Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144068.roa
File: AS144068.roa (raw, json)
Hash identifier: 1wEe2NGP1xpCbVCdWUtZ5AWFZd8ijSmz2j4kul5AcbE=
Subject key identifier: 56:9A:09:96:6E:6D:EB:49:A2:FF:B2:3F:A5:4B:C9:1A:89:4D:44:C8
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 30941BBCBC5C977A0FCDC0C1BBA0E116D566CE1F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144068.roa
Signing time: Mon 25 May 2026 01:20:36 +0000
ROA not before: Mon 25 May 2026 01:15:36 +0000
ROA not after: Mon 24 May 2027 01:20:36 +0000
asID: 144068
IP address blocks: 240a:a58a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:94:1b:bc:bc:5c:97:7a:0f:cd:c0:c1:bb:a0:e1:16:d5:66:ce:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:36 2026 GMT
Not After : May 24 01:20:36 2027 GMT
Subject: CN=569A09966E6DEB49A2FFB23FA54BC91A894D44C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ae:8f:96:ba:d7:bb:a7:0a:0c:78:d2:05:0d:
37:cc:8e:48:fa:a3:ce:1e:74:27:c3:aa:0a:69:d3:
8b:14:7c:82:45:59:0d:2c:32:f3:36:27:ed:e6:5a:
6d:32:dd:3c:81:c2:1b:0d:65:f2:af:89:4a:43:53:
44:99:06:83:d5:29:bd:dc:b2:e5:42:92:48:58:04:
d5:29:77:f9:8a:06:7c:fd:d1:fa:f1:9e:39:66:79:
94:66:b1:88:03:11:6a:61:93:d6:c4:29:5c:17:0e:
4c:7f:69:44:a1:ff:8f:38:48:59:07:88:43:80:42:
04:03:0e:8d:e3:46:da:d3:36:66:f9:f7:91:17:77:
68:d2:32:74:89:bf:03:da:f8:9c:4a:cb:64:c0:ed:
18:f9:13:43:6d:6d:bd:cc:28:63:b2:98:f3:0e:49:
ce:b8:a4:00:3f:e9:9a:80:7e:87:e8:8b:2a:ed:9c:
82:a8:e3:02:d6:29:cf:04:76:85:d3:7a:29:04:0f:
df:39:44:96:55:25:b2:bc:6c:d8:d4:c6:19:31:24:
e0:80:e7:5d:b3:b6:e5:f4:67:27:78:ad:71:31:ce:
82:69:1c:2c:6b:fb:fc:16:3f:21:30:7e:32:1f:8a:
7f:87:20:1a:a8:31:b9:bf:76:ae:97:1e:f5:1d:8a:
91:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:9A:09:96:6E:6D:EB:49:A2:FF:B2:3F:A5:4B:C9:1A:89:4D:44:C8
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144068.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a58a::/32
Signature Algorithm: sha256WithRSAEncryption
42:13:1e:a7:d5:61:9f:fe:79:3f:22:7b:1d:2a:7f:68:33:ef:
d6:45:10:6d:d0:20:a6:03:f8:05:12:e8:ae:db:98:cb:5f:67:
fc:fb:ce:41:74:a7:dc:36:10:46:17:0c:dd:3d:d5:b5:32:49:
1a:30:e7:07:75:19:8b:46:f0:87:1b:7a:2a:9e:01:40:cb:92:
2f:b1:bd:fc:35:6a:b3:2e:bf:16:99:5a:d1:40:93:ad:59:3a:
f9:57:0b:c9:96:1a:6d:fc:39:3c:60:8d:ee:11:7f:58:aa:b3:
4c:d7:9f:bf:38:fe:a7:d9:7b:5a:87:3a:9b:b2:a6:95:be:ee:
95:cc:cf:4f:85:b0:9e:34:f7:40:b4:7c:b2:88:69:72:44:23:
1d:b2:96:01:6e:69:a9:30:27:7b:1c:42:f9:43:3c:4d:1c:e3:
1b:bb:7d:ee:65:32:26:c8:ce:60:41:d4:4b:50:23:f4:61:45:
ab:da:d7:0a:fc:a1:f1:cb:d6:47:31:ec:83:9a:4e:ab:ce:a9:
c2:5c:d2:51:1e:62:38:d4:c4:94:40:7b:60:95:f3:e7:22:55:
fd:65:23:b2:64:3d:28:aa:15:d5:f9:8e:4e:bd:59:62:84:70:
31:f1:25:8f:00:8c:18:b9:98:5d:fe:af:7c:e8:c3:7b:e7:a8:
e8:26:7a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:46 2026 by rpki-client