Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144106.roa
File: AS144106.roa (raw, json)
Hash identifier: NyR3phOD7/8lTlsnv0VQm8EHjGoGpHRkQghlKn8SFd0=
Subject key identifier: 6D:70:65:26:AC:9F:08:3B:5A:30:C1:57:89:F8:59:95:F8:05:DA:FE
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4A03495113AE69257FFAE564D792F301CB7849DE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144106.roa
Signing time: Mon 25 May 2026 01:50:59 +0000
ROA not before: Mon 25 May 2026 01:45:59 +0000
ROA not after: Mon 24 May 2027 01:50:59 +0000
asID: 144106
IP address blocks: 240a:a5b0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:03:49:51:13:ae:69:25:7f:fa:e5:64:d7:92:f3:01:cb:78:49:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:45:59 2026 GMT
Not After : May 24 01:50:59 2027 GMT
Subject: CN=6D706526AC9F083B5A30C15789F85995F805DAFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ed:ac:35:83:d7:68:05:59:39:5d:6e:79:42:
44:8f:9d:18:11:d6:81:92:91:25:2c:ec:90:1f:a4:
13:87:85:bd:b6:ca:a1:66:88:db:fc:b4:1b:88:92:
14:6c:16:19:4f:a8:3c:f8:e0:6c:33:3f:4e:9c:dd:
83:3b:31:93:0d:ef:c1:f5:76:99:f6:3d:46:a7:1f:
c2:19:c3:4a:a7:b9:e0:ea:cb:3f:b4:bf:92:e1:16:
b2:d2:24:7d:2c:8f:75:1e:bc:ba:9c:c9:be:1f:f9:
9c:9b:70:ef:7a:e1:3e:26:84:a3:1e:54:35:99:e6:
a2:20:c1:b9:60:5a:aa:97:65:88:c6:96:3d:a1:a2:
e9:6f:36:77:fa:4e:44:7e:04:4b:dc:a3:f6:c3:a4:
3e:fc:2a:cb:79:c0:1d:ea:94:c8:72:30:c8:89:de:
0c:a7:42:9b:74:96:f4:65:59:9e:01:38:c1:d4:11:
f4:fa:76:38:57:f2:41:e4:63:f2:7e:d1:b0:a9:c8:
9d:66:5c:62:a8:03:c5:2d:45:94:13:67:0c:83:ba:
b0:25:f0:c8:51:72:83:1e:70:dd:dc:8a:2e:38:24:
06:f5:6a:cf:14:1b:c3:8e:bd:c9:54:48:bb:d6:a9:
29:b6:d6:aa:bc:4f:e4:26:c0:45:f3:2a:4d:16:f5:
c9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:70:65:26:AC:9F:08:3B:5A:30:C1:57:89:F8:59:95:F8:05:DA:FE
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144106.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a5b0::/32
Signature Algorithm: sha256WithRSAEncryption
13:d8:f0:f4:7f:7a:f0:07:07:7b:93:b1:68:ac:ab:30:37:00:
6d:0c:dd:1a:19:de:74:34:3c:60:22:8b:4a:30:d5:25:94:aa:
91:73:dc:8d:a6:ad:b5:89:12:82:60:54:ae:48:4c:37:c9:22:
ea:fa:ea:02:9a:17:9a:49:bc:32:cc:d5:18:32:01:36:ce:68:
68:cf:24:93:c5:81:0e:65:67:dd:b0:cb:fe:1e:df:75:74:87:
c6:04:eb:5a:a6:b0:fa:3a:9c:9b:23:21:f9:98:85:d3:21:f3:
30:72:5b:a3:81:e4:ed:71:20:a0:92:15:b2:04:c5:c1:97:25:
17:68:34:81:42:47:8f:f3:03:cc:67:b4:c6:70:35:0b:f9:c3:
eb:b2:ab:0c:c8:e2:ac:75:4b:a7:df:79:49:af:57:23:23:31:
5f:33:07:15:05:d1:ac:d3:1f:57:fb:5d:0c:69:27:d3:c1:3d:
e2:c5:18:45:3a:60:2f:49:59:54:ed:9c:e2:3d:f5:46:87:76:
d3:42:50:40:c9:5d:35:e5:83:2c:e3:87:6b:43:bf:19:0c:e6:
a4:e0:7d:7c:61:89:a7:af:97:e8:f1:e9:5e:34:fb:de:6f:27:
6a:94:ca:19:33:b3:88:93:6d:68:33:03:d8:35:d7:68:b4:07:
9d:5e:67:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:53 2026 by rpki-client