Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144055.roa
File: AS144055.roa (raw, json)
Hash identifier: UYh3K5z5lrfEamQ91ZhUVlrLTF/dt11zc/jMW245tXw=
Subject key identifier: A5:B3:1A:F1:2B:58:7C:2B:27:04:06:D3:EB:F8:49:23:29:4B:2C:F1
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 703CC4BEA9C448D72A6077625021DB3777BB10E5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144055.roa
Signing time: Mon 25 May 2026 01:38:05 +0000
ROA not before: Mon 25 May 2026 01:33:05 +0000
ROA not after: Mon 24 May 2027 01:38:05 +0000
asID: 144055
IP address blocks: 240a:a57d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:3c:c4:be:a9:c4:48:d7:2a:60:77:62:50:21:db:37:77:bb:10:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:05 2026 GMT
Not After : May 24 01:38:05 2027 GMT
Subject: CN=A5B31AF12B587C2B270406D3EBF84923294B2CF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:05:4e:af:94:31:5f:b5:cf:cf:34:ee:c9:fd:
15:93:f9:7e:04:3c:6c:6e:26:5e:00:ab:2b:99:84:
fc:07:57:65:99:09:27:f7:d4:4f:ec:9c:73:23:0a:
61:72:ac:ec:ab:08:33:d8:9d:c2:26:da:9e:1e:84:
99:31:66:db:95:be:23:c3:df:cf:91:46:55:9d:55:
38:39:10:95:d0:a1:fc:77:0b:92:44:8a:16:e8:5c:
84:bd:7a:e9:f0:41:a7:bf:cd:25:56:ae:22:53:71:
04:6e:09:15:18:68:bf:2c:07:21:56:2a:54:42:58:
08:7b:0e:65:97:9a:1e:5b:fd:ec:aa:d1:81:68:fb:
79:26:87:a0:97:53:b2:24:bb:4b:7e:62:55:61:e4:
f5:3e:c9:15:6a:b1:c0:16:44:97:21:1d:1c:b5:cf:
8f:7d:d0:69:a1:28:0c:0d:1b:f2:46:bb:7d:f7:03:
41:57:bf:2b:02:e5:47:33:d2:9a:4b:3d:bc:7e:85:
c8:9e:ff:40:14:2d:33:1f:8e:4a:2a:87:e8:e8:bc:
33:93:72:e5:dc:70:b5:22:04:43:d0:67:06:65:8a:
61:5b:44:ec:52:1d:79:8b:fc:53:43:23:19:7e:74:
5f:4a:e4:3a:71:72:d2:28:7d:0c:11:cf:5f:20:e0:
f0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:B3:1A:F1:2B:58:7C:2B:27:04:06:D3:EB:F8:49:23:29:4B:2C:F1
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144055.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a57d::/32
Signature Algorithm: sha256WithRSAEncryption
88:4e:53:42:bc:c1:34:f4:35:2f:ad:53:af:c4:98:a3:51:9a:
ce:5f:fe:cf:1a:9a:dc:b0:80:90:61:7f:18:e0:46:71:22:44:
11:90:01:59:d3:bc:58:07:99:85:0e:8e:0e:b6:1f:7a:63:71:
3f:24:05:e4:9a:e4:24:56:55:c4:97:bf:ad:5c:1a:63:04:36:
a3:e9:42:4c:4a:72:b5:2e:e3:31:0b:81:4b:a5:8d:8b:ce:6a:
ce:50:c1:71:73:d4:d0:f6:63:cd:d9:fa:51:fc:9a:cf:e9:2c:
b4:9f:ab:32:e1:36:53:dd:26:7c:13:35:4e:56:66:57:9b:b4:
e1:bb:56:f2:77:a8:e2:a1:79:1c:cb:dc:ec:2f:67:89:98:37:
21:e8:96:a8:74:84:32:b4:bf:33:2c:c1:f9:aa:f9:5f:d5:d3:
7d:0e:4d:54:ce:66:80:8d:ec:ea:8a:a2:d9:74:61:63:ec:85:
c8:e3:9c:46:85:80:d7:c9:66:c2:e3:04:e7:5b:c6:73:43:37:
ba:63:ec:86:3c:10:0f:48:16:06:0c:11:eb:3a:6a:be:d2:19:
dd:fa:b8:0e:0f:0e:bf:8d:bf:76:75:9b:05:70:d3:e4:8b:41:
fb:a9:b5:9a:77:09:54:79:84:bf:e2:23:c2:54:81:e1:58:87:
1d:61:36:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:59 2026 by rpki-client