Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144986.roa
File: AS144986.roa (raw, json)
Hash identifier: BuiZdgcCWJIWlAR2PKvGSJG8+gD5+pyxwKdWqPGCrJQ=
Subject key identifier: 26:86:2A:99:72:70:7C:22:97:C0:E5:C9:39:56:59:94:D4:6B:06:B5
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 33CAEFCBAA54AB382FF9D3E8FCBF9D6F14305058
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144986.roa
Signing time: Tue 26 May 2026 03:16:41 +0000
ROA not before: Tue 26 May 2026 03:11:41 +0000
ROA not after: Tue 25 May 2027 03:16:41 +0000
asID: 144986
IP address blocks: 240a:a920::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:ca:ef:cb:aa:54:ab:38:2f:f9:d3:e8:fc:bf:9d:6f:14:30:50:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:11:41 2026 GMT
Not After : May 25 03:16:41 2027 GMT
Subject: CN=26862A9972707C2297C0E5C939565994D46B06B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:47:29:49:2c:ae:f4:45:9c:fe:03:b1:08:c3:
91:9e:d9:b9:06:44:04:b8:d0:77:cf:d8:2c:67:21:
a0:9c:7a:0d:bc:ac:6b:33:42:25:15:57:1e:92:91:
d3:c9:77:e7:0a:99:c7:2a:75:c4:59:87:b0:c0:75:
ac:f8:06:9e:62:25:73:d7:12:19:79:78:9c:f7:b7:
bd:08:f5:c6:19:9d:ff:34:4f:34:bf:a8:4a:59:ad:
03:0e:31:6c:63:b6:ec:86:25:05:37:5b:82:34:e2:
db:ab:18:c3:6a:70:ac:e1:84:60:92:85:3d:db:da:
f4:9c:45:dc:d1:10:de:a5:f3:2a:fb:8c:6e:3e:f9:
ac:5a:a0:96:dd:da:ef:87:41:bb:d7:0c:17:b0:5d:
c2:14:44:9b:f9:c6:e0:5a:25:e2:24:db:a5:78:54:
94:9e:b9:23:51:6b:0c:f3:9b:09:d0:57:99:37:82:
cc:55:68:bf:00:93:31:37:b8:10:de:23:bf:93:01:
56:97:c5:6d:d7:1a:e4:64:03:47:66:40:e7:88:ff:
51:4e:f0:8a:a8:57:54:27:9e:eb:12:88:0c:87:7e:
c7:18:1f:d4:85:e7:93:14:34:67:f1:bc:f4:52:cf:
7f:4e:03:8e:b2:c3:b7:4d:17:46:6a:bc:08:bc:84:
85:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:86:2A:99:72:70:7C:22:97:C0:E5:C9:39:56:59:94:D4:6B:06:B5
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144986.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a920::/32
Signature Algorithm: sha256WithRSAEncryption
63:f1:c8:a8:12:3e:8a:9e:5c:2b:21:47:ea:ae:8a:5c:45:9d:
86:89:77:73:b8:b9:59:5a:80:af:3a:ed:d5:ed:0b:bf:a6:c0:
98:82:51:ea:89:b1:47:a5:df:19:f5:83:52:05:45:7c:16:b1:
4d:08:16:2b:27:74:6e:5f:4a:8c:d7:91:f8:a6:5e:9a:9e:21:
03:33:d3:d5:c7:23:91:86:7e:b4:16:c7:58:d0:c9:17:b4:96:
36:fe:3d:e6:03:07:93:ad:ad:15:43:b9:13:8d:e3:dd:f3:31:
fe:bb:9a:d0:04:62:fe:31:f9:37:b7:2d:da:3d:2b:8a:15:fa:
fe:b2:4f:c5:63:f5:ee:70:27:90:72:58:ea:e1:ca:56:97:fe:
86:e1:a7:4d:09:05:d4:0c:c4:85:ef:b7:3c:84:db:12:c9:8d:
2c:eb:ab:1f:0b:32:bd:74:ae:20:97:14:e2:2d:1e:ae:63:43:
83:e1:31:0a:4e:b2:57:4b:5f:91:4b:8e:a8:7e:d1:01:29:55:
f8:7b:c7:a1:66:d8:07:91:75:6d:de:6e:70:25:be:c1:4e:36:
23:2f:64:e8:31:89:09:2d:65:d2:60:21:e9:6f:cf:19:78:5a:
31:b0:0e:5c:89:19:68:8d:cc:8b:27:a3:ed:69:67:8f:60:eb:
34:18:a2:a5
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUM8rvy6pUqzgv+dPo/L+dbxQwUFgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMzExNDFaFw0yNzA1MjUwMzE2NDFaMDMxMTAvBgNV
BAMTKDI2ODYyQTk5NzI3MDdDMjI5N0MwRTVDOTM5NTY1OTk0RDQ2QjA2QjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrRylJLK70RZz+A7EIw5Ge2bkG
RAS40HfP2CxnIaCceg28rGszQiUVVx6SkdPJd+cKmccqdcRZh7DAdaz4Bp5iJXPX
Ehl5eJz3t70I9cYZnf80TzS/qEpZrQMOMWxjtuyGJQU3W4I04turGMNqcKzhhGCS
hT3b2vScRdzREN6l8yr7jG4++axaoJbd2u+HQbvXDBewXcIURJv5xuBaJeIk26V4
VJSeuSNRawzzmwnQV5k3gsxVaL8AkzE3uBDeI7+TAVaXxW3XGuRkA0dmQOeI/1FO
8IqoV1QnnusSiAyHfscYH9SF55MUNGfxvPRSz39OA46yw7dNF0ZqvAi8hIUZAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUJoYqmXJwfCKXwOXJOVZZlNRrBrUwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0OTg2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqpIDANBgkqhkiG9w0BAQsFAAOCAQEAY/HI
qBI+ip5cKyFH6q6KXEWdhol3c7i5WVqArzrt1e0Lv6bAmIJR6omxR6XfGfWDUgVF
fBaxTQgWKyd0bl9KjNeR+KZemp4hAzPT1ccjkYZ+tBbHWNDJF7SWNv495gMHk62t
FUO5E43j3fMx/rua0ARi/jH5N7ct2j0rihX6/rJPxWP17nAnkHJY6uHKVpf+huGn
TQkF1AzEhe+3PITbEsmNLOurHwsyvXSuIJcU4i0ermNDg+ExCk6yV0tfkUuOqH7R
ASlV+HvHoWbYB5F1bd5ucCW+wU42Iy9k6DGJCS1l0mAh6W/PGXhaMbAOXIkZaI3M
iyej7Wlnj2DrNBiipQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:21 2026 by rpki-client