Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144088.roa
File: AS144088.roa (raw, json)
Hash identifier: QiheLkTRhf1722NfVltm2JWYq3+1DodiwwiAbKWJ/GI=
Subject key identifier: DF:AC:50:C3:6E:69:30:84:C9:12:84:DD:77:55:41:96:4A:73:02:C4
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5FB9EF734210A558E93526DC70B67F51566A4CFD
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144088.roa
Signing time: Tue 26 May 2026 02:34:52 +0000
ROA not before: Tue 26 May 2026 02:29:52 +0000
ROA not after: Tue 25 May 2027 02:34:52 +0000
asID: 144088
IP address blocks: 240a:a59e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:b9:ef:73:42:10:a5:58:e9:35:26:dc:70:b6:7f:51:56:6a:4c:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:29:52 2026 GMT
Not After : May 25 02:34:52 2027 GMT
Subject: CN=DFAC50C36E693084C91284DD775541964A7302C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c5:9f:c5:63:c5:18:7a:13:49:dc:43:d4:8e:
0e:97:ee:30:4a:0f:f0:4b:e0:ff:35:e3:fd:f8:e1:
6a:f5:dd:82:a1:6e:be:ed:a9:91:b0:22:f3:76:c5:
d1:3b:92:6b:34:51:93:1a:29:70:5c:ee:11:62:13:
31:61:d9:cb:8b:e1:05:04:93:0a:2b:ff:c6:9d:17:
47:db:10:06:f3:ae:11:f4:c4:b2:e0:2a:ab:cd:68:
ee:3e:23:5f:39:43:14:a9:96:ac:2f:1f:5e:5a:74:
a6:54:e6:91:02:ad:0a:e7:1d:11:da:eb:99:3a:95:
9d:c4:50:eb:a6:8c:7a:a4:68:41:94:95:17:36:57:
19:b1:63:bd:ad:37:ee:fb:fb:02:ba:f4:4a:34:9b:
f9:4c:42:c4:a5:67:8e:f2:a4:a8:1c:a8:9e:8a:c8:
e4:63:a1:50:90:39:9f:e5:dd:44:58:f8:4f:f1:6a:
82:4d:7b:38:57:85:5a:39:ed:e6:75:7d:17:0b:b9:
5a:d5:0d:d8:77:04:20:1e:ce:0b:e4:b6:01:b4:a7:
e2:ec:82:5c:b3:e6:2b:89:66:19:df:00:dd:ee:60:
c4:58:0e:ef:2d:30:4c:55:16:8f:62:b7:ec:e1:c4:
7a:b0:af:28:52:1c:30:1c:9a:d7:3f:dc:19:cc:39:
35:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:AC:50:C3:6E:69:30:84:C9:12:84:DD:77:55:41:96:4A:73:02:C4
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144088.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a59e::/32
Signature Algorithm: sha256WithRSAEncryption
5b:c1:0f:68:cd:d0:c9:2c:68:96:34:23:84:7d:35:9e:97:99:
45:e5:79:50:7b:cf:4f:e1:ca:1b:ba:27:7f:5f:13:98:a3:cd:
a2:18:56:fb:6b:f8:3d:cd:cf:72:9f:95:5c:dd:24:28:68:c3:
20:15:05:11:d9:7f:b6:1c:f4:d0:ad:aa:2a:b2:20:e6:1d:5f:
26:8c:87:bc:b6:6c:1a:6a:1b:8a:da:1b:4e:79:77:0d:6d:f9:
4d:9f:28:d9:cb:51:5b:fa:53:cd:50:53:b6:54:82:d6:3d:6a:
b4:19:9b:e0:2d:f1:cb:89:c1:f4:ee:bb:d2:47:a9:9f:b3:ef:
56:5a:04:a0:7b:84:df:9f:9d:97:a2:df:6b:8c:99:6c:c7:89:
60:f0:1e:93:72:a9:d5:c9:87:c6:a5:d0:05:5a:05:f2:a8:ae:
cb:d7:b6:b1:44:ac:aa:bb:2b:b8:05:7f:10:8d:a8:0f:55:ee:
52:00:7c:16:90:88:c4:70:ca:69:02:9b:4b:af:94:7b:7f:41:
0c:3f:70:3b:2c:82:f3:51:f7:c8:04:56:9e:bc:34:59:53:8e:
1a:9d:87:cb:19:cb:cc:71:ea:34:c2:ae:91:3a:45:61:7c:0d:
3b:12:20:2e:4a:65:e4:1c:a6:2e:c5:49:27:1b:d7:ff:6c:c7:
6d:a4:5e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:01 2026 by rpki-client