Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144098.roa
File: AS144098.roa (raw, json)
Hash identifier: lL+7zSOz076ty3ijTXInq/iMqn6yEfjx8DfQ2gOHRB4=
Subject key identifier: E3:DA:2F:17:08:FA:59:E3:A2:56:6D:C6:B6:2B:3C:8E:AE:7B:55:2E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4D098F6B5BEEB02BE201CEEB15F18D0325F37E43
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144098.roa
Signing time: Fri 22 May 2026 07:24:46 +0000
ROA not before: Fri 22 May 2026 07:19:46 +0000
ROA not after: Fri 21 May 2027 07:24:46 +0000
asID: 144098
IP address blocks: 240a:a5a8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:09:8f:6b:5b:ee:b0:2b:e2:01:ce:eb:15:f1:8d:03:25:f3:7e:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:46 2026 GMT
Not After : May 21 07:24:46 2027 GMT
Subject: CN=E3DA2F1708FA59E3A2566DC6B62B3C8EAE7B552E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cf:21:5c:76:6b:9c:83:38:07:c7:30:c0:7e:
a8:87:03:e8:d3:ce:34:fb:26:b4:71:73:0a:9f:2c:
93:1c:72:73:df:74:eb:55:f9:74:2d:1e:1c:7f:4e:
e9:44:42:7f:81:08:a3:49:56:c0:7e:72:b2:0a:52:
fd:89:15:db:93:fd:03:5c:d8:b9:fa:da:0d:e2:1b:
f9:9f:bb:78:fe:d6:dc:1c:75:11:de:20:aa:b6:99:
09:1b:f7:25:2b:9d:6f:b8:b5:d9:e1:8a:8f:21:6d:
ce:58:ce:22:5d:5f:e8:e5:38:80:07:17:0b:67:7b:
8a:fa:32:75:91:3f:b3:57:48:83:b9:5a:3c:73:6b:
d5:a0:97:ce:f2:d9:55:e5:7e:90:8f:cb:d8:10:67:
3e:10:69:74:82:7c:c3:76:75:a2:0b:8d:cd:ee:2f:
4b:41:18:e7:fd:18:64:41:de:f7:9c:f3:ea:c9:45:
92:21:b9:08:62:c1:6d:82:8d:88:54:3f:86:e9:b1:
58:8d:74:e3:11:25:2c:1c:07:99:39:99:21:00:93:
5d:f9:5e:3e:1d:6b:ab:03:73:e6:d8:2a:20:b5:23:
f3:76:9b:0f:41:81:1b:2b:4a:d7:bd:fa:1a:70:fc:
c7:37:9f:24:8b:88:b7:de:85:a7:bb:98:1e:76:0b:
c8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:DA:2F:17:08:FA:59:E3:A2:56:6D:C6:B6:2B:3C:8E:AE:7B:55:2E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144098.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a5a8::/32
Signature Algorithm: sha256WithRSAEncryption
3e:80:34:22:d8:44:98:b1:8d:75:77:bf:ff:be:b3:d2:76:f2:
47:ff:4c:8a:29:89:8b:f5:c0:6a:6b:8f:4e:2e:a5:09:8c:db:
be:6b:e3:83:4a:9b:20:92:ff:09:7c:06:fe:9c:01:0a:6a:1e:
65:1e:d1:18:b6:ad:f1:99:69:85:b5:1e:7c:5a:4c:7b:30:e7:
c8:4d:a6:16:6b:d0:14:47:65:2e:c8:72:31:a0:1c:6e:a5:64:
f5:45:b4:22:54:47:32:f8:ab:34:ec:6d:5e:a8:49:40:3e:e3:
24:77:83:e3:61:5f:cd:96:dd:99:8c:4f:fb:e8:e8:78:99:c1:
ca:ff:5f:6a:89:11:c8:d7:bd:83:40:e1:6a:54:83:32:58:ec:
c1:7e:3e:4d:73:34:fd:67:24:e9:60:c5:4c:88:76:a1:ef:59:
28:b9:1c:68:e5:40:fc:8b:4e:77:9e:18:08:27:9f:af:01:3b:
8e:95:57:59:e9:e5:ad:da:02:b9:1d:45:f7:be:e4:48:4c:d0:
94:85:3a:09:fe:ba:34:51:5a:32:9e:66:ec:3a:8e:24:f3:33:
a1:03:d0:89:86:a3:ce:12:1f:fb:21:c5:b8:32:f2:53:f3:df:
c5:a3:ac:5d:c8:a2:91:71:d4:b2:76:c5:0c:7e:b7:58:23:9d:
65:93:8a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:31 2026 by rpki-client