Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144049.roa
File: AS144049.roa (raw, json)
Hash identifier: pk9Z+lH3DQWRQXYBvWrMltBg7oCfXu4GWGpnG+OsPxM=
Subject key identifier: 67:9D:53:67:E8:BC:A5:11:20:E4:01:C6:23:EC:83:B7:BE:29:40:B2
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 48F14B4D5A2C5F0F47C6942614D962E40A37F970
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144049.roa
Signing time: Mon 25 May 2026 01:38:17 +0000
ROA not before: Mon 25 May 2026 01:33:17 +0000
ROA not after: Mon 24 May 2027 01:38:17 +0000
asID: 144049
IP address blocks: 240a:a577::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:f1:4b:4d:5a:2c:5f:0f:47:c6:94:26:14:d9:62:e4:0a:37:f9:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:17 2026 GMT
Not After : May 24 01:38:17 2027 GMT
Subject: CN=679D5367E8BCA51120E401C623EC83B7BE2940B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c6:bf:ff:f4:f6:07:9c:c0:fa:ea:3f:3f:32:
ad:c6:75:a1:00:00:4d:19:5e:e9:3a:65:05:ba:c8:
07:f9:52:8c:71:6d:b5:e6:12:5d:8d:76:ca:06:62:
a7:a2:87:e2:21:ab:ad:fd:86:2e:2a:63:55:71:02:
ef:fb:01:2c:7c:48:b2:b2:22:88:04:e8:22:61:27:
a8:2d:74:8f:9b:2c:74:da:85:3f:68:a2:32:e9:43:
84:2b:55:e4:63:3e:87:77:4d:ba:59:c3:e7:d0:e2:
83:9b:12:7b:61:ed:88:2a:7c:04:8f:8c:6a:e0:2f:
9c:35:06:1c:26:b5:96:b9:13:a2:52:cb:d8:ad:01:
90:6d:67:38:5c:23:d7:74:09:c2:89:1f:1e:f7:28:
77:4a:bc:67:b4:7c:d9:d2:1f:d9:04:de:4c:5b:c9:
e6:16:95:83:99:d7:33:b9:28:8f:75:12:5b:90:3c:
45:e3:16:cf:3c:28:1e:a7:2d:0c:e3:2c:ed:c6:e3:
22:98:d8:37:fb:33:60:4f:45:c7:84:11:af:1f:2e:
81:c4:d4:e6:ea:fa:bc:49:d8:8d:e4:9a:6b:59:80:
db:96:b0:bc:41:58:fc:cc:78:c6:f4:e0:1b:df:71:
50:e2:0e:94:e6:17:62:06:fa:05:42:0d:e4:13:ae:
a7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:9D:53:67:E8:BC:A5:11:20:E4:01:C6:23:EC:83:B7:BE:29:40:B2
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144049.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a577::/32
Signature Algorithm: sha256WithRSAEncryption
2b:99:16:c7:6f:ff:94:78:7d:fd:17:1c:50:ab:a8:97:7b:0f:
e9:e1:31:21:6b:1a:69:bf:79:f2:cd:bc:23:ed:06:8f:74:97:
93:f6:b0:b2:76:b1:2e:1c:5c:3e:f7:b3:aa:a7:3b:3d:6e:5d:
9e:07:48:8b:7d:9f:cf:ff:72:64:d5:fc:e9:d4:ab:98:64:aa:
01:ee:4a:d1:99:ca:85:1a:60:13:eb:76:16:40:dd:6b:e7:29:
86:ca:4e:7f:76:15:50:34:45:8c:be:6d:35:63:b1:19:42:48:
0c:4b:bc:4a:e8:04:f5:63:7a:9b:3d:62:54:4f:2d:75:86:23:
11:6f:90:31:d7:4c:8d:f6:7a:a4:a3:05:9b:4a:fe:68:c4:f1:
47:e2:29:04:55:c2:1e:fb:4f:ee:d5:28:c7:41:73:4a:dd:ca:
06:d7:a8:dd:60:ee:96:00:63:18:65:05:50:99:f7:09:46:f3:
f9:70:48:81:2d:11:de:22:94:74:f8:87:52:44:c8:2e:c6:37:
54:e5:88:d1:e8:09:60:5d:71:25:ac:2f:2c:4a:64:52:1c:24:
3d:5f:d1:3b:25:ca:01:ed:43:fa:a2:3e:7d:bf:4f:9f:fb:bc:
2b:38:eb:2d:0a:7d:0b:27:9a:62:50:e5:8e:f9:d2:e5:08:85:
b2:8a:c7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:02 2026 by rpki-client