Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144093.roa
File: AS144093.roa (raw, json)
Hash identifier: /57Y3+RN3Ytz7hCr4QdWsEKdELLFYFzzr0ZGujKOfcU=
Subject key identifier: FF:04:6A:51:45:FE:44:5D:31:A6:A7:6B:3C:A5:AC:B8:43:3D:60:73
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 69A944377BC5E397FC47C389330CBB007F4A0AF8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144093.roa
Signing time: Tue 26 May 2026 08:52:43 +0000
ROA not before: Tue 26 May 2026 08:47:43 +0000
ROA not after: Tue 25 May 2027 08:52:43 +0000
asID: 144093
IP address blocks: 240a:a5a3::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:a9:44:37:7b:c5:e3:97:fc:47:c3:89:33:0c:bb:00:7f:4a:0a:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 08:47:43 2026 GMT
Not After : May 25 08:52:43 2027 GMT
Subject: CN=FF046A5145FE445D31A6A76B3CA5ACB8433D6073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6b:30:a2:6f:20:57:3a:ce:86:82:f8:f0:f1:
1e:99:ee:c5:f1:ac:fc:50:bd:d5:22:3e:9e:97:fb:
51:72:8c:61:c8:1d:12:81:87:8a:e4:e9:56:25:77:
fc:fb:a4:cf:8f:70:7b:61:ed:f5:ce:a1:79:8b:8b:
1e:8e:3d:ee:15:19:fd:2d:c9:af:52:c9:44:a3:3e:
08:eb:1b:2f:29:30:f2:33:72:d2:9d:bb:c3:71:be:
de:47:50:07:c2:c8:a1:d2:b0:5a:88:a0:aa:57:d8:
54:1a:cf:c1:05:62:bf:07:49:f9:0a:fb:a7:29:b9:
41:bc:7c:d5:d1:b2:08:e2:d0:4f:9d:49:67:e9:f2:
42:ce:c2:33:1b:a5:8f:9c:86:25:81:da:e7:8a:da:
60:e1:ad:07:00:4e:69:16:17:71:db:91:ca:8f:d1:
8f:ba:19:6e:cc:3e:5b:f1:1a:92:e1:48:f1:2b:16:
92:ff:d6:ca:c1:e4:99:ed:5d:dc:77:23:58:88:ee:
fb:b7:7f:bf:39:28:dc:17:1e:18:2f:69:aa:d2:b7:
91:66:1b:07:65:3c:a2:b2:04:67:28:1e:c6:ab:e5:
72:fe:09:e2:e2:d4:a2:10:2c:53:87:12:a6:88:3f:
20:89:01:12:aa:49:a8:70:04:a1:7c:5f:8c:5a:6d:
dc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:04:6A:51:45:FE:44:5D:31:A6:A7:6B:3C:A5:AC:B8:43:3D:60:73
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144093.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a5a3::/32
Signature Algorithm: sha256WithRSAEncryption
b7:c5:cb:ca:bf:06:bb:ab:2c:c7:65:7c:af:c5:6d:67:86:b9:
61:b0:76:ef:3a:f6:d3:1b:4b:14:77:89:90:ee:7d:6e:64:6b:
d4:83:c9:b7:58:14:23:8f:45:33:45:4d:c5:3f:fd:10:7c:3d:
4b:c6:55:98:65:00:b1:2c:52:54:fe:a2:fc:2e:fb:a2:df:83:
cb:9b:c5:f6:2a:dd:6f:e6:1a:3b:a6:63:ad:00:50:a4:55:45:
0d:0d:22:76:2a:ba:64:ee:95:07:76:14:88:5d:4c:b5:b0:d9:
df:20:13:f8:81:72:22:1b:cd:e8:b1:65:ef:8e:c9:b4:8f:15:
98:45:3e:9b:42:37:d4:6d:ac:7d:e7:28:f4:d8:b9:41:1b:8d:
79:fe:64:d8:59:15:00:c6:c0:c2:f7:31:45:76:a6:89:27:66:
f2:0e:57:fc:57:0a:ac:dc:96:75:13:64:42:14:e4:bd:72:83:
f0:e7:54:4d:34:f0:7d:42:fb:19:0b:0b:37:fe:13:2f:f8:28:
54:97:bc:a0:ce:f2:30:90:9f:54:b2:b0:c4:e3:be:38:97:57:
c5:12:08:47:c6:38:db:e7:5e:97:40:9a:ce:e3:13:df:9c:d8:
db:ca:d1:53:e9:2d:5b:30:c3:f4:b7:cf:0a:36:99:50:9d:e3:
41:56:85:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:03 2026 by rpki-client