Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144012.roa
File: AS144012.roa (raw, json)
Hash identifier: 9ogFCF6TTqFV2nzs5G7H0ni7TIK1hM+BN0TAMsQsp2c=
Subject key identifier: 4C:A2:88:65:97:CC:A6:E0:2A:AC:D2:6C:82:50:13:80:33:1F:74:6E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4246CE08D598ED0B272210B51BC115BB7DAF36B1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144012.roa
Signing time: Fri 22 May 2026 06:58:28 +0000
ROA not before: Fri 22 May 2026 06:53:28 +0000
ROA not after: Fri 21 May 2027 06:58:28 +0000
asID: 144012
IP address blocks: 240a:a552::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:46:ce:08:d5:98:ed:0b:27:22:10:b5:1b:c1:15:bb:7d:af:36:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:28 2026 GMT
Not After : May 21 06:58:28 2027 GMT
Subject: CN=4CA2886597CCA6E02AACD26C82501380331F746E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:25:c7:00:bd:7b:32:76:bd:3e:19:de:5a:bb:
0b:0e:25:29:ed:b0:3b:ec:4b:4c:ca:d2:c4:62:56:
b2:26:63:e5:22:c0:09:34:2c:6a:e0:b8:5e:69:bc:
58:f2:e0:28:96:d7:3a:7e:55:07:5d:84:ec:c9:36:
19:2a:85:8e:96:3f:4e:f8:2b:88:d4:41:e1:b1:4c:
81:20:44:f1:5f:69:1a:0d:37:8c:0b:13:77:28:57:
5f:ca:d4:c3:b2:09:99:86:47:45:1a:d9:be:66:54:
6b:ca:68:fa:a1:c4:fa:b5:fd:22:9e:9a:a2:6c:1d:
d8:b6:d0:0e:d2:f9:af:66:87:61:87:24:33:23:46:
45:24:2b:30:e4:f8:93:2f:c8:c4:1a:42:0d:eb:09:
85:ed:3a:46:36:32:3a:82:32:7e:89:1c:2d:45:13:
05:2d:e5:c5:1f:9e:97:9c:94:90:22:f3:f1:10:ed:
63:d4:66:99:57:e4:6a:53:74:d6:75:59:ac:67:d6:
e2:49:4c:00:ba:3d:1d:2e:5b:ba:9b:06:8b:bd:4a:
7b:01:e7:31:c2:4f:bd:fe:6d:96:3f:d6:0d:bd:7f:
51:b9:bc:f3:75:4d:9d:3f:60:37:72:e4:72:af:e5:
03:b0:f7:26:87:07:2d:f5:3b:87:56:e4:3a:40:62:
4d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A2:88:65:97:CC:A6:E0:2A:AC:D2:6C:82:50:13:80:33:1F:74:6E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144012.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a552::/32
Signature Algorithm: sha256WithRSAEncryption
57:54:92:d3:43:e9:45:82:d9:55:84:e7:c5:59:0d:af:16:04:
b4:7f:ff:e1:6a:76:e0:cd:2e:81:72:b2:8b:bf:a1:ae:81:d9:
8f:3c:d4:29:d6:f6:66:4b:dc:5a:9e:62:bd:91:78:04:79:25:
5b:db:e9:3e:3e:e5:ac:cb:e2:6d:ee:04:ca:d7:6e:7e:2f:a7:
11:fb:b9:e5:e2:e6:11:1c:04:29:20:a8:5e:dc:a6:ed:f0:66:
4a:e7:03:58:8a:af:43:55:36:7d:6b:60:ff:62:eb:2f:5f:e7:
16:40:0d:c4:d2:91:8c:84:ea:41:f3:11:81:d3:2e:d9:e1:7d:
f1:8c:a8:fb:b1:82:e1:07:52:30:43:66:3e:a2:3f:32:dd:75:
ab:52:04:aa:73:61:35:28:e2:d2:4c:5d:d4:54:ba:8c:6c:21:
43:d3:21:e8:a8:00:ae:24:4f:05:4c:db:95:66:26:9f:74:85:
6b:88:9d:c8:2b:6b:26:4e:1e:36:6d:88:48:e5:e7:d7:24:fb:
c7:e4:25:e9:92:81:22:c3:3e:63:5e:0f:7f:02:a9:bd:bb:5c:
12:0f:38:c7:86:97:c1:ef:a2:e3:aa:5a:0e:40:38:26:32:15:
b8:a3:27:72:5b:1b:8e:b8:e0:79:63:ff:52:a4:52:2b:57:d3:
a1:ac:ff:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:40 2026 by rpki-client