Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144009.roa
File: AS144009.roa (raw, json)
Hash identifier: xw1poWyzmkUvWjuFwa5RamGcxlbBINYLECkOykulpwE=
Subject key identifier: D2:7B:11:97:5A:00:82:E9:03:B3:62:5C:18:DF:F3:C3:92:22:84:79
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5E160F255838B967D03959E91CAEE589622391D2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144009.roa
Signing time: Fri 22 May 2026 07:41:12 +0000
ROA not before: Fri 22 May 2026 07:36:12 +0000
ROA not after: Fri 21 May 2027 07:41:12 +0000
asID: 144009
IP address blocks: 240a:a54f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:16:0f:25:58:38:b9:67:d0:39:59:e9:1c:ae:e5:89:62:23:91:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:36:12 2026 GMT
Not After : May 21 07:41:12 2027 GMT
Subject: CN=D27B11975A0082E903B3625C18DFF3C392228479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fa:a7:9f:18:e4:8b:01:9b:3e:d2:1a:21:72:
59:82:55:95:88:0d:df:97:5b:e6:b2:8a:a1:3f:33:
25:f1:5e:af:92:ee:27:9c:21:78:9e:1e:e2:6d:a1:
ff:63:52:a2:ab:b3:34:06:fe:ce:6f:7f:d4:fe:8c:
bd:7e:b8:3a:48:d1:18:54:4c:9e:97:b6:8b:ae:ce:
c1:14:72:7f:4d:50:97:4f:c8:4d:d4:b4:06:7c:8f:
ad:f0:b8:c2:52:e1:03:24:12:51:74:6e:e2:08:40:
60:ea:97:6f:42:dd:2c:f4:ef:c7:bd:b9:f0:10:8a:
94:84:b5:84:23:3e:ce:40:d9:94:39:30:5e:ed:c6:
7d:28:9b:18:91:44:0e:7c:0f:29:67:03:f9:bd:f0:
6a:65:95:51:a0:b6:56:27:29:82:6b:06:c7:0e:79:
62:5e:da:de:bf:f9:24:cc:98:56:33:99:6e:a3:ba:
8d:d6:4c:4a:63:20:01:cb:af:31:62:41:45:3e:e3:
ef:70:ba:a2:a4:b8:7f:0c:01:46:28:58:81:49:cd:
6a:94:e4:d7:59:18:7c:d8:80:e7:93:fb:f9:2d:c4:
a4:2a:98:a6:e5:b5:31:d2:c3:2f:21:5b:37:aa:73:
6a:ec:12:f2:b3:3c:bc:df:f2:ff:d0:d9:93:c7:2b:
f6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:7B:11:97:5A:00:82:E9:03:B3:62:5C:18:DF:F3:C3:92:22:84:79
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144009.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a54f::/32
Signature Algorithm: sha256WithRSAEncryption
80:3a:b0:41:6a:6b:db:8d:bf:18:df:d5:42:a3:01:9c:bb:67:
cd:d6:9b:68:d8:00:58:1c:90:d0:9e:87:7a:5d:66:17:a8:99:
61:c4:44:b2:84:00:2f:c2:2f:be:43:91:fb:9d:5a:30:65:48:
60:95:72:eb:b1:fa:65:75:87:19:da:01:e4:3f:e6:e6:f9:a4:
4a:2d:8d:47:57:c2:a6:38:08:cd:c7:b1:2c:cd:b7:d5:0a:f0:
04:97:3b:db:11:01:71:53:82:b7:86:b6:96:81:0e:e6:16:cc:
c7:d8:a6:e4:11:cd:7a:2b:46:e0:99:53:b9:11:7c:cb:60:91:
24:28:2b:fd:18:ea:73:f2:35:ac:e7:e6:14:03:b8:c5:f5:14:
3e:9c:c2:ef:82:57:ac:53:4f:25:db:0d:fd:44:db:6b:57:f9:
73:d7:d2:46:2a:56:53:f2:7d:ab:02:b2:bb:b3:78:23:ec:69:
15:62:c0:7c:50:b5:17:b8:9b:5f:3e:19:63:b0:ed:45:3b:f9:
e7:3b:f4:4f:0a:6d:03:02:2c:bb:bb:58:fe:90:fe:53:72:64:
73:65:d5:ae:d1:0c:eb:65:ec:8f:76:91:ea:78:af:d3:6b:a5:
56:3b:cf:08:c0:63:c7:5f:67:df:f5:8b:14:54:3a:ca:b6:1e:
9d:20:57:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:24 2026 by rpki-client