f:3c:76:3b:f5:29:6d:a0:54:c6:
c3:84:18:bd:b3:e9:c4:ca:9e:3d:ac:79:da:f2:16:
9d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:3C:40:85:C4:18:76:17:DB:41:36:1A:A8:B8:67:B6:1E:E4:49:C9
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144985.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a91f::/32
Signature Algorithm: sha256WithRSAEncryption
b5:20:c3:3e:2a:0c:2a:6d:12:23:20:5e:5f:49:1d:47:64:52:
6b:d4:2b:3a:73:01:19:b1:7d:5f:1b:31:2a:7c:d8:f9:8d:0f:
43:30:af:f8:36:aa:88:6f:14:42:64:5d:65:17:67:23:96:dd:
9b:0e:b2:0f:ee:33:ea:19:f8:42:33:9b:6b:ef:6a:6d:4d:cf:
46:02:5b:32:76:f0:7a:9b:7d:80:31:96:22:64:25:38:3c:aa:
76:51:58:b4:69:d3:3d:1b:a3:17:a7:4c:92:e4:2f:9c:fb:76:
90:de:a5:88:4a:bb:1d:36:f4:ab:ca:a4:ff:b6:48:06:c0:a7:
10:f0:e3:32:f8:25:c5:8b:ab:86:a0:5c:a3:42:57:72:34:11:
f0:c1:73:13:b1:ea:06:f7:1a:7d:0c:b3:f3:69:8f:a4:4a:87:
fc:b5:af:28:18:5c:98:1f:1e:77:46:0b:2a:54:3d:1f:01:f7:
51:a8:7e:fd:60:b7:59:c8:a6:c8:da:dc:96:08:41:0d:f6:ac:
9d:8f:f7:69:3b:ff:56:6e:fc:c7:94:d3:00:06:b1:15:a1:49:
53:90:43:dc:6e:7b:3d:b8:e0:76:bf:ba:52:37:68:23:64:3d:
ce:3f:e1:72:55:75:ac:f0:45:0e:45:86:f0:55:c1:7b:9a:31:
91:57:a0:63
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUV/0Dn9ErC65b4TNLUE299HS3mZ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTE1MjhaFw0yNzA1MjQwMTIwMjhaMDMxMTAvBgNV
BAMTKDMzM0M0MDg1QzQxODc2MTdEQjQxMzYxQUE4Qjg2N0I2MUVFNDQ5QzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClsEf7WHpt3IesgrNKk80P/Qi1
qS2AZ+fb/h8MTE8mgChbGpI1Uh5/8K7+QpmYkc9pHyjH6dOqdj6Y9sSbfAJqfAQL
rTy3vjqZLVQ3U/rFJWYpkHRGCvWeTow6QWRqOrvv1UNJE8nNMXZ/MLoeBONpwd0B
YH3H0VszqPggHtPFV6MokAO/EH+/172rqusopvET6Pp75AxI8EXjRb1e99EwI73Z
6/UH81YodEhBd7Gr0+/Waq6tEHGzXz9akg+Rqf1dyeXXEXAWhsHMl06xlIde2ekK
kt9iTGxebvMBK1NhfPX3KRztTzx2O/UpbaBUxsOEGL2z6cTKnj2sedryFp2RAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUMzxAhcQYdhfbQTYaqLhnth7kSckwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0OTg1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqpHzANBgkqhkiG9w0BAQsFAAOCAQEAtSDD
PioMKm0SIyBeX0kdR2RSa9QrOnMBGbF9XxsxKnzY+Y0PQzCv+DaqiG8UQmRdZRdn
I5bdmw6yD+4z6hn4QjOba+9qbU3PRgJbMnbwept9gDGWImQlODyqdlFYtGnTPRuj
F6dMkuQvnPt2kN6liEq7HTb0q8qk/7ZIBsCnEPDjMvglxYurhqBco0JXcjQR8MFz
E7HqBvcafQyz82mPpEqH/LWvKBhcmB8ed0YLKlQ9HwH3Uah+/WC3WcimyNrclghB
DfasnY/3aTv/Vm78x5TTAAaxFaFJU5BD3G57Pbjgdr+6UjdoI2Q9zj/hclV1rPBF
DkWG8FXBe5oxkVegYw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:53 2026 by rpki-client