Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144060.roa
File: AS144060.roa (raw, json)
Hash identifier: BtLw+Y1+zvs+4ULerYT5T4p/7wYS2NgxGdKqt3xzoZw=
Subject key identifier: EE:41:3E:75:BE:7B:C8:B9:64:C4:20:29:45:50:47:E3:EF:AC:99:6D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 52E9355F4618D28341440DD8AF65A177F8A264E4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144060.roa
Signing time: Fri 22 May 2026 06:05:14 +0000
ROA not before: Fri 22 May 2026 06:00:14 +0000
ROA not after: Fri 21 May 2027 06:05:14 +0000
asID: 144060
IP address blocks: 240a:a582::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:e9:35:5f:46:18:d2:83:41:44:0d:d8:af:65:a1:77:f8:a2:64:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:14 2026 GMT
Not After : May 21 06:05:14 2027 GMT
Subject: CN=EE413E75BE7BC8B964C42029455047E3EFAC996D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b9:88:68:8b:8e:c8:83:f5:f8:0a:d3:f6:a5:
b9:ac:3e:55:33:8c:8e:10:bd:bf:9c:03:d3:d5:83:
af:00:02:7a:ba:02:2e:c2:45:b2:00:1c:88:0d:82:
28:f6:2f:6b:ea:67:b4:4e:71:b4:70:3a:78:8b:fb:
a1:ff:cd:dd:9f:69:6c:cf:ce:9a:ba:3b:e8:34:d8:
de:5a:6e:90:70:80:9b:64:8e:c1:ff:eb:92:f6:57:
c7:d9:cf:23:83:bf:9d:48:22:50:6e:22:8f:fc:2c:
5e:4c:67:1e:41:01:a3:e3:c6:02:7b:01:80:d8:c8:
26:73:a3:ca:70:fc:36:73:f7:0e:21:c1:18:22:2d:
21:1c:77:be:2b:ec:34:ff:6c:26:ad:7d:e4:9b:1e:
e6:11:e8:c7:77:a6:cc:3b:73:a1:5f:d4:ba:6e:a1:
eb:31:ed:75:17:d4:aa:61:13:0b:85:4c:6a:e0:5e:
85:23:54:84:e1:ba:28:60:46:39:e3:48:1c:fe:5e:
aa:18:6c:07:68:7f:39:05:b8:07:92:91:35:00:fa:
cd:9b:26:59:59:d0:4a:64:3f:7f:77:65:03:fb:b5:
af:d2:1f:fe:c4:7f:4c:fa:73:5d:12:fc:a3:4e:a6:
8a:f5:9f:78:fa:b9:d8:5c:e9:31:b3:b1:e7:00:54:
83:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:41:3E:75:BE:7B:C8:B9:64:C4:20:29:45:50:47:E3:EF:AC:99:6D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144060.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a582::/32
Signature Algorithm: sha256WithRSAEncryption
44:63:c5:19:82:30:63:04:05:76:be:0e:82:d7:53:ec:da:16:
27:c7:64:db:d3:c8:23:4d:a7:57:55:60:bf:17:2e:8b:18:a1:
5e:f8:f8:cd:09:c9:83:a3:3d:32:9a:f8:13:05:c7:f0:a2:76:
9d:32:9b:54:29:0d:6b:4b:61:93:1b:6a:ac:4c:60:74:24:7a:
d9:02:76:24:32:d8:d3:f0:9a:44:5a:cf:2a:66:d8:d2:c5:53:
1c:d9:b9:f7:10:5c:21:4f:40:48:a7:19:2d:17:0c:a8:6b:2d:
60:6f:80:3a:f4:fe:84:a7:b3:db:5a:d4:8f:02:5b:10:58:b5:
f3:55:45:88:d1:39:92:87:94:97:ab:62:99:b9:9a:07:49:da:
83:87:3a:0a:45:89:b3:b7:b1:ad:86:fe:a8:40:fd:3c:ee:51:
4a:75:9b:22:61:a1:12:df:0f:13:c2:62:28:c4:8d:34:7d:69:
5c:65:da:1a:2b:74:d6:89:9d:d2:05:36:7f:96:6e:c2:76:9d:
87:67:27:08:23:4b:78:82:8e:ed:cd:00:ad:ff:b4:ff:cc:28:
05:7c:d3:95:9d:d2:80:ed:75:78:bd:6c:b7:d8:3b:85:a1:a6:
cf:3d:08:e6:4c:e2:fd:67:cb:a3:3e:ea:48:6a:54:62:19:35:
2f:98:de:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:22 2026 by rpki-client