Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144048.roa
File: AS144048.roa (raw, json)
Hash identifier: T6IsQUa3uXjishfCADwNJR15ds+pm5pH1gDynQVYnrU=
Subject key identifier: 78:A5:AE:1C:DB:85:62:48:33:0E:85:10:44:E0:7C:0E:88:6B:44:24
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 67C0E91F6B8674385698FF68A05299352BAA913F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144048.roa
Signing time: Fri 22 May 2026 02:47:28 +0000
ROA not before: Fri 22 May 2026 02:42:28 +0000
ROA not after: Fri 21 May 2027 02:47:28 +0000
asID: 144048
IP address blocks: 240a:a576::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:c0:e9:1f:6b:86:74:38:56:98:ff:68:a0:52:99:35:2b:aa:91:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:28 2026 GMT
Not After : May 21 02:47:28 2027 GMT
Subject: CN=78A5AE1CDB856248330E851044E07C0E886B4424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:8c:6c:4c:0e:68:6a:0f:92:71:14:c8:71:64:
fc:c8:bf:bc:f0:c1:a6:92:7f:52:98:f5:c4:8a:f3:
b6:ae:aa:46:f7:be:ba:06:4b:ad:c5:61:cf:a5:a7:
da:ba:78:5b:4e:51:4b:0a:82:03:43:d3:d0:f5:4f:
92:5d:70:9f:3b:53:2f:9f:95:bf:66:dd:69:0e:8d:
91:fe:b2:e0:d1:1d:11:fb:26:ba:11:09:8d:21:08:
12:b9:dd:fd:b2:30:77:ad:63:d2:44:ed:fe:35:ee:
bc:9b:71:37:b8:4d:75:7a:4a:6a:7e:30:85:27:c7:
1f:9c:7a:5c:ba:35:10:7e:a2:d5:dc:e9:8c:41:fd:
46:ea:c4:69:f7:30:d3:f7:5f:1e:0c:d8:aa:4d:c8:
73:cf:a8:cd:83:58:57:2b:8b:57:62:7d:4f:18:c1:
6e:da:da:3e:34:09:f3:3b:00:70:78:78:18:3f:3b:
51:fe:11:2b:88:1f:02:91:d4:9d:ae:e8:97:0a:f0:
b4:4c:36:7d:3d:56:ae:11:85:24:ea:35:60:6e:ee:
62:08:5e:20:eb:d8:e1:9d:67:e1:7d:45:a0:31:f9:
00:7c:f2:2a:ab:5e:bf:17:85:fb:82:33:c9:77:45:
53:32:0b:bf:2f:b6:a0:c4:3c:d2:e0:65:78:2b:19:
69:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A5:AE:1C:DB:85:62:48:33:0E:85:10:44:E0:7C:0E:88:6B:44:24
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144048.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a576::/32
Signature Algorithm: sha256WithRSAEncryption
05:b6:64:fb:81:43:fb:fb:35:94:80:f6:74:b3:60:9d:7f:54:
e5:64:dd:ea:14:d0:d4:d2:60:bb:5d:da:33:bf:b6:a1:47:30:
7a:fa:51:75:2e:45:f9:c7:8a:76:bc:45:8c:ba:bf:9b:45:5a:
9e:1d:11:c8:b0:2d:95:ba:5f:74:97:38:d1:95:06:4b:f2:e8:
2b:7e:e3:7f:25:1d:2a:2d:df:71:98:a1:b2:43:13:41:54:58:
ac:ae:b1:69:fa:ca:39:7b:8d:2c:e0:99:19:76:ef:10:e6:56:
02:4d:74:dd:0a:4f:31:b5:55:2e:3b:b4:f2:01:65:68:d1:f4:
9a:47:8e:31:28:f2:44:21:d9:66:1d:0a:0a:be:e3:82:b3:d7:
28:4c:45:90:bc:e8:66:e3:50:03:8b:8b:c4:14:ca:08:e1:cd:
1d:a3:cd:80:68:1d:31:b9:2d:32:2b:e4:02:71:36:ce:b2:53:
d2:26:12:74:91:c5:f8:e1:55:ae:a6:10:65:65:25:4d:a6:52:
cf:67:a8:5a:cb:8f:7d:9e:32:55:dc:e9:59:00:01:a4:3e:f2:
60:d0:4d:07:06:06:a7:cf:6e:fc:ef:12:a5:b3:05:07:f3:ab:
42:d4:1e:aa:8c:b1:64:3b:b1:c7:19:59:d9:33:ea:ea:71:af:
29:2a:b9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:26 2026 by rpki-client