Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144997.roa
File: AS144997.roa (raw, json)
Hash identifier: tsVvSPFiSiKHHo41BMgWM53YUOVK9vQpZmYOZs8kwFA=
Subject key identifier: CD:B8:44:1F:41:8B:5C:B4:FD:3F:E1:24:34:44:EE:66:38:C9:B0:19
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 125C043539D451F7F11EE2A3ABD76778AD538FE8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144997.roa
Signing time: Tue 26 May 2026 02:34:57 +0000
ROA not before: Tue 26 May 2026 02:29:57 +0000
ROA not after: Tue 25 May 2027 02:34:57 +0000
asID: 144997
IP address blocks: 240a:a92b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:5c:04:35:39:d4:51:f7:f1:1e:e2:a3:ab:d7:67:78:ad:53:8f:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:29:57 2026 GMT
Not After : May 25 02:34:57 2027 GMT
Subject: CN=CDB8441F418B5CB4FD3FE1243444EE6638C9B019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:05:58:8c:26:66:be:fd:6b:93:84:08:9b:f6:
7e:36:dd:c0:8d:28:07:ed:44:76:65:6e:75:b1:c5:
75:79:8b:79:db:df:91:b8:23:38:91:fc:e4:c5:c5:
c4:72:fb:d2:d4:fa:35:6f:aa:9a:c9:78:fc:49:a2:
66:3e:14:58:2a:82:9c:db:a2:03:56:f6:30:e6:95:
9a:fd:2c:5d:90:af:b9:ce:8b:96:03:be:3f:9d:90:
e3:4d:12:8d:5f:63:4c:71:05:f2:58:5a:e6:d0:d7:
fa:73:e3:82:e2:c1:3d:7c:c2:7f:5d:6d:a2:0c:cf:
1c:8f:59:5b:c9:22:d1:1c:e3:46:7a:c6:2a:97:6b:
34:a8:95:87:54:81:1e:1b:47:72:1e:77:33:67:2c:
fd:95:ea:fa:24:0d:a9:70:24:ab:a4:60:f4:fd:33:
36:94:f4:6c:fc:20:b8:12:7d:b2:ef:cd:b8:f1:39:
77:00:1c:e9:33:de:1a:05:ab:c2:f2:f7:54:b8:cf:
4b:5e:e9:50:e3:51:97:a7:6b:42:d3:e9:5c:2d:28:
44:2e:6d:77:6e:36:71:a5:e4:ad:9a:01:31:11:83:
ba:c1:9e:4e:25:3b:ec:85:0f:68:30:0f:7a:56:f0:
8b:aa:c1:e3:89:16:55:64:db:ef:d0:25:c8:22:fc:
5f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B8:44:1F:41:8B:5C:B4:FD:3F:E1:24:34:44:EE:66:38:C9:B0:19
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144997.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a92b::/32
Signature Algorithm: sha256WithRSAEncryption
1c:62:a7:12:23:f1:62:52:c3:8a:96:0b:97:f6:15:77:27:14:
89:ba:af:61:87:e2:3c:89:c5:83:55:49:9e:40:7f:10:c0:22:
a7:cf:a2:f3:02:78:dc:30:5a:a3:95:f3:e0:ca:9f:e7:03:c0:
e3:4f:e0:8b:ff:e8:03:5b:fd:76:42:f8:f6:56:75:f1:30:06:
c6:59:63:be:09:d9:21:2c:f6:d3:14:f3:66:03:2f:ff:19:5f:
b7:f0:a5:f3:f0:69:e1:0e:9d:3d:aa:33:8d:7b:d4:41:58:62:
b1:3e:d7:70:6b:52:16:8e:3c:64:55:83:b9:68:e4:bf:98:fa:
30:f6:fe:36:4d:80:d1:fd:c9:9a:92:c6:d6:67:89:75:23:c7:
52:9f:7b:ff:af:38:34:8b:09:fb:22:e5:4c:02:23:1c:f1:85:
cc:fd:8b:a9:0d:00:19:c9:29:bb:b2:0d:69:8b:6c:2b:f6:10:
c0:ca:6f:69:e9:1f:2a:ba:d7:d9:b3:91:f3:1f:8f:88:55:94:
01:93:29:25:49:a7:c1:1f:1c:a0:32:b8:29:73:43:a8:2f:98:
1e:98:be:c2:fa:b7:b6:77:48:40:e5:90:5f:3d:50:a4:66:05:
33:a0:76:75:f1:74:cf:0f:2f:89:c2:52:1f:07:49:6f:7f:cc:
0e:47:e0:a8
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUElwENTnUUffxHuKjq9dneK1Tj+gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMjI5NTdaFw0yNzA1MjUwMjM0NTdaMDMxMTAvBgNV
BAMTKENEQjg0NDFGNDE4QjVDQjRGRDNGRTEyNDM0NDRFRTY2MzhDOUIwMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDBViMJma+/WuThAib9n423cCN
KAftRHZlbnWxxXV5i3nb35G4IziR/OTFxcRy+9LU+jVvqprJePxJomY+FFgqgpzb
ogNW9jDmlZr9LF2Qr7nOi5YDvj+dkONNEo1fY0xxBfJYWubQ1/pz44LiwT18wn9d
baIMzxyPWVvJItEc40Z6xiqXazSolYdUgR4bR3IedzNnLP2V6vokDalwJKukYPT9
MzaU9Gz8ILgSfbLvzbjxOXcAHOkz3hoFq8Ly91S4z0te6VDjUZena0LT6VwtKEQu
bXduNnGl5K2aATERg7rBnk4lO+yFD2gwD3pW8IuqweOJFlVk2+/QJcgi/F85AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUzbhEH0GLXLT9P+EkNETuZjjJsBkwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0OTk3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqpKzANBgkqhkiG9w0BAQsFAAOCAQEAHGKn
EiPxYlLDipYLl/YVdycUibqvYYfiPInFg1VJnkB/EMAip8+i8wJ43DBao5Xz4Mqf
5wPA40/gi//oA1v9dkL49lZ18TAGxlljvgnZISz20xTzZgMv/xlft/Cl8/Bp4Q6d
PaozjXvUQVhisT7XcGtSFo48ZFWDuWjkv5j6MPb+Nk2A0f3JmpLG1meJdSPHUp97
/684NIsJ+yLlTAIjHPGFzP2LqQ0AGckpu7INaYtsK/YQwMpvaekfKrrX2bOR8x+P
iFWUAZMpJUmnwR8coDK4KXNDqC+YHpi+wvq3tndIQOWQXz1QpGYFM6B2dfF0zw8v
icJSHwdJb3/MDkfgqA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:51 2026 by rpki-client