Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144030.roa
File: AS144030.roa (raw, json)
Hash identifier: z0qonRwJ+gPn2aI1p/oXt0UHWZULcGKTwWQJYPuLj4E=
Subject key identifier: 66:E5:3F:E4:A9:7A:B6:02:70:24:CC:4E:50:BC:62:C3:63:E1:7E:43
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3EDF101DE1AC27A249E6F056F3DEE04598EA0428
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144030.roa
Signing time: Tue 26 May 2026 06:30:39 +0000
ROA not before: Tue 26 May 2026 06:25:39 +0000
ROA not after: Tue 25 May 2027 06:30:39 +0000
asID: 144030
IP address blocks: 240a:a564::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:df:10:1d:e1:ac:27:a2:49:e6:f0:56:f3:de:e0:45:98:ea:04:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:25:39 2026 GMT
Not After : May 25 06:30:39 2027 GMT
Subject: CN=66E53FE4A97AB6027024CC4E50BC62C363E17E43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:62:97:10:f3:2a:de:c7:08:5a:44:09:fb:91:
c7:cd:57:6a:cb:47:88:60:94:da:5b:d1:69:43:fb:
eb:cd:d4:9a:06:de:b8:b0:53:1f:f8:df:7d:96:61:
0f:73:4b:ac:dd:b7:75:de:bf:28:05:4e:53:2e:75:
f0:4e:1c:46:6e:05:c1:90:56:8c:ec:87:4a:11:d8:
c2:75:d4:b7:18:8d:46:4a:7a:61:d7:9d:6c:b3:66:
31:d2:19:24:72:1a:b4:b8:2a:7f:9e:a8:c8:33:a2:
be:8e:59:71:30:af:7b:5c:1b:e7:a8:0d:3f:ae:66:
89:51:00:73:67:6f:8f:cb:9b:00:02:6a:92:a4:a3:
c8:57:d3:39:49:9c:3a:b9:a1:d0:3b:90:f6:44:20:
e8:3f:a5:b5:76:70:81:71:8b:a9:b7:82:17:fa:04:
b2:ef:76:f5:61:a2:e0:ca:16:b5:cd:e1:8c:fa:79:
78:35:47:33:00:99:72:85:19:85:63:c9:ce:d8:e7:
77:28:08:20:d0:b4:5c:11:5a:10:b6:ee:9b:00:27:
fd:07:13:31:d8:a6:c3:16:ee:33:bc:85:32:c7:73:
f1:c7:28:51:15:a8:fd:66:0c:5d:76:58:05:e9:2d:
af:0d:eb:2b:3c:e6:bd:0a:9c:cd:8a:ab:d9:6f:35:
8a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E5:3F:E4:A9:7A:B6:02:70:24:CC:4E:50:BC:62:C3:63:E1:7E:43
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a564::/32
Signature Algorithm: sha256WithRSAEncryption
32:be:d2:8e:69:62:dd:10:15:9f:10:5b:9c:44:fb:4a:12:d9:
84:e3:ca:5b:94:d8:08:8a:1c:a5:ae:b7:39:41:e7:1b:a9:b4:
f8:ce:f4:d0:de:bc:52:06:5e:9c:87:0c:f3:42:66:34:b2:12:
eb:ba:85:ad:b1:90:f7:e9:4a:87:08:49:c7:dc:42:e5:84:ec:
be:16:36:50:dd:76:10:e4:0a:37:5a:7c:c6:f4:a5:ea:d4:89:
bd:dd:b0:7a:31:23:7a:24:fd:a3:c8:50:e4:d6:69:ca:35:a8:
ff:13:9f:ae:6c:9c:32:6a:fa:e9:b7:88:66:17:14:20:6f:13:
2b:cc:cb:e7:f0:7b:e7:98:c7:76:e0:01:24:a1:bd:01:4e:05:
61:f5:c5:af:a9:06:cc:a6:01:5b:12:e8:f9:6c:4e:dc:78:95:
f7:68:cf:68:fa:35:47:2a:e5:d0:7a:d2:d7:23:86:32:c9:69:
0d:73:f3:c2:67:19:35:14:ce:d7:67:95:b3:4d:36:71:3d:96:
e1:04:fb:f3:84:e1:70:28:47:9e:cb:ca:c9:59:d5:7a:99:59:
23:db:7d:d6:82:b1:48:38:37:ac:e0:22:e4:cc:7f:ec:95:8a:
24:b2:ad:23:88:93:b2:14:02:b0:1e:ae:dd:2b:83:77:48:e7:
4d:01:e0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:36 2026 by rpki-client