Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144031.roa
File: AS144031.roa (raw, json)
Hash identifier: yPnXMiPGRdfzWcFTZaW4R0IFxx0cMQGJ97dubNSNPhc=
Subject key identifier: CE:F0:19:B2:6B:CD:8C:08:5E:F7:80:DB:64:2A:C2:0F:7B:BF:3A:12
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 040D92C9D6CA5331D176370E26C092CF7762643A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144031.roa
Signing time: Tue 26 May 2026 02:35:20 +0000
ROA not before: Tue 26 May 2026 02:30:20 +0000
ROA not after: Tue 25 May 2027 02:35:20 +0000
asID: 144031
IP address blocks: 240a:a565::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:0d:92:c9:d6:ca:53:31:d1:76:37:0e:26:c0:92:cf:77:62:64:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:20 2026 GMT
Not After : May 25 02:35:20 2027 GMT
Subject: CN=CEF019B26BCD8C085EF780DB642AC20F7BBF3A12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:94:ee:45:dc:2e:de:e2:be:5a:43:90:8d:08:
84:6e:0e:96:09:49:09:41:04:15:fe:9f:5d:47:ac:
35:6a:3d:67:f7:dd:be:88:56:4a:c0:19:e8:4b:62:
97:b3:85:36:d2:da:a3:a3:65:37:c5:03:1c:34:0e:
16:c0:f0:1d:42:6e:0a:dd:9f:b5:6b:1a:6a:f5:e2:
58:57:e8:38:37:92:76:7c:1c:cd:25:56:ce:dc:7c:
e6:0b:be:46:d8:01:df:c5:53:e8:41:22:3a:50:cb:
a3:b0:e2:fd:2a:f6:79:ea:50:2d:bc:65:31:e6:cc:
04:f5:5f:c1:00:2b:b9:69:27:a4:42:56:10:35:69:
e5:03:68:d6:54:3d:16:8e:9d:ed:aa:54:bb:1e:d3:
69:2f:3c:12:54:bd:0f:32:d2:56:29:ec:46:c5:63:
c0:2b:c0:f1:89:59:14:58:a3:7d:fa:de:83:96:06:
2c:1e:f4:80:dc:de:84:2e:c4:cb:61:2f:34:c1:a9:
74:bc:b2:b4:31:b2:21:9e:67:37:c1:5d:19:e5:49:
66:79:af:02:49:f7:af:4f:4f:51:9c:6c:b0:51:56:
ae:3f:eb:a3:e5:35:6e:27:6f:43:65:57:36:0f:b4:
32:f7:c1:a3:fe:f8:0e:6c:8b:2e:97:95:03:2e:b7:
f9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F0:19:B2:6B:CD:8C:08:5E:F7:80:DB:64:2A:C2:0F:7B:BF:3A:12
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a565::/32
Signature Algorithm: sha256WithRSAEncryption
5d:7c:5e:81:53:75:49:59:5c:e8:bd:ec:08:4c:b6:4e:ba:a0:
3a:76:76:30:d3:c9:6d:6b:1f:2c:47:dd:49:16:75:42:20:69:
9e:41:2e:51:ce:23:ab:3f:1d:38:78:10:4f:e4:bd:bd:c5:0a:
1f:28:00:9b:ce:16:31:c6:9f:96:e9:e4:6e:59:fd:89:aa:ad:
49:51:a8:93:c8:0e:76:90:09:5d:df:bf:67:38:fc:26:4d:31:
a4:ec:13:ec:4f:c8:af:12:56:7c:05:12:fe:50:19:c5:0d:a0:
9a:7e:77:14:83:7a:15:7b:5c:cd:24:1c:95:3c:71:68:c3:8d:
41:91:64:2d:98:0a:8a:1e:c9:b0:24:5a:d5:6e:9f:5d:61:5e:
fe:58:2f:d8:b0:8a:7a:a9:1b:25:e7:fc:e0:3c:60:5a:38:c8:
33:da:74:c3:c0:57:00:41:37:14:cb:2d:2e:5b:9b:c6:07:01:
ce:3b:82:a8:f8:cd:dc:17:fd:99:9d:df:a0:48:14:a9:03:da:
5e:c8:71:78:6f:04:b6:2b:0e:ab:2a:9d:02:30:5c:75:54:65:
72:98:8f:8c:6d:e3:4b:28:f8:3e:f7:00:df:0b:6a:7c:4f:b6:
fc:a1:60:0d:0f:b2:3b:ad:4d:a1:5e:8c:51:85:85:36:11:d2:
80:4a:ae:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:57 2026 by rpki-client