Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144073.roa
File: AS144073.roa (raw, json)
Hash identifier: suXCSpsNUdWXBKYb6TjymeqYrkuY4sTYlKb7m8itn0w=
Subject key identifier: F4:C7:8D:A9:BD:87:EC:27:C0:34:4A:E1:E9:8F:B7:7F:BC:02:6A:D5
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2CA8708A594F13DE18A1826F03653126A70578AE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144073.roa
Signing time: Mon 25 May 2026 01:38:06 +0000
ROA not before: Mon 25 May 2026 01:33:06 +0000
ROA not after: Mon 24 May 2027 01:38:06 +0000
asID: 144073
IP address blocks: 240a:a58f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:a8:70:8a:59:4f:13:de:18:a1:82:6f:03:65:31:26:a7:05:78:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:06 2026 GMT
Not After : May 24 01:38:06 2027 GMT
Subject: CN=F4C78DA9BD87EC27C0344AE1E98FB77FBC026AD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d4:b5:d2:66:f6:d1:df:7e:cd:3f:b8:3e:06:
2b:b8:88:00:0c:bb:ef:8e:f6:77:f0:c5:9a:02:44:
40:23:8c:7c:3c:a7:b2:45:32:ba:f1:8f:24:77:c0:
7d:9b:bd:c8:54:ca:52:68:8a:e2:5b:db:5b:01:43:
60:bc:99:ee:0c:2a:81:d3:b4:09:a7:d2:49:df:f6:
b4:cc:64:0d:5e:9f:8c:a3:88:c4:b7:c8:d7:c7:10:
b8:91:3c:84:0f:58:d1:2f:81:34:07:f8:06:8f:14:
34:04:1b:ba:7f:b9:3d:d2:20:74:d1:9b:17:6a:16:
de:eb:96:29:7d:2f:fe:75:ed:71:50:12:6e:dd:58:
ce:ee:2d:14:2f:35:6d:dd:e8:86:07:0d:78:e4:15:
bd:e3:9e:e2:e6:cb:cc:33:06:0e:16:7b:2a:3a:3e:
7a:0e:2a:a1:40:9f:17:59:9d:81:90:41:30:e3:76:
31:84:0a:01:4f:ce:fd:37:52:20:3b:71:51:61:09:
cf:9e:77:63:9c:c6:ef:03:40:3c:d1:7b:d5:01:c1:
8d:b2:f7:02:dd:42:37:76:b4:0e:a7:ce:32:0f:39:
1c:67:4e:7a:75:fa:b0:b9:97:fb:2a:b3:61:02:c0:
ae:ea:4c:6e:0a:50:ca:2e:bc:a1:52:11:16:91:cb:
3f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C7:8D:A9:BD:87:EC:27:C0:34:4A:E1:E9:8F:B7:7F:BC:02:6A:D5
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144073.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a58f::/32
Signature Algorithm: sha256WithRSAEncryption
42:7f:54:e9:be:7f:5c:44:3c:2f:27:73:1b:dd:29:46:f0:08:
e7:7f:86:a6:8f:df:bf:cf:ff:c7:11:d4:22:ea:ab:d6:ad:da:
73:88:f4:bd:21:42:cd:01:40:5f:e0:e9:72:f2:76:80:b0:34:
c4:d6:e1:c2:05:f1:f6:0b:b8:1c:4a:9e:64:4b:a7:27:fc:0f:
5b:0e:4a:de:db:e5:ae:85:b1:5a:ea:63:2f:af:a8:52:67:ef:
9b:d7:0b:0c:6c:81:0d:e9:e4:31:c9:cf:58:f1:ac:2a:b4:7f:
78:bb:7c:3c:d9:9e:b7:7a:f7:ce:15:bc:fe:9a:56:94:d9:fa:
84:2d:5d:1c:d7:d5:c6:82:9f:ca:98:1a:44:23:15:86:fc:04:
d3:f7:35:7d:4d:62:38:00:a9:38:32:fc:0d:b3:4a:57:d6:e3:
73:d6:eb:25:b5:d3:9d:4d:ed:7d:38:60:20:61:28:22:1a:3f:
16:1e:1b:90:ab:e4:b4:28:d6:09:ba:37:85:39:9e:9f:bb:75:
a3:93:7b:c7:b1:e2:06:12:33:9b:92:48:86:31:42:ce:70:b3:
f1:dd:26:90:02:e3:c8:c7:f2:8b:55:d3:64:c9:0a:01:31:98:
59:a9:22:e1:d2:de:e3:b5:c9:4c:2c:05:bf:6e:04:50:5c:ed:
33:95:ce:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:24:36 2026 by rpki-client