Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144082.roa
File: AS144082.roa (raw, json)
Hash identifier: yYZwsNOZ/BmSuzqSIY6XTuimPAMc3kVs0G+lpnNg3zo=
Subject key identifier: 73:33:00:65:FE:24:9A:B5:B4:51:00:69:64:FD:05:47:17:B4:C1:2D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2203894C1D63872A73FF2204421853CEB740FB58
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144082.roa
Signing time: Mon 25 May 2026 02:22:35 +0000
ROA not before: Mon 25 May 2026 02:17:35 +0000
ROA not after: Mon 24 May 2027 02:22:35 +0000
asID: 144082
IP address blocks: 240a:a598::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:03:89:4c:1d:63:87:2a:73:ff:22:04:42:18:53:ce:b7:40:fb:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:35 2026 GMT
Not After : May 24 02:22:35 2027 GMT
Subject: CN=73330065FE249AB5B451006964FD054717B4C12D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b9:8f:a3:ec:12:57:a7:7a:99:6d:53:2b:fc:
10:63:f3:e2:ef:25:2d:51:5a:63:97:8b:c4:ef:33:
42:e6:46:e3:b1:01:dc:5d:6a:96:b9:df:22:82:b7:
35:01:e9:aa:13:8b:80:e4:c2:f1:3c:bb:e2:39:41:
2d:e3:41:e3:b1:5e:a5:a6:04:23:ea:91:bc:7f:11:
7a:2e:ec:52:18:ab:ce:9b:47:9c:bc:7f:65:42:72:
7f:af:e4:51:08:24:e1:02:94:df:84:c9:7f:17:53:
ee:33:c3:d6:08:c4:c1:cb:9a:22:2e:1e:4c:3f:c3:
66:a7:a1:00:b7:62:e3:62:22:64:93:ce:29:f4:92:
40:3f:07:84:f3:4c:68:d0:74:e5:71:4e:b1:de:e3:
dd:b8:92:cd:cf:c9:9d:e4:aa:50:d7:68:98:dd:d4:
3a:5d:c1:12:81:24:44:3a:08:c8:bf:70:e0:4f:e4:
0f:e2:c0:11:ae:3f:97:38:ae:02:2c:ae:b5:b7:a9:
52:ca:0c:f3:e2:84:86:b7:e3:9e:5a:3f:3e:95:f3:
6e:df:be:19:73:be:1a:0c:90:80:9f:af:7d:8b:dc:
e4:f7:e2:9e:ad:16:a5:6c:ab:30:84:be:6a:a6:1a:
d2:1e:db:66:d4:8a:e0:11:c0:f9:c4:3b:b0:39:2f:
23:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:33:00:65:FE:24:9A:B5:B4:51:00:69:64:FD:05:47:17:B4:C1:2D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144082.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a598::/32
Signature Algorithm: sha256WithRSAEncryption
2f:2d:2f:0e:c6:00:d1:95:eb:c4:1d:79:37:52:28:a3:d6:fa:
b7:ea:c3:00:80:bf:98:3e:a9:04:7e:19:c9:5d:41:f0:2a:b7:
d5:87:28:3a:cb:63:dd:2b:79:3b:a5:78:5a:f3:3b:f7:85:fc:
28:02:22:a9:7f:3d:fd:6f:4a:a9:36:fb:5f:95:d5:73:67:7a:
28:ba:7d:fa:63:55:b2:f5:68:b3:b7:5b:ec:c4:44:9e:17:40:
e2:66:68:ec:0b:4e:d9:57:04:3b:49:15:3a:d9:fa:42:85:2c:
fa:a5:18:a0:15:62:87:5b:8a:aa:14:85:2f:7e:c2:89:ed:fd:
ac:8c:ed:e6:a7:5f:20:50:2c:3f:6e:bf:e4:df:ea:9b:30:f9:
64:d6:ad:6a:91:f9:2a:7b:cd:aa:71:f8:12:fc:52:51:e3:9c:
84:1c:f8:78:b1:ae:c1:29:ee:dd:04:3a:0b:18:40:f2:e9:2d:
4f:3b:0e:1e:bf:ce:98:41:73:db:ee:68:a6:ca:8d:4a:2a:1f:
0e:55:f2:23:f9:97:00:92:eb:ba:03:17:04:61:97:22:ce:13:
57:6d:70:77:f0:0c:87:5f:89:55:50:aa:02:60:f1:55:c1:fb:
d6:f3:c4:90:47:4a:c1:72:8f:ce:07:4d:79:b1:d0:8a:33:d0:
fa:38:40:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:34 2026 by rpki-client