Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144066.roa
File: AS144066.roa (raw, json)
Hash identifier: it9QASC5iTAulZuBUsS1SUKp0yphvM1fYr6+IRp7KjQ=
Subject key identifier: 12:F9:C4:E1:2E:F2:9D:CE:DA:5A:A0:B6:64:62:5B:3B:BD:7B:4A:D2
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 323757553A93EF23A0BE41102FDC655F18F3711F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144066.roa
Signing time: Tue 26 May 2026 06:12:56 +0000
ROA not before: Tue 26 May 2026 06:07:56 +0000
ROA not after: Tue 25 May 2027 06:12:56 +0000
asID: 144066
IP address blocks: 240a:a588::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:37:57:55:3a:93:ef:23:a0:be:41:10:2f:dc:65:5f:18:f3:71:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:07:56 2026 GMT
Not After : May 25 06:12:56 2027 GMT
Subject: CN=12F9C4E12EF29DCEDA5AA0B664625B3BBD7B4AD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c7:4c:55:bf:af:22:a6:90:83:79:37:69:c8:
c8:9c:ff:2c:8e:03:05:b6:f9:ca:08:70:45:13:73:
01:7a:ab:82:44:e9:0b:d2:e9:e9:ee:98:43:96:92:
ee:54:a6:3f:38:f5:07:8b:b4:28:13:75:fb:58:4e:
5c:7c:9e:93:45:10:10:fb:f6:ad:cd:9e:70:e2:77:
e1:e1:09:a2:b1:97:c8:67:f8:74:07:6c:72:aa:97:
46:48:96:b9:12:6d:17:e7:1c:78:0d:d7:20:73:e0:
93:ad:3c:f0:ad:b1:7c:e0:5a:26:30:19:10:7b:ae:
c2:28:e4:b5:d8:a6:00:7c:ef:7e:5d:ce:8a:05:b9:
cb:be:02:2e:f1:c5:e2:17:35:f8:84:f1:56:ce:58:
9a:c7:64:ed:b7:49:06:2b:d9:9a:97:c4:c9:16:77:
84:52:04:a9:c0:da:14:4c:f7:f8:29:47:bf:fd:c6:
41:d9:36:cf:d8:d6:76:f3:55:44:a6:2a:1e:19:62:
6b:c3:50:4a:d7:70:79:13:fe:dd:62:73:40:09:49:
c3:29:98:71:b9:bb:24:48:ff:cc:2e:b7:4d:08:e7:
ab:8f:8d:3b:51:9d:1d:59:b1:8c:d3:32:b1:7b:51:
35:50:8d:50:dd:27:1f:55:c2:35:8c:3e:6e:e7:86:
58:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F9:C4:E1:2E:F2:9D:CE:DA:5A:A0:B6:64:62:5B:3B:BD:7B:4A:D2
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144066.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a588::/32
Signature Algorithm: sha256WithRSAEncryption
4b:a6:93:b9:ee:9b:0f:e3:55:eb:9e:e4:33:74:11:8e:60:4f:
07:e8:02:4e:41:38:c4:b1:fc:a9:a7:cd:e9:c8:7a:6d:1f:1c:
54:21:97:8c:00:4d:1b:cf:42:3c:c8:ed:07:58:c6:a9:66:2c:
4e:f7:ec:96:ed:fb:09:2c:92:f9:a6:54:c4:b0:4a:9c:66:1c:
b9:ed:b3:f9:4d:17:f8:86:62:c3:bd:cd:c5:60:66:bb:82:2d:
4d:0f:d2:45:4b:eb:ca:98:0f:10:69:60:dd:35:12:a5:22:3e:
b1:1b:51:63:61:73:e9:70:a4:84:b3:2e:28:78:35:67:af:6f:
94:1b:2b:13:0f:49:11:48:b2:50:0b:ab:98:42:be:ef:39:be:
69:1b:27:23:fb:df:c3:b3:86:1d:fa:a7:46:33:9a:c6:17:ab:
92:02:5a:fa:5c:e5:b4:8e:41:c2:f0:21:8a:af:e3:44:92:e8:
63:60:a0:3c:90:04:9b:43:ed:8e:18:dc:73:7a:2b:18:fe:91:
22:bd:07:ef:1e:ec:a5:13:5e:0c:5e:cd:8a:7b:74:12:34:7f:
bf:ca:38:48:2f:7b:7c:a2:a9:10:25:d5:a5:93:ac:1d:35:bb:
78:54:e9:5a:4a:66:97:2a:34:6b:5c:a8:de:32:d8:33:4e:df:
38:51:15:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:18 2026 by rpki-client