Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144065.roa
File: AS144065.roa (raw, json)
Hash identifier: Ejbv5bR23H08ZoOVl8zZXCwqQp5SK8+pHwP1EtrNYZs=
Subject key identifier: C9:62:06:C6:D4:F2:BF:AF:FB:2E:A7:0F:1A:3A:B5:A3:77:E3:8B:1C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 27BACC1D988A6B91D68001BEBC8F577F36B01999
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144065.roa
Signing time: Mon 25 May 2026 01:38:32 +0000
ROA not before: Mon 25 May 2026 01:33:32 +0000
ROA not after: Mon 24 May 2027 01:38:32 +0000
asID: 144065
IP address blocks: 240a:a587::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:ba:cc:1d:98:8a:6b:91:d6:80:01:be:bc:8f:57:7f:36:b0:19:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:32 2026 GMT
Not After : May 24 01:38:32 2027 GMT
Subject: CN=C96206C6D4F2BFAFFB2EA70F1A3AB5A377E38B1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:85:8e:c3:16:58:d7:a9:3c:8a:47:25:e9:99:
b4:e6:71:ea:26:04:3b:f6:c3:48:6e:f0:fa:69:a0:
cf:b9:5b:fd:f8:e2:f1:6f:6d:84:51:d4:fa:96:99:
1f:63:5d:3c:df:36:09:f1:3c:01:18:58:e6:eb:50:
e8:9c:2d:75:87:d2:0b:0d:06:f9:64:07:f6:d5:7b:
8f:24:10:c8:88:d3:91:48:e3:dc:2c:71:e9:37:52:
2d:9a:17:d5:23:a1:35:6a:d1:97:77:b9:c1:88:77:
a3:89:45:84:4b:6b:c1:d1:83:1a:83:44:b4:3a:68:
5b:f5:45:7e:50:fb:24:12:96:cd:f5:aa:a5:87:51:
39:98:97:19:2a:3e:df:38:ab:c4:4d:63:a4:e7:40:
0e:9f:b5:5d:39:d2:0b:a9:3e:03:4c:f2:73:0e:3c:
dd:84:59:7b:88:28:c0:1e:35:cb:40:a2:55:7b:6c:
7b:62:f7:11:21:43:22:98:a8:a4:cf:32:3d:b6:ca:
92:9b:3b:88:79:bd:d6:b7:c8:cb:51:a8:17:97:bd:
cb:49:23:75:4b:56:a1:55:d6:02:cf:2a:81:93:59:
c4:4e:2f:c4:eb:76:ee:6d:07:89:b4:05:dd:6c:e4:
22:38:12:82:67:5d:f5:0f:58:2f:fa:07:4a:ef:19:
8e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:62:06:C6:D4:F2:BF:AF:FB:2E:A7:0F:1A:3A:B5:A3:77:E3:8B:1C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144065.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a587::/32
Signature Algorithm: sha256WithRSAEncryption
63:ca:cc:56:03:88:19:8a:af:01:3f:1f:e9:0b:68:04:0a:48:
8a:c7:6c:1b:0b:3b:b8:dd:ff:09:0d:e3:7d:9b:42:70:d6:cb:
cb:d6:94:1d:c5:3a:92:52:60:4d:4b:9e:aa:79:cc:23:68:a4:
53:4e:9a:7a:f0:fe:fd:93:23:45:fc:40:c8:43:31:d6:43:6a:
77:30:a5:4f:58:a0:75:02:68:34:d6:1e:2f:97:6a:9f:6c:eb:
3b:b3:c0:35:ac:c3:24:d9:c6:3e:ca:5c:7d:66:d5:da:92:cd:
20:7d:1e:f8:9b:d7:41:bd:dc:e3:a1:08:bd:02:47:7f:85:9b:
d5:55:39:76:d9:63:99:54:62:c8:d7:da:8d:83:a1:dc:e3:14:
17:e2:23:66:95:3e:93:21:37:24:35:6e:ba:4e:c9:f4:07:0a:
97:69:be:55:ca:0d:45:2e:8e:96:64:1b:39:6f:9e:2f:ef:2b:
65:32:28:58:1a:73:2e:a5:15:9c:c3:4d:9a:8a:f0:49:d7:7a:
96:f6:b3:60:63:a7:fb:fa:1f:28:7e:38:2b:7d:47:41:8a:08:
af:26:ab:52:e1:6b:95:9e:2b:23:1a:6b:dd:c1:2d:ff:cf:bf:
58:7b:69:db:83:6f:9e:e3:0f:8e:4f:25:0d:d6:77:7b:67:68:
61:93:dc:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:39 2026 by rpki-client