Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144993.roa
File: AS144993.roa (raw, json)
Hash identifier: EXkkGK7VIDuC4eNNUP/odMt5n8baqdUNy3Qisb8MfQ8=
Subject key identifier: 72:4B:FE:3E:B4:F0:80:EC:C0:49:A4:86:92:06:92:65:9C:15:12:8D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 234EBD0022C3A4ADF3489E11BB177042F87621EA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144993.roa
Signing time: Mon 25 May 2026 02:22:31 +0000
ROA not before: Mon 25 May 2026 02:17:31 +0000
ROA not after: Mon 24 May 2027 02:22:31 +0000
asID: 144993
IP address blocks: 240a:a927::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:4e:bd:00:22:c3:a4:ad:f3:48:9e:11:bb:17:70:42:f8:76:21:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:31 2026 GMT
Not After : May 24 02:22:31 2027 GMT
Subject: CN=724BFE3EB4F080ECC049A486920692659C15128D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ab:f0:e7:72:e1:4b:26:2c:9c:b0:16:ce:02:
99:60:2b:c1:3a:d2:ed:ac:a6:8a:84:39:2a:7f:98:
66:dd:ad:c4:c3:c1:00:e6:32:79:4f:87:00:4a:4b:
3f:57:c6:f0:c4:c0:bc:b1:12:fa:62:9e:1a:91:a0:
72:24:74:8d:45:c9:54:30:ca:08:1a:95:0e:07:81:
ac:93:12:9a:08:08:3d:ee:62:ef:ab:cc:cb:be:53:
3b:8b:9d:a7:d6:98:3d:f3:6f:37:60:02:ec:6a:0d:
c5:e8:ac:73:36:2c:12:80:08:b6:3b:30:cc:ba:21:
0a:1c:e6:a0:10:45:eb:a0:c4:b8:40:94:22:49:cf:
40:cb:41:e1:ef:17:f7:88:10:fb:48:57:e6:62:bf:
4c:58:1b:9f:6c:b5:b3:39:6e:cf:08:27:d3:94:92:
99:a0:14:f9:8b:10:c4:2b:42:2d:3d:3f:e9:21:57:
a0:95:87:c4:16:e6:43:66:20:4e:7e:4f:50:b2:d8:
9a:fd:36:a7:49:68:e1:21:4f:a9:cb:15:a0:5e:51:
9d:f5:18:e6:de:42:53:49:6e:01:30:d3:d8:e9:44:
7e:fe:9e:04:2c:0f:71:a0:de:77:fa:49:05:7e:6d:
75:5d:4d:82:8d:57:64:ab:2d:90:0b:6a:36:c4:c6:
e1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:4B:FE:3E:B4:F0:80:EC:C0:49:A4:86:92:06:92:65:9C:15:12:8D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144993.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a927::/32
Signature Algorithm: sha256WithRSAEncryption
46:63:4a:d2:d1:6f:7c:12:01:1e:72:d0:b7:4f:31:c3:6a:12:
8f:15:f1:fc:4a:16:46:9c:17:34:be:e3:db:66:d9:c3:77:91:
77:f0:2d:7b:60:2b:eb:13:5c:9b:87:bd:aa:c9:d0:e9:30:b7:
ba:f7:d6:aa:aa:49:95:02:21:fb:fb:a3:f2:2d:e7:70:e1:f6:
98:82:c9:46:70:fb:11:1a:34:26:b1:a1:ce:ca:ea:00:9d:0a:
d8:fb:40:3d:ea:8b:23:e3:5b:90:bc:ef:f7:bb:11:bc:a7:a9:
8f:24:8e:ef:25:79:bb:24:10:e9:1c:8a:0d:d8:9f:a9:7c:7e:
f1:99:c5:54:17:cf:0c:39:d5:de:28:4a:c6:d4:ea:b7:91:fa:
38:a4:81:3d:d7:c9:16:f6:c8:f9:a4:c8:95:74:0e:c4:5e:1f:
56:95:35:23:b7:8a:8b:f9:28:9e:3c:13:80:7f:c5:c4:c3:02:
dd:ec:5d:76:da:80:df:2d:f4:4b:6f:72:26:78:20:cd:91:60:
fb:1e:44:20:1e:be:ec:c1:6f:5c:41:f4:00:f9:48:1d:6b:0e:
d6:ba:97:50:b3:0f:ba:28:0e:f2:2a:79:a5:a7:c3:2b:4d:0f:
9f:4f:ec:f2:a4:c3:a9:b6:8a:ff:e1:69:f1:ba:28:c8:9f:eb:
fa:9c:9c:9b
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUI069ACLDpK3zSJ4RuxdwQvh2IeowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMjE3MzFaFw0yNzA1MjQwMjIyMzFaMDMxMTAvBgNV
BAMTKDcyNEJGRTNFQjRGMDgwRUNDMDQ5QTQ4NjkyMDY5MjY1OUMxNTEyOEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCCq/DncuFLJiycsBbOAplgK8E6
0u2spoqEOSp/mGbdrcTDwQDmMnlPhwBKSz9XxvDEwLyxEvpinhqRoHIkdI1FyVQw
yggalQ4HgayTEpoICD3uYu+rzMu+UzuLnafWmD3zbzdgAuxqDcXorHM2LBKACLY7
MMy6IQoc5qAQReugxLhAlCJJz0DLQeHvF/eIEPtIV+Ziv0xYG59stbM5bs8IJ9OU
kpmgFPmLEMQrQi09P+khV6CVh8QW5kNmIE5+T1Cy2Jr9NqdJaOEhT6nLFaBeUZ31
GObeQlNJbgEw09jpRH7+ngQsD3Gg3nf6SQV+bXVdTYKNV2SrLZALajbExuHDAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUckv+PrTwgOzASaSGkgaSZZwVEo0wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0OTkzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqpJzANBgkqhkiG9w0BAQsFAAOCAQEARmNK
0tFvfBIBHnLQt08xw2oSjxXx/EoWRpwXNL7j22bZw3eRd/Ate2Ar6xNcm4e9qsnQ
6TC3uvfWqqpJlQIh+/uj8i3ncOH2mILJRnD7ERo0JrGhzsrqAJ0K2PtAPeqLI+Nb
kLzv97sRvKepjySO7yV5uyQQ6RyKDdifqXx+8ZnFVBfPDDnV3ihKxtTqt5H6OKSB
PdfJFvbI+aTIlXQOxF4fVpU1I7eKi/konjwTgH/FxMMC3exddtqA3y30S29yJngg
zZFg+x5EIB6+7MFvXEH0APlIHWsO1rqXULMPuigO8ip5pafDK00Pn0/s8qTDqbaK
/+Fp8booyJ/r+pycmw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:20 2026 by rpki-client