Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144036.roa
File: AS144036.roa (raw, json)
Hash identifier: SVu9hLoPcC9PUcaKbnl1Tx7iP1c1p+GAs6eG96yLqJc=
Subject key identifier: 6D:91:FA:32:F5:A9:2C:20:41:D4:8D:D7:06:5B:95:2C:F7:F8:03:BC
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3B35960EF81667607B123E38FE814FF73D851E18
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144036.roa
Signing time: Tue 26 May 2026 02:35:07 +0000
ROA not before: Tue 26 May 2026 02:30:07 +0000
ROA not after: Tue 25 May 2027 02:35:07 +0000
asID: 144036
IP address blocks: 240a:a56a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:35:96:0e:f8:16:67:60:7b:12:3e:38:fe:81:4f:f7:3d:85:1e:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:07 2026 GMT
Not After : May 25 02:35:07 2027 GMT
Subject: CN=6D91FA32F5A92C2041D48DD7065B952CF7F803BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a9:92:63:e3:9f:23:76:18:40:a2:07:0e:6a:
62:8b:41:43:74:60:ad:9c:ce:b4:9c:8b:04:a1:5b:
1c:e9:f9:66:74:72:3b:8a:97:3c:81:f4:5d:5b:aa:
56:12:e8:9a:b9:1a:1e:9e:26:4a:29:ad:88:ce:97:
17:ef:cc:cf:07:09:b5:9e:10:28:fd:39:28:9d:21:
72:4d:db:0d:ff:b7:97:77:3b:ff:60:75:f0:e1:c9:
df:44:a3:23:ec:c8:d7:b0:1a:97:b5:ae:be:48:9e:
f5:09:ee:de:af:d5:01:18:35:3c:32:63:05:25:ea:
92:24:7d:1e:bd:53:af:ed:cc:72:e8:e4:f6:6a:7d:
4f:2a:74:c1:f5:3f:85:3d:e9:b0:91:17:cd:e6:33:
10:c7:38:84:38:6c:10:3d:70:85:a9:0b:1d:f4:fb:
1d:6e:11:14:b7:1b:22:da:4b:7c:c4:0a:60:7d:35:
c6:0b:f1:c8:fe:47:c1:71:0d:5c:1d:9f:47:fc:08:
2b:e3:f7:19:57:a6:5c:a2:36:40:95:fc:55:26:62:
bd:67:b9:ef:de:ef:47:c7:0d:95:ff:c4:94:48:23:
fd:f9:21:8f:d6:19:45:e3:0c:b0:cd:96:9c:22:35:
cd:ab:78:05:30:63:75:9b:be:16:86:6b:93:e2:de:
48:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:91:FA:32:F5:A9:2C:20:41:D4:8D:D7:06:5B:95:2C:F7:F8:03:BC
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a56a::/32
Signature Algorithm: sha256WithRSAEncryption
32:43:4e:97:5d:dd:72:5b:37:7c:c1:8a:3d:a6:95:45:6a:6b:
30:5c:13:31:6d:d5:7c:d6:1c:d6:ac:20:24:c2:fe:21:cc:94:
41:99:6c:86:f7:da:a7:7e:5b:fd:ed:09:13:dc:90:75:57:f1:
74:fb:ea:6f:c9:ed:75:b8:03:4e:ec:3b:b4:bd:85:31:e0:aa:
3e:2f:1f:e2:1a:68:91:a6:f8:be:fd:bf:6a:eb:0e:de:31:24:
80:ff:e6:c0:91:87:9e:60:e9:6f:48:58:00:d8:55:48:d1:6c:
fa:d5:03:b0:6f:10:54:45:fc:5f:4b:82:f1:79:47:55:07:ec:
6a:19:17:df:99:15:91:8c:91:88:d6:dc:a8:46:27:15:69:8d:
6c:c7:d2:1e:51:9a:ca:bb:24:7d:1c:d5:50:bc:e6:4f:1a:a1:
e9:67:ae:a4:64:ec:75:6d:95:21:2f:21:ba:d1:d3:6d:51:a1:
19:86:36:ab:bb:90:9e:f5:12:2d:81:62:10:80:e9:6a:e3:dc:
4c:51:5d:b8:6f:e5:06:e3:0c:d9:bc:bd:4d:d9:a9:05:30:c6:
d9:0d:87:5a:9a:63:e4:13:c8:2b:22:33:55:6b:7c:e7:28:d9:
db:50:b6:8c:f6:bc:16:36:67:51:f1:fa:65:5d:16:f3:cf:ec:
3d:30:eb:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:44 2026 by rpki-client