Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144002.roa
File: AS144002.roa (raw, json)
Hash identifier: CJ4TIw7KLSDzkRaFK3jNt9fiQ2Y91dbTwJ9uEA/7W/c=
Subject key identifier: AB:44:57:D9:97:1A:3F:F2:A3:0E:40:B6:BD:A0:EA:A2:FA:A4:CC:1B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 45ABBE6747C20A5573A09FF518630ABB3AC7C0C6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144002.roa
Signing time: Fri 22 May 2026 07:09:10 +0000
ROA not before: Fri 22 May 2026 07:04:10 +0000
ROA not after: Fri 21 May 2027 07:09:10 +0000
asID: 144002
IP address blocks: 240a:a548::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:ab:be:67:47:c2:0a:55:73:a0:9f:f5:18:63:0a:bb:3a:c7:c0:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:04:10 2026 GMT
Not After : May 21 07:09:10 2027 GMT
Subject: CN=AB4457D9971A3FF2A30E40B6BDA0EAA2FAA4CC1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6b:07:45:cf:0d:7f:76:99:64:bc:30:6b:9e:
7d:96:b3:3c:ec:1c:dd:06:3e:9c:e9:d5:73:f8:ab:
db:e2:dc:e6:a3:fb:ee:4b:f7:db:63:79:d8:bd:87:
c6:90:0e:f1:65:4c:8e:f1:e8:cb:ee:43:39:69:b6:
ef:b7:93:8d:c7:d3:18:54:dc:26:8c:ea:24:72:89:
4b:17:31:1a:48:58:d1:3e:b5:36:b2:7d:61:68:44:
d7:42:bc:f1:f3:67:70:bf:30:46:54:8e:31:7d:87:
09:03:02:86:b0:d1:ab:de:19:57:c9:4e:32:a6:5d:
91:d3:0f:99:ad:8b:01:bd:19:0b:e5:df:f8:51:19:
8f:8e:a9:4b:e4:c9:dd:39:4b:5e:2e:ef:75:0c:f3:
f4:c7:f6:f0:c9:2f:ac:da:0b:52:1f:e7:d4:57:fb:
11:bb:c5:f6:b6:93:9d:ff:80:3b:df:2c:12:de:53:
aa:25:ef:bb:b9:8a:6a:ae:ff:15:e3:b4:86:ad:29:
00:e6:0f:8a:d1:f9:b9:11:ba:1b:ba:e6:8a:3c:7b:
83:a9:a7:60:42:75:57:f9:96:25:1c:1c:05:ec:31:
00:42:9e:8c:d1:a3:48:12:28:b8:55:41:4f:7a:dd:
90:0d:75:da:12:a1:98:dd:52:28:c3:cd:5c:47:0a:
48:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:44:57:D9:97:1A:3F:F2:A3:0E:40:B6:BD:A0:EA:A2:FA:A4:CC:1B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144002.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a548::/32
Signature Algorithm: sha256WithRSAEncryption
27:99:ba:e0:63:d2:73:76:0f:d8:f0:52:28:51:9b:b6:be:77:
ab:0d:a6:1e:eb:50:68:b6:02:00:5f:38:f0:d5:47:05:08:f9:
0f:b2:63:0e:9b:b7:c7:22:92:4d:87:fd:4f:0f:4c:ae:e0:65:
b3:5f:25:2d:b0:5f:1a:ef:46:5b:c6:58:08:44:cb:b8:bf:e9:
d8:a3:df:cb:0e:e6:be:8a:60:bf:7a:bf:11:d7:6f:94:d4:db:
9f:b8:94:f9:1a:e9:43:25:f1:f9:fa:59:ca:eb:d7:8b:9c:84:
4e:ff:98:2a:b8:ae:8b:aa:f4:b9:19:f0:81:21:d4:2a:72:83:
30:3e:46:2a:62:f8:00:71:6b:79:eb:98:9b:32:7d:64:03:b0:
52:ad:8b:9c:38:29:07:0e:28:a5:c6:f0:c4:48:a3:51:3c:16:
15:6f:6a:8e:43:6e:62:cf:4d:a6:51:b5:30:04:70:3c:df:c1:
61:91:6d:83:0e:f5:f8:e3:de:9c:62:1f:94:5e:70:25:23:4c:
52:28:ab:fa:e2:28:c2:3d:c7:40:5b:c4:fe:13:02:f9:28:b4:
b6:ed:6c:bd:f5:7b:a9:63:62:f9:e0:2f:9b:7c:3f:5b:94:4b:
79:e5:d4:c0:0c:70:bd:b3:fd:c6:7f:f9:39:a5:1a:bc:1f:99:
e3:65:7f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:46 2026 by rpki-client