Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144023.roa
File: AS144023.roa (raw, json)
Hash identifier: 2Bx5v6+ci0lEZcZHA8M3Cgn2N2vbLvg7lFNfMR48dls=
Subject key identifier: DC:C0:31:BD:47:0B:76:36:2A:A8:8F:3A:E4:9E:22:A8:9C:DB:0B:59
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3FFA037C10650B520502F8E5E90B573591DB148B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144023.roa
Signing time: Mon 25 May 2026 01:38:29 +0000
ROA not before: Mon 25 May 2026 01:33:29 +0000
ROA not after: Mon 24 May 2027 01:38:29 +0000
asID: 144023
IP address blocks: 240a:a55d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:fa:03:7c:10:65:0b:52:05:02:f8:e5:e9:0b:57:35:91:db:14:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:29 2026 GMT
Not After : May 24 01:38:29 2027 GMT
Subject: CN=DCC031BD470B76362AA88F3AE49E22A89CDB0B59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b6:43:5c:5c:cd:c7:51:2a:10:b5:d2:c0:fe:
0d:97:75:a1:b7:3f:e2:d4:b0:3b:8c:7c:67:57:9e:
f1:cd:7a:b5:08:33:f0:79:31:12:c8:3c:d5:e4:cd:
c9:67:6e:6d:af:86:cb:bc:e6:63:4e:78:38:fa:d9:
d4:6e:c2:4c:5e:d2:4e:78:2e:32:21:66:80:76:22:
60:e5:24:61:ec:23:90:0d:ac:69:06:57:97:0f:9d:
5d:31:24:58:c0:55:bb:98:7a:73:e9:8f:6e:74:a4:
49:c1:f3:cb:37:78:5a:07:e7:3c:b8:50:f8:91:e6:
85:95:1b:42:1f:40:35:d7:43:bc:cb:ac:c8:d5:8a:
a1:92:42:15:5a:d3:d0:33:30:d9:e8:e3:38:21:fd:
0b:74:cc:c5:94:e9:3b:68:d0:3b:56:96:85:5e:fc:
43:f3:b1:ea:bb:1d:02:d5:b6:8c:37:74:73:fe:9c:
c2:55:93:1a:49:25:2f:46:b3:65:4e:8e:7a:42:f2:
37:5e:0d:0f:f6:98:bf:12:28:00:85:8e:09:a5:60:
82:1e:57:46:5d:af:3d:50:85:d6:78:9b:29:10:db:
bf:c4:b0:5c:3a:ca:e4:f3:55:aa:d6:0d:b7:cc:1c:
25:1f:e1:78:76:3a:df:fd:52:8e:c9:c4:ec:24:22:
02:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C0:31:BD:47:0B:76:36:2A:A8:8F:3A:E4:9E:22:A8:9C:DB:0B:59
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144023.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a55d::/32
Signature Algorithm: sha256WithRSAEncryption
79:e5:22:16:2c:32:fe:80:f5:fb:97:4b:52:e5:d0:c0:94:ea:
75:3d:13:1f:d5:ca:a4:52:aa:9e:48:7e:bd:6a:10:8a:4d:da:
68:6d:6c:7c:dd:7f:a9:ec:ad:8a:26:d0:b7:be:b2:56:99:99:
83:76:32:a4:5e:3d:4b:59:a4:d1:dc:68:24:98:c0:cc:72:fc:
f5:87:d4:82:73:54:d3:8e:f7:6e:1f:3a:9c:a2:ec:cc:b7:d0:
70:4d:d6:ec:3d:69:4f:52:2d:14:14:41:4b:1e:55:42:ef:37:
29:50:20:ef:4f:27:e7:66:db:21:61:e0:09:d2:2d:d9:d0:7c:
81:b9:5f:7f:bb:f3:c9:6d:29:4a:65:35:77:35:63:be:3b:f7:
7a:b7:29:03:bc:2d:9e:09:01:87:9a:ef:ec:78:33:62:a6:73:
5a:61:25:05:04:32:89:5c:c6:24:ec:f7:30:81:2a:3d:93:1e:
0e:03:d0:c6:a0:98:db:c0:1b:a9:ed:b3:9a:0c:a3:0d:98:ca:
41:3e:d2:d9:3e:00:d9:d2:b6:57:2c:98:42:00:56:11:ad:9f:
e5:23:4c:a8:23:57:89:3d:fa:c6:66:4f:bb:31:64:7a:93:dd:
57:e6:bc:54:4a:9e:cf:8e:f2:05:e8:cf:11:7d:2d:15:95:d4:
e7:44:03:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:05 2026 by rpki-client